Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3634203d3e20323732383531.roa
File:                     323830333a383239303a3a2f33322d3634203d3e20323732383531.roa (raw, json)
Hash identifier:          6fRy+/KdTDyyW1Oue3IRkijFRb2IoCFq5Qf3PjdBb14=
Subject key identifier:   63:01:1A:2D:EF:38:16:E0:E8:20:61:6F:3B:19:72:49:DA:91:A9:92
Certificate issuer:       /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
Certificate serial:       57F0E1C8E12942C8F1EEDEDE401E9C7081BAFF99
Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3634203d3e20323732383531.roa
Signing time:             Tue 05 Mar 2024 18:03:56 +0000
ROA not before:           Tue 05 Mar 2024 17:58:56 +0000
ROA not after:            Tue 04 Mar 2025 18:03:56 +0000
asID:                     272851
IP address blocks:        2803:8290::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f0:e1:c8:e1:29:42:c8:f1:ee:de:de:40:1e:9c:70:81:ba:ff:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
        Validity
            Not Before: Mar  5 17:58:56 2024 GMT
            Not After : Mar  4 18:03:56 2025 GMT
        Subject: CN=63011A2DEF3816E0E820616F3B197249DA91A992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:6e:0d:82:da:4a:7a:82:c3:bd:20:5a:bb:
                    ff:da:15:8f:17:3f:3e:89:fb:c6:8d:bd:be:01:60:
                    b5:a2:40:12:d1:6e:36:52:5b:5a:28:08:d6:80:f9:
                    83:c9:02:03:0d:73:26:b0:e5:13:ed:27:8d:0e:d9:
                    22:63:d9:35:70:ff:5a:02:74:ab:ba:33:a7:c8:e2:
                    1c:24:ff:e0:36:07:6e:7f:64:78:0c:8d:9b:87:80:
                    13:56:2d:b0:03:48:59:99:80:8a:17:77:e3:9d:0d:
                    d5:1e:67:f2:4b:75:d5:48:4e:e8:c3:ad:88:1e:ef:
                    04:a0:f3:38:f6:09:5c:b3:10:36:0f:97:3c:ac:8a:
                    3f:2b:b5:9e:33:8c:1c:1d:e1:1b:bf:79:12:d2:99:
                    4e:37:ed:23:4f:a2:04:ad:fa:f5:c9:28:0b:0c:b4:
                    83:2f:cb:3e:5d:58:78:91:99:c3:35:ea:05:9d:5a:
                    12:2f:73:35:a9:26:27:fa:13:47:78:c8:cc:b0:60:
                    a1:76:ee:22:7e:d5:da:1d:cf:d4:d0:53:f1:f5:4e:
                    ad:af:51:25:0d:0e:36:c3:b5:0f:59:ee:fe:0c:76:
                    d9:e7:d8:56:6f:30:36:50:a4:51:be:9f:28:b3:7d:
                    36:c5:5f:40:6c:bb:52:cd:9e:33:86:5c:26:03:f0:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:1A:2D:EF:38:16:E0:E8:20:61:6F:3B:19:72:49:DA:91:A9:92
            X509v3 Authority Key Identifier:
                keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a3a2f33322d3634203d3e20323732383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8290::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:78:2f:6d:a1:38:5e:91:e2:0a:f0:73:a1:a4:bf:ef:f8:
         33:e1:0d:9d:a6:e2:52:e9:6b:fb:5e:6b:9b:81:69:25:37:8c:
         64:e5:77:75:75:fb:56:82:65:12:17:9d:4a:0c:cb:bb:9c:20:
         20:3c:b2:9a:3d:c3:07:9e:18:01:c2:0e:9f:96:58:d7:9a:dc:
         47:82:db:2e:d8:2c:96:3b:b4:e5:53:53:bf:fc:ed:85:b7:98:
         2f:c4:53:6f:2c:f5:85:1f:7a:dc:31:56:08:95:b1:b0:e2:d0:
         57:87:dd:b1:e4:de:d8:c8:54:db:26:3c:72:3a:f2:2a:dc:15:
         77:fe:42:c8:0f:30:9e:de:6e:9b:bb:77:b5:1f:d2:bf:40:df:
         fa:ee:9d:85:f6:33:55:d4:b5:b5:16:3d:b8:4f:39:ae:48:80:
         4e:7b:c0:1f:e0:48:7b:03:02:86:f2:43:ce:cb:8c:e6:f3:82:
         d9:23:ac:a0:d9:da:f0:90:5a:f8:0a:71:6e:24:1f:43:e7:62:
         e3:69:3d:0e:00:8b:70:4c:37:03:70:65:b3:de:cf:b1:c6:b1:
         9d:0b:01:01:fe:5b:c8:1a:43:8d:4d:e5:3e:6d:76:f3:73:31:
         c7:f8:40:44:96:b4:d1:09:9c:17:da:82:20:02:67:dc:1c:c5:
         bc:39:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:34 2024 by rpki-client on console-ams.rpki-client.org