Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3332203d3e20323733383730.roa
File:                     323830333a316435303a3a2f33322d3332203d3e20323733383730.roa (raw, json)
Hash identifier:          9s6361JDDUKBi94RUtC0/U5Ge1k3ycoMOW2NzpaMheA=
Subject key identifier:   16:B8:E6:A7:79:E5:07:0E:5D:F4:7F:8A:14:51:64:8C:85:0B:0F:3B
Certificate issuer:       /CN=0883966BE5B6856A564CAC730936B0CC5143EE6A
Certificate serial:       6E781EA164F29C8DE144AC91DC07217365CE97BA
Authority key identifier: 08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3332203d3e20323733383730.roa
Signing time:             Sat 07 Sep 2024 00:05:00 +0000
ROA not before:           Sat 07 Sep 2024 00:00:00 +0000
ROA not after:            Sat 06 Sep 2025 00:05:00 +0000
asID:                     273870
IP address blocks:        2803:1d50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:1e:a1:64:f2:9c:8d:e1:44:ac:91:dc:07:21:73:65:ce:97:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0883966BE5B6856A564CAC730936B0CC5143EE6A
        Validity
            Not Before: Sep  7 00:00:00 2024 GMT
            Not After : Sep  6 00:05:00 2025 GMT
        Subject: CN=16B8E6A779E5070E5DF47F8A1451648C850B0F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:20:10:60:fb:2d:ca:17:36:47:dd:62:c7:
                    c9:3c:f4:f5:b2:4b:c7:e9:fe:07:21:50:cd:35:c5:
                    c9:a3:8c:08:aa:84:3a:0f:3a:70:e1:01:71:e4:8b:
                    3a:70:b3:f8:88:c1:8c:a0:76:b8:f1:e2:ab:62:8e:
                    19:f3:7c:c2:2d:32:c1:e9:1c:b6:49:9c:fd:ea:13:
                    f6:5c:4a:ca:9e:3e:56:09:4b:0b:8f:06:a3:68:d0:
                    ca:00:db:79:a1:2e:48:ca:e5:e8:71:7e:a1:2d:45:
                    d7:bd:55:b0:76:8e:8a:16:08:a2:19:7c:b0:24:a3:
                    d0:36:0c:57:2d:95:6a:60:74:28:c3:3b:cc:08:34:
                    a0:a0:cb:18:91:ad:cc:da:5b:ea:a7:03:8f:f6:c6:
                    84:1b:91:01:31:49:0a:78:c1:7b:2a:8f:b2:ac:73:
                    ab:44:a3:a8:ec:0e:42:7f:34:49:e6:11:89:2f:41:
                    57:5a:01:85:52:bc:e2:4d:73:78:e7:b9:ec:33:1e:
                    86:df:c8:28:d1:76:38:36:b0:81:13:fd:78:62:43:
                    5d:6a:02:47:ee:eb:f0:68:6d:a3:e8:b8:7a:36:a5:
                    b0:7f:05:15:f2:ef:b0:c2:6f:50:b5:9f:b2:9b:c7:
                    c1:21:ef:24:ca:d6:0a:a7:83:08:14:68:a6:c7:13:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B8:E6:A7:79:E5:07:0E:5D:F4:7F:8A:14:51:64:8C:85:0B:0F:3B
            X509v3 Authority Key Identifier:
                keyid:08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3332203d3e20323733383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:f8:d0:5f:4a:d6:9c:86:f5:e5:72:8b:00:b0:53:4e:9d:
         3c:2b:a8:27:a3:39:40:fd:a4:95:9b:58:5f:bb:89:f6:ed:b1:
         bd:da:a3:52:41:23:ca:a5:2b:8c:6d:6b:82:c3:2d:0f:8b:73:
         7c:0a:45:56:c1:ba:66:b0:2a:b6:f7:5a:af:8d:14:cb:cd:b0:
         bd:ce:fb:e5:a1:dd:3e:b1:cb:9c:73:1e:df:ac:2f:f7:4e:c1:
         63:ce:16:14:85:ba:71:2d:7b:57:ad:4b:a3:27:73:3a:ef:ec:
         de:8a:84:8e:40:68:51:4f:cd:7f:e0:a8:b1:9e:8e:d0:ab:ed:
         b3:2d:2e:3f:d6:bf:61:c0:f5:1c:be:dd:ec:d0:8a:2e:9d:9e:
         96:c8:2c:60:24:86:f5:90:92:b5:0c:1c:9b:87:89:02:de:21:
         75:cf:bd:c1:00:14:91:4a:8a:1d:5d:96:f7:4d:26:f7:df:f5:
         7f:fd:35:5f:c3:71:f1:25:56:d4:d4:f4:92:c9:62:97:57:92:
         d1:c8:54:5a:d6:23:84:6d:c3:35:38:41:a9:b5:40:42:d9:58:
         ab:42:2c:e1:d4:6a:7f:64:47:2d:76:cc:9f:18:c9:39:8d:23:
         74:ba:cc:55:9d:ce:10:79:30:6e:d1:86:67:e0:43:a7:ad:99:
         78:bc:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:10 2024 by rpki-client on console-fra.rpki-client.org