Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e20323633363930.roa
File:                     323830313a31303a363030303a3a2f34382d3438203d3e20323633363930.roa (raw, json)
Hash identifier:          kA9T52qENByXFrn6Thg4tXWZRpgW3lT3PelQ3KbwsKM=
Subject key identifier:   6B:D9:F2:E6:F3:FC:75:8B:BB:17:75:C8:46:A1:D3:41:6A:26:81:6F
Certificate issuer:       /CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
Certificate serial:       16496C8B7574C45E00EE1195A0ED73DDCF7E0041
Authority key identifier: 7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e20323633363930.roa
Signing time:             Tue 05 Mar 2024 17:50:12 +0000
ROA not before:           Tue 05 Mar 2024 17:45:12 +0000
ROA not after:            Tue 04 Mar 2025 17:50:12 +0000
asID:                     263690
IP address blocks:        2801:10:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:49:6c:8b:75:74:c4:5e:00:ee:11:95:a0:ed:73:dd:cf:7e:00:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
        Validity
            Not Before: Mar  5 17:45:12 2024 GMT
            Not After : Mar  4 17:50:12 2025 GMT
        Subject: CN=6BD9F2E6F3FC758BBB1775C846A1D3416A26816F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:8b:b6:da:62:e2:75:4b:64:0b:7b:c4:a1:
                    6b:4f:81:ff:5c:59:c8:ee:c4:ab:34:54:f9:4b:c8:
                    d0:6d:cf:1c:64:2c:60:05:9f:cb:91:49:7a:60:c9:
                    76:30:9f:bf:d3:cf:6b:e4:ef:25:bf:e2:42:db:8b:
                    8b:fc:90:ca:39:94:fd:90:a2:d5:a8:df:4f:f8:1e:
                    13:f0:16:3d:a3:c1:db:f1:5b:de:c4:4c:3b:73:ed:
                    be:a4:82:59:d1:84:16:bf:d3:b5:e6:86:e3:d3:10:
                    29:4c:0d:28:2f:f7:fd:d7:35:99:8b:cc:b2:09:d5:
                    84:ae:a2:6a:ed:4c:da:ba:44:5f:3f:8b:47:ca:ee:
                    7f:9e:7a:9c:c9:82:34:2e:54:56:be:53:7a:a5:e2:
                    14:cb:31:a9:34:bf:e7:5c:9d:7c:e1:5c:30:cd:01:
                    6c:3a:6e:de:a5:c4:9a:79:3e:8e:f2:5f:47:78:f5:
                    db:7d:05:90:44:59:2a:88:0d:3b:75:9b:3a:66:8f:
                    ce:e7:2b:6b:88:4f:bb:a2:b8:84:bf:68:e4:2d:29:
                    59:19:ea:0a:9d:66:4f:c7:85:45:32:11:ea:14:34:
                    1a:3c:04:00:0b:75:51:d3:40:ed:4d:14:42:f7:a3:
                    e8:6b:24:1b:39:ec:7f:7a:e4:e0:98:07:b2:da:b5:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D9:F2:E6:F3:FC:75:8B:BB:17:75:C8:46:A1:D3:41:6A:26:81:6F
            X509v3 Authority Key Identifier:
                keyid:7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030303a3a2f34382d3438203d3e20323633363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:78:08:7d:5c:9d:f0:cd:a2:3c:f9:18:4a:17:09:cf:b0:02:
         4f:2b:82:f2:60:3a:95:a4:17:55:3e:d7:ed:4e:98:48:bf:01:
         76:14:44:39:68:64:d6:fd:e6:cf:7b:0b:bd:49:17:63:dc:2e:
         db:a6:6c:0b:95:bc:cf:e6:78:fa:ae:ec:5e:2b:9d:c6:be:47:
         b2:b4:7f:f0:eb:53:78:b8:2e:f2:94:18:39:8c:7d:cb:ea:8c:
         30:af:05:72:1b:fa:fb:e2:02:67:38:22:5c:87:ef:9d:b4:93:
         bf:d2:aa:c2:22:13:63:1c:f0:eb:53:5b:46:c3:fa:34:7a:48:
         80:b9:e5:88:f1:9d:29:5f:b3:09:3b:ce:40:38:3b:b0:81:7e:
         32:b7:1a:b6:7f:25:59:e5:ca:4a:9d:1e:19:7d:f3:02:f2:7c:
         12:8a:17:ed:7c:a5:7c:bf:d2:45:c0:89:bf:5f:73:38:ae:56:
         32:f0:a7:f1:e9:04:bc:9e:02:46:4b:b2:51:dd:28:c2:c3:fb:
         d2:b1:b2:58:78:95:8e:f8:78:8f:40:73:74:8b:2a:b8:6e:4a:
         51:bf:b4:51:70:49:46:0a:ca:e1:71:2b:ab:a2:ea:2f:d5:1b:
         e0:3e:39:65:35:ac:46:99:43:98:8b:72:d7:b4:f7:13:37:ce:
         82:9b:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org