Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/323830333a663636303a3a2f33322d3438203d3e20323637393132.roa
File:                     323830333a663636303a3a2f33322d3438203d3e20323637393132.roa (raw, json)
Hash identifier:          +8Zae4cu0N5zaLVITAQdvt/BzpLE591IW0gtKXd8ueU=
Subject key identifier:   BA:65:7A:FB:E3:77:61:93:C5:52:FF:32:9D:9D:93:A1:3E:97:48:95
Certificate issuer:       /CN=CEB2B51AACA01EE582E365F19561EF79882825A8
Certificate serial:       029E4B99293A9163208DF5B4336C025A0525C9F6
Authority key identifier: CE:B2:B5:1A:AC:A0:1E:E5:82:E3:65:F1:95:61:EF:79:88:28:25:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/323830333a663636303a3a2f33322d3438203d3e20323637393132.roa
Signing time:             Tue 05 Mar 2024 18:05:30 +0000
ROA not before:           Tue 05 Mar 2024 18:00:30 +0000
ROA not after:            Tue 04 Mar 2025 18:05:30 +0000
asID:                     267912
IP address blocks:        2803:f660::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9e:4b:99:29:3a:91:63:20:8d:f5:b4:33:6c:02:5a:05:25:c9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEB2B51AACA01EE582E365F19561EF79882825A8
        Validity
            Not Before: Mar  5 18:00:30 2024 GMT
            Not After : Mar  4 18:05:30 2025 GMT
        Subject: CN=BA657AFBE3776193C552FF329D9D93A13E974895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:a9:fb:5c:70:5a:fc:5e:1a:aa:3c:cf:e2:
                    b2:ec:f1:34:b1:ac:50:84:1c:63:08:da:40:be:ac:
                    66:bf:bb:2a:13:c1:a8:6d:11:de:98:ea:2b:bd:4f:
                    c9:26:cb:7e:80:de:df:c0:c1:15:70:33:fa:c0:dd:
                    eb:d3:78:6a:2b:88:ed:aa:93:ad:84:bf:8d:69:11:
                    4a:ae:d9:01:97:aa:2e:1a:51:27:29:9c:2c:55:b8:
                    fe:12:80:47:0e:fc:ad:26:90:e0:f0:cd:82:56:5a:
                    3f:a1:de:17:67:18:42:5f:e5:41:c9:d9:bd:1f:0a:
                    02:63:76:32:5a:fe:f8:f8:17:3e:54:bb:8f:fc:38:
                    c4:4e:81:2f:f0:8b:b6:e6:4d:e1:e4:2f:cf:67:d6:
                    ab:60:65:f1:e5:af:fe:0c:a8:32:2d:5b:2f:9b:7c:
                    9c:da:d1:e3:46:e9:8b:f3:79:30:44:21:23:86:0f:
                    a5:40:21:60:e1:5e:f3:af:ff:09:9c:f8:a5:b2:fd:
                    42:fb:da:6d:76:3c:22:c5:fa:11:54:35:31:dd:8f:
                    72:6e:dd:88:95:d2:57:36:f1:f8:b8:23:98:2d:bf:
                    d2:e1:d2:c4:cd:7a:45:00:c3:45:f2:35:1a:73:3f:
                    e8:d1:47:d0:a4:1a:9e:83:7f:98:8e:2f:61:45:61:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:65:7A:FB:E3:77:61:93:C5:52:FF:32:9D:9D:93:A1:3E:97:48:95
            X509v3 Authority Key Identifier:
                keyid:CE:B2:B5:1A:AC:A0:1E:E5:82:E3:65:F1:95:61:EF:79:88:28:25:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/323830333a663636303a3a2f33322d3438203d3e20323637393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f660::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:22:ff:3e:55:07:1e:7c:07:d5:97:66:71:cc:0f:af:1d:26:
         74:39:2e:01:f7:ad:b1:11:32:15:7d:d8:b4:5b:a8:14:5e:5b:
         fa:ea:f1:17:61:7c:8e:24:da:bd:07:df:c4:7a:cf:a7:1b:ca:
         d6:1d:4c:7a:3a:23:b5:1f:03:54:4b:16:ff:31:18:6e:76:16:
         af:f8:52:51:57:89:e9:2c:06:d6:11:d3:c9:46:ac:3e:6e:a3:
         bb:2f:c3:a2:51:aa:c8:f0:a8:f3:69:7c:eb:c2:bc:f1:ef:8a:
         4e:6e:eb:a2:cc:e2:12:59:1d:97:ea:4f:66:61:fb:67:32:57:
         bf:0e:2a:8f:e9:6a:e7:5a:21:77:4b:91:c6:de:72:1c:27:ea:
         b2:33:8a:75:9f:1b:1d:e3:0c:57:9f:10:83:1b:58:15:77:c0:
         95:3e:4e:23:1e:f2:c1:32:20:af:d5:03:f0:8e:3f:8e:8b:19:
         76:03:b2:0b:89:60:5e:4f:0b:54:74:04:77:6a:ef:08:90:57:
         f9:3e:1f:46:92:e3:46:bd:65:18:f4:64:e3:1e:9f:79:ee:2b:
         dd:fc:20:70:b4:c9:1e:61:b3:56:94:12:9d:a9:42:8f:a0:f4:
         87:01:27:23:ba:66:28:c2:20:5e:32:2e:6b:44:56:f4:5c:fb:
         70:0c:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:37:26 2024 by rpki-client on console-ams.rpki-client.org