Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030383a3a2f34352d3435203d3e20323633363930.roa
File:                     323830313a31303a363030383a3a2f34352d3435203d3e20323633363930.roa (raw, json)
Hash identifier:          s3acClrkfZnJEucYt3Gc4iDCdlVGih+Tg6cwUo7diS4=
Subject key identifier:   EA:A4:1D:08:8D:AD:EE:E3:1B:10:E2:06:5A:58:F1:60:3B:82:96:3B
Certificate issuer:       /CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
Certificate serial:       332F4EBC81EA8F433202A977CBE0D720A61EAC34
Authority key identifier: 7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030383a3a2f34352d3435203d3e20323633363930.roa
Signing time:             Tue 05 Mar 2024 17:50:12 +0000
ROA not before:           Tue 05 Mar 2024 17:45:12 +0000
ROA not after:            Tue 04 Mar 2025 17:50:12 +0000
asID:                     263690
IP address blocks:        2801:10:6008::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2f:4e:bc:81:ea:8f:43:32:02:a9:77:cb:e0:d7:20:a6:1e:ac:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
        Validity
            Not Before: Mar  5 17:45:12 2024 GMT
            Not After : Mar  4 17:50:12 2025 GMT
        Subject: CN=EAA41D088DADEEE31B10E2065A58F1603B82963B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:8e:23:40:cc:9f:dc:ef:0c:2c:38:20:49:
                    9a:04:1b:49:38:ed:02:d4:c0:33:8b:72:6d:7c:46:
                    d4:a9:10:43:41:b7:c7:03:44:ea:95:35:df:d7:46:
                    81:2a:2c:d2:fa:8c:ff:42:56:90:e5:a4:d6:f2:a7:
                    53:a3:f8:7e:18:76:dd:2e:94:6a:4c:c2:13:f1:13:
                    e3:b7:13:c5:59:b1:10:97:43:dc:13:81:f0:18:75:
                    36:06:13:02:00:06:58:c8:4d:34:9e:7e:f9:32:ac:
                    3d:c5:be:5d:bc:96:de:f8:60:c1:86:dd:80:a7:fd:
                    c1:ff:74:df:ee:2b:90:18:fd:ad:13:95:9d:8c:e6:
                    6f:73:e1:5a:cb:93:91:1e:43:97:d1:97:9d:5b:f4:
                    b1:6f:7a:80:a8:41:01:7b:ff:4e:67:26:35:d1:5a:
                    a2:6a:e4:35:7c:3e:78:a9:74:fb:6f:2b:bd:75:e3:
                    95:18:39:d6:9f:a7:1f:6a:c5:b5:bc:fb:60:c2:03:
                    14:f4:40:c8:a8:1f:2e:1d:9b:8a:6a:6a:fa:b1:53:
                    c8:a4:06:6b:7e:32:d6:a7:36:c0:b4:b0:a0:6b:4c:
                    cb:e5:c5:4d:8a:ae:de:35:b7:80:d7:f0:a6:86:bb:
                    0c:5f:34:a0:71:29:3f:18:d2:31:9f:63:ff:46:9d:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A4:1D:08:8D:AD:EE:E3:1B:10:E2:06:5A:58:F1:60:3B:82:96:3B
            X509v3 Authority Key Identifier:
                keyid:7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/323830313a31303a363030383a3a2f34352d3435203d3e20323633363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6008::/45

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:4d:b7:07:44:b2:07:15:e0:aa:03:dd:af:09:52:a3:99:
         74:ee:97:73:6c:b5:fc:02:95:07:66:10:1b:9a:7d:61:ec:fe:
         7b:c9:f0:a2:12:b8:9e:80:12:74:12:6d:e4:99:2d:c9:6e:29:
         39:47:15:45:ba:f3:cc:ad:11:50:25:4d:4f:5f:e6:34:eb:21:
         32:4e:0e:bf:bb:33:1e:a8:a7:a0:16:5c:a2:9e:d6:fd:c8:54:
         8f:23:02:b3:2f:0c:b0:dd:35:2b:a6:74:0d:39:d6:af:01:b5:
         b6:cb:25:32:02:27:88:0d:05:a5:b9:bd:03:63:a7:b3:26:b4:
         d1:6c:f5:d6:14:65:2e:21:ae:3d:e5:f2:cc:8c:95:fc:41:14:
         63:2f:4a:df:95:09:3e:d8:fe:ba:cd:7f:59:c5:6d:6d:42:6e:
         02:81:4a:18:ac:31:42:35:d2:49:78:cf:62:97:1f:c7:ae:c2:
         a9:36:05:cd:1e:a4:f2:32:2c:85:0f:a0:42:8e:70:e9:7a:8f:
         48:84:14:67:c8:20:d2:b7:37:06:38:b2:8d:2a:ff:76:03:02:
         ad:7d:b2:3a:9e:af:e6:f8:35:d1:7c:ab:af:5e:2f:b8:5b:b3:
         77:e7:14:97:23:99:a0:34:9f:c4:74:2e:8f:5f:59:a4:8b:09:
         2a:07:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org