Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/323830333a6238303a3a2f33322d3438203d3e203237393330.roa
File:                     323830333a6238303a3a2f33322d3438203d3e203237393330.roa (raw, json)
Hash identifier:          ENIhrf5tYM/wewC5RHiK8J7oQDdAeTE69pHCwft99Dk=
Subject key identifier:   D9:31:32:34:B3:AE:D4:3B:19:60:18:B3:F3:5D:BB:6D:01:04:9B:34
Certificate issuer:       /CN=B351C9CE7CE0D4DEB6D594AC423842D3729A0807
Certificate serial:       1F842CAEC486F766E3F993D5AB56581795A32FCA
Authority key identifier: B3:51:C9:CE:7C:E0:D4:DE:B6:D5:94:AC:42:38:42:D3:72:9A:08:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/323830333a6238303a3a2f33322d3438203d3e203237393330.roa
Signing time:             Tue 05 Mar 2024 17:47:50 +0000
ROA not before:           Tue 05 Mar 2024 17:42:50 +0000
ROA not after:            Tue 04 Mar 2025 17:47:50 +0000
asID:                     27930
IP address blocks:        2803:b80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:84:2c:ae:c4:86:f7:66:e3:f9:93:d5:ab:56:58:17:95:a3:2f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B351C9CE7CE0D4DEB6D594AC423842D3729A0807
        Validity
            Not Before: Mar  5 17:42:50 2024 GMT
            Not After : Mar  4 17:47:50 2025 GMT
        Subject: CN=D9313234B3AED43B196018B3F35DBB6D01049B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:17:6d:46:e2:d5:94:8f:69:65:24:14:70:
                    06:cc:8b:4c:5a:82:44:d9:a9:5f:43:6e:02:5c:0d:
                    38:30:a9:21:58:a0:a5:80:8f:e8:54:48:42:22:77:
                    d8:6e:2d:e0:90:0a:ed:6a:c1:04:db:3f:3c:c2:b0:
                    7b:1f:ab:d2:03:53:75:77:f9:50:50:d8:fb:d4:14:
                    a1:f5:67:dc:b5:7d:45:ba:ef:c1:c8:f3:3b:d3:72:
                    88:31:b8:91:f5:1a:d8:a4:4a:9e:c7:29:2a:8e:ac:
                    8f:df:d6:9f:a0:5f:b1:b5:b3:57:9f:aa:c5:3a:6e:
                    3f:0e:3f:29:28:00:1c:45:85:92:ec:92:04:7f:ce:
                    53:c4:e1:24:2c:eb:83:9c:7e:f3:ba:68:9b:fd:f0:
                    d2:18:8d:b2:1c:22:b1:b1:e1:f7:55:e6:e6:5e:f7:
                    12:2b:97:b0:42:db:e6:43:07:8d:a1:f6:8f:a4:7b:
                    19:c7:f2:84:7e:5a:18:28:92:f1:16:01:89:cf:b7:
                    9c:ae:af:d6:a0:35:c5:c1:1b:b7:b9:8d:7e:84:66:
                    a6:8e:49:c3:1a:c0:c9:28:79:fd:b1:52:b4:9e:cc:
                    db:3a:f5:3b:51:b4:15:49:8e:9a:a7:10:fa:e0:15:
                    b8:0b:f4:0a:fd:96:10:f6:68:3c:25:e9:a3:f9:db:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:31:32:34:B3:AE:D4:3B:19:60:18:B3:F3:5D:BB:6D:01:04:9B:34
            X509v3 Authority Key Identifier:
                keyid:B3:51:C9:CE:7C:E0:D4:DE:B6:D5:94:AC:42:38:42:D3:72:9A:08:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/323830333a6238303a3a2f33322d3438203d3e203237393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:57:e9:b5:3c:48:86:59:fa:a7:4c:16:0c:d0:5c:ee:8a:14:
         33:5d:fa:7f:51:cd:be:f9:5b:e6:09:33:11:06:f8:ca:02:65:
         96:3c:6d:17:b1:cf:d4:c8:6b:f1:20:8d:46:c8:e5:03:df:77:
         d9:bb:cb:c7:06:f1:12:78:48:e8:37:5d:77:6c:3e:1e:cf:7f:
         40:49:e5:b5:6f:28:ac:99:8a:55:de:7f:4b:0c:71:ed:9d:f5:
         25:35:c4:90:e0:27:4b:4c:46:f4:52:5b:0c:0d:4b:7a:0b:8e:
         7c:74:2a:24:db:e1:04:c8:aa:ed:a8:f1:66:2a:64:05:05:35:
         98:cf:e3:84:3f:c7:cb:92:20:b8:4d:a9:b4:82:3c:eb:50:dd:
         f5:72:ab:26:e9:45:db:d4:03:a1:61:71:49:d9:0e:57:89:3a:
         3a:c6:1f:70:28:98:f0:de:2f:58:43:f4:ac:e3:38:1a:8d:91:
         41:75:4e:95:5b:89:a3:31:29:13:a9:6a:6f:0b:ff:51:68:d2:
         33:71:10:ae:b5:91:52:75:9d:8c:17:48:da:8d:56:05:b8:df:
         90:66:88:19:69:15:86:b8:75:08:1f:30:0f:c8:35:c1:49:6c:
         47:0c:8c:35:2e:9a:2e:e6:65:f7:fa:9a:55:a0:22:5a:03:94:
         58:7c:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:46:56 2024 by rpki-client on console-fra.rpki-client.org