Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/323830333a376432303a3a2f33322d3438203d3e20323639373530.roa
File:                     323830333a376432303a3a2f33322d3438203d3e20323639373530.roa (raw, json)
Hash identifier:          AULzxjV6djtO/SZXbDqroTc6J3S7g1k/ukXLRv1TJLc=
Subject key identifier:   6A:11:E1:2D:A4:1D:2E:37:36:6B:F9:2B:A7:52:CD:18:C5:C4:57:3D
Certificate issuer:       /CN=75812974A06BBC586C8B2B8774FD236214956CF8
Certificate serial:       383005FCF29E91EC3F1A717E5E1C5FA279C331AB
Authority key identifier: 75:81:29:74:A0:6B:BC:58:6C:8B:2B:87:74:FD:23:62:14:95:6C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/323830333a376432303a3a2f33322d3438203d3e20323639373530.roa
Signing time:             Tue 21 May 2024 17:55:00 +0000
ROA not before:           Tue 21 May 2024 17:50:00 +0000
ROA not after:            Tue 20 May 2025 17:55:00 +0000
asID:                     269750
IP address blocks:        2803:7d20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:30:05:fc:f2:9e:91:ec:3f:1a:71:7e:5e:1c:5f:a2:79:c3:31:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75812974A06BBC586C8B2B8774FD236214956CF8
        Validity
            Not Before: May 21 17:50:00 2024 GMT
            Not After : May 20 17:55:00 2025 GMT
        Subject: CN=6A11E12DA41D2E37366BF92BA752CD18C5C4573D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:f5:7b:48:9f:ec:e3:49:9e:94:da:b6:66:
                    67:a7:ec:e3:9b:8e:be:e8:d1:b2:16:e0:15:64:00:
                    6c:a4:ad:53:a5:f9:45:60:97:d2:86:29:bc:26:2d:
                    f8:ae:60:15:94:f2:1f:a2:93:4c:0d:5f:bc:94:22:
                    25:d7:c0:e1:da:7f:6d:e5:57:3b:6c:ac:cc:8b:7f:
                    9b:9c:c4:68:18:2c:2a:ef:8f:fd:04:56:62:ed:c2:
                    c9:29:04:ee:ed:67:59:f1:6a:14:36:2c:64:b3:a4:
                    3c:b2:a9:45:5b:f4:b3:cd:f9:6a:a7:e2:19:fb:06:
                    26:c0:c3:a6:51:fb:88:a9:8f:75:a3:f6:1e:8d:e2:
                    6b:66:c0:a4:0f:d7:9e:01:f9:20:44:f4:ac:45:b9:
                    c0:6d:62:71:5e:04:28:b4:1e:45:db:11:01:bf:c8:
                    71:0a:67:d2:8f:c6:67:5f:fe:d3:b8:88:f5:b2:90:
                    2f:a4:46:17:19:71:c0:34:e3:d6:50:62:6b:0d:8d:
                    81:4e:20:08:e5:73:95:ca:64:ce:34:62:24:43:cb:
                    9a:c2:13:dc:f6:2c:f4:7f:28:3f:45:10:24:bd:94:
                    c3:36:1f:66:bc:fb:17:71:4e:18:28:bd:0c:ed:76:
                    50:76:36:53:9c:15:62:9c:9b:84:26:e7:71:6a:d7:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:11:E1:2D:A4:1D:2E:37:36:6B:F9:2B:A7:52:CD:18:C5:C4:57:3D
            X509v3 Authority Key Identifier:
                keyid:75:81:29:74:A0:6B:BC:58:6C:8B:2B:87:74:FD:23:62:14:95:6C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/323830333a376432303a3a2f33322d3438203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:f3:ba:57:be:4e:d5:4b:4f:5d:3a:b6:d1:a8:9d:24:7d:
         6d:cd:a5:12:ee:80:2c:23:4e:70:80:3d:cd:73:4f:47:18:c2:
         85:fd:3b:22:56:bf:b2:61:28:6e:ff:7b:f3:df:e0:ee:ff:f4:
         9a:ef:d4:7d:d8:03:2c:de:12:3e:de:cc:e5:ec:08:36:37:ce:
         fe:ba:5a:c5:33:e3:00:f4:56:63:88:95:5f:d4:58:3e:be:8e:
         d8:2a:2c:56:cb:46:4e:33:a0:10:58:9a:88:1b:4e:30:35:d0:
         14:9e:2a:da:aa:7d:45:68:5f:18:bd:ed:9d:c2:98:b9:a9:d0:
         b0:c0:99:f4:ca:b3:91:a7:04:55:cf:81:0b:ed:12:54:ef:d3:
         91:e2:45:49:3d:d7:3e:54:34:f2:01:62:a1:fe:46:08:39:60:
         61:93:58:ec:eb:e9:c5:b6:a1:c0:3e:cb:c6:3f:ab:85:53:70:
         9d:fc:e9:37:78:83:df:d4:0c:d5:6a:f9:e4:34:10:82:ab:43:
         3c:e8:8b:a4:d9:2b:95:9a:b2:cc:e5:d5:b7:1d:4d:c6:9c:dd:
         7f:db:bb:7e:4e:0a:77:f1:b4:c9:1e:ec:8d:6a:08:cb:d3:9f:
         c2:f0:54:e7:57:1b:f7:0f:e9:df:21:af:5c:3a:0c:80:50:d6:
         e3:88:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:29 2024 by rpki-client on console-ams.rpki-client.org