Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363431343a3a2f34382d3438203d3e20323732383438.roa
File:                     323830333a636436303a363431343a3a2f34382d3438203d3e20323732383438.roa (raw, json)
Hash identifier:          8HbAU5ozMZ9nfmmU1yg/q0jE2NiEdpX3E2yc50s33fw=
Subject key identifier:   BB:E6:C3:E7:B5:C2:56:09:1F:81:BC:4B:7C:C1:B0:79:93:DD:A4:CE
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       73AC92D71A2D76C3F4B393B236ADCDC03CC6E346
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363431343a3a2f34382d3438203d3e20323732383438.roa
Signing time:             Tue 05 Mar 2024 18:04:47 +0000
ROA not before:           Tue 05 Mar 2024 17:59:47 +0000
ROA not after:            Tue 04 Mar 2025 18:04:47 +0000
asID:                     272848
IP address blocks:        2803:cd60:6414::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 May 2024 15:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ac:92:d7:1a:2d:76:c3:f4:b3:93:b2:36:ad:cd:c0:3c:c6:e3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Mar  5 17:59:47 2024 GMT
            Not After : Mar  4 18:04:47 2025 GMT
        Subject: CN=BBE6C3E7B5C256091F81BC4B7CC1B07993DDA4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e2:34:9d:c1:f7:7d:2a:14:0a:c9:ff:e8:22:
                    f9:41:31:5f:d5:3a:05:08:b5:16:6c:06:16:a4:7b:
                    47:36:0f:2b:e0:1b:31:b8:06:71:c0:d3:a5:41:92:
                    04:e6:5b:94:27:87:6d:1b:87:7e:74:b7:a8:7f:f9:
                    92:dc:bd:fd:0f:27:42:79:66:5e:7f:6f:63:36:57:
                    98:86:9a:f6:53:2a:bc:34:ea:51:42:9a:2d:76:72:
                    8c:8b:72:83:52:dd:5c:f7:57:ca:b4:02:5b:be:30:
                    f9:0a:c8:1a:f7:fa:6b:ca:2b:04:88:b0:06:84:7f:
                    03:5a:0c:97:c7:de:d7:89:a9:52:f5:81:fb:48:84:
                    b7:b0:cb:dd:ac:be:18:15:45:a0:81:8f:7d:3d:54:
                    ac:b0:d1:52:f7:56:d7:d7:e3:1a:84:11:f7:3b:76:
                    98:22:08:1a:29:e7:cc:70:06:8d:8d:72:e3:d4:12:
                    23:a0:77:a7:d3:08:99:ce:bb:7a:d7:55:6a:44:83:
                    4a:61:56:ea:3b:91:97:e0:fb:fa:d2:a3:64:f9:a2:
                    60:82:c0:ba:b2:8e:94:87:8d:90:d7:aa:7a:98:55:
                    8b:8f:04:71:e7:fd:64:3a:a7:4c:e4:d0:9f:0f:17:
                    6e:01:8d:a7:c1:ec:32:80:32:fe:fd:1f:6e:cf:93:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E6:C3:E7:B5:C2:56:09:1F:81:BC:4B:7C:C1:B0:79:93:DD:A4:CE
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363431343a3a2f34382d3438203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60:6414::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:a0:61:70:df:c1:38:52:43:cd:2a:c7:54:fe:96:4e:59:f0:
         1f:06:61:bb:e8:3a:67:2c:80:f9:cc:63:cb:9a:82:a0:a3:be:
         a6:06:2e:40:53:c1:93:46:cd:fb:ef:88:d1:cd:c9:8f:09:6b:
         86:bc:90:72:cd:f2:f1:f5:43:3b:22:8b:f9:32:b7:f8:2d:73:
         34:6c:8b:e6:26:25:45:bc:47:4f:e6:f9:69:1b:97:34:04:fb:
         89:6e:88:73:0f:87:82:6e:ca:51:b8:1f:13:d9:bd:43:c8:e8:
         14:05:66:54:f6:10:67:3b:bb:a0:12:22:c7:34:71:84:5e:82:
         08:89:ff:cf:1d:66:1d:a6:b2:e7:a3:f3:1f:3b:96:9b:47:bd:
         73:60:2e:80:68:c4:77:2e:0f:f7:d4:60:3a:39:77:21:43:7c:
         e4:09:ea:cb:34:fe:72:a4:3c:61:50:49:6a:dd:c2:49:37:8f:
         15:84:cc:61:6e:94:15:6e:de:1f:d8:99:9b:9b:9b:9a:2b:98:
         02:b1:50:6b:a0:7f:23:31:0c:57:de:c1:19:29:d2:28:19:e0:
         84:bd:9f:7a:18:ba:bf:f7:75:4a:1e:a3:b0:c4:10:25:45:73:
         fa:0e:96:3d:3b:f1:7a:ef:ad:52:eb:26:a9:ce:25:7e:4b:d0:
         da:a7:fc:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 15 14:53:47 2024 by rpki-client on console-fra.rpki-client.org