Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa
File:                     323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa (raw, json)
Hash identifier:          0kzneLCLBpceFzSKdEIWtbMvjR0l6Udd+98OJf8Nmwk=
Subject key identifier:   A6:40:89:53:52:AA:68:B5:56:49:15:26:75:E1:FE:52:BC:59:3D:5A
Certificate issuer:       /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
Certificate serial:       1B6C2D5AAEF2E1395E899FE4F6B667B99841A8F6
Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa
Signing time:             Sat 06 Apr 2024 14:50:00 +0000
ROA not before:           Sat 06 Apr 2024 14:45:00 +0000
ROA not after:            Sat 05 Apr 2025 14:50:00 +0000
asID:                     14618
IP address blocks:        2803:8290:fffa::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6c:2d:5a:ae:f2:e1:39:5e:89:9f:e4:f6:b6:67:b9:98:41:a8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
        Validity
            Not Before: Apr  6 14:45:00 2024 GMT
            Not After : Apr  5 14:50:00 2025 GMT
        Subject: CN=A640895352AA68B55649152675E1FE52BC593D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:33:2b:0d:a0:eb:c7:db:aa:20:3b:3d:df:
                    98:d5:45:f7:0f:9a:c1:0e:36:a5:35:ee:b5:0c:28:
                    08:5c:95:ff:7e:38:b5:0a:9a:0d:ef:01:b2:6b:d2:
                    d3:f4:09:d8:0d:a5:61:cb:03:7d:35:36:d9:cf:0b:
                    df:08:2d:31:81:04:87:ed:c7:a2:42:0c:68:60:d6:
                    4a:be:a3:b9:5f:2c:d3:3b:c5:ef:1b:af:7c:a4:db:
                    fb:01:89:65:1b:dc:21:01:f8:c0:d2:13:fc:e3:d3:
                    31:4e:d0:13:41:ab:7b:05:76:a6:5d:ec:a0:32:e9:
                    6a:4a:99:cc:3a:66:98:3e:9c:a1:1f:ab:bf:98:92:
                    9c:76:2f:70:38:2f:89:06:01:cf:26:49:f4:26:fa:
                    fb:4e:40:34:c1:e4:50:ed:80:a4:bb:dc:65:d1:37:
                    e0:3d:87:a6:77:0c:a9:3e:7a:0c:d9:f8:bf:24:f1:
                    94:11:e8:99:5b:14:2c:f5:ed:75:2c:4a:4a:b0:99:
                    c6:46:8a:ad:80:b8:ad:97:c2:ef:43:fc:31:1e:b7:
                    37:3d:65:7d:00:db:83:e3:de:95:92:35:12:0c:d5:
                    a6:c0:c2:30:2f:65:e3:19:4d:db:51:12:1c:3f:30:
                    bb:bb:29:89:23:d5:05:07:16:02:c9:8d:46:69:f8:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:40:89:53:52:AA:68:B5:56:49:15:26:75:E1:FE:52:BC:59:3D:5A
            X509v3 Authority Key Identifier:
                keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8290:fffa::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:7b:d3:75:fc:51:28:f6:d6:f0:10:f0:f8:dd:bf:bc:5b:
         24:bb:db:ea:c8:36:73:c1:59:5a:f8:af:5e:b8:e6:fd:7c:02:
         04:c3:e6:d8:9a:6d:05:da:0f:d6:8b:29:61:20:9b:59:4a:94:
         b1:b4:29:4f:85:34:42:14:9b:fc:e8:5e:da:d9:09:c7:bd:0f:
         a8:ff:aa:9f:4a:ad:11:54:c8:18:c9:16:2c:60:63:e9:72:30:
         18:f1:1d:9e:55:4d:19:89:02:f6:c1:b0:96:17:6a:6f:32:7e:
         d3:b7:e8:b0:c3:ef:f1:5c:68:9b:bd:1e:e6:10:35:8d:69:29:
         9e:3d:6c:84:20:b8:10:1f:7c:b2:a6:c1:cd:d1:9b:83:b7:02:
         ee:1a:19:51:3c:39:6e:20:bd:4e:65:58:ee:26:24:04:98:a1:
         38:5d:1d:6c:d4:95:96:15:bf:70:e7:bf:f9:37:cc:bd:77:d5:
         2c:5f:ab:ba:32:84:75:2d:2c:7e:4b:95:28:36:34:9d:db:2e:
         b4:e6:9c:1d:a5:7b:0b:0a:47:65:e8:73:57:f0:61:f4:1c:e2:
         aa:93:1a:0d:68:1c:19:48:d7:2d:19:2f:0c:9d:81:31:b6:05:
         ae:96:8d:77:07:e6:53:9b:63:c5:34:aa:8c:ef:70:a8:35:0d:
         26:d2:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org