Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/323830333a386565303a3a2f33322d3332203d3e20323639393739.roa
File:                     323830333a386565303a3a2f33322d3332203d3e20323639393739.roa (raw, json)
Hash identifier:          +i4TmDli8USeD95VXbkf4yQlQ2kR4hvM2zAD/OsKZf4=
Subject key identifier:   AE:21:DF:8A:0D:5D:DD:77:8D:0D:FE:35:F9:69:55:E1:58:A3:C7:9C
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       609633DCFEDC59445140A613131196F3597F1930
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/323830333a386565303a3a2f33322d3332203d3e20323639393739.roa
Signing time:             Tue 17 Sep 2024 11:55:00 +0000
ROA not before:           Tue 17 Sep 2024 11:50:00 +0000
ROA not after:            Tue 16 Sep 2025 11:55:00 +0000
asID:                     269979
IP address blocks:        2803:8ee0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:96:33:dc:fe:dc:59:44:51:40:a6:13:13:11:96:f3:59:7f:19:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Sep 17 11:50:00 2024 GMT
            Not After : Sep 16 11:55:00 2025 GMT
        Subject: CN=AE21DF8A0D5DDD778D0DFE35F96955E158A3C79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:f9:07:52:78:ad:d1:2c:2f:80:02:4b:b7:
                    17:3a:58:d9:e1:95:0d:32:cc:9d:0f:75:0e:b6:c9:
                    03:87:a7:5c:4e:24:14:9d:9e:2f:41:16:bb:d2:bc:
                    74:32:7f:77:2b:69:2a:6f:30:62:39:b9:59:61:3e:
                    44:ee:ae:fd:61:99:6e:44:37:9a:20:26:c3:c1:b8:
                    26:ce:f6:21:38:d3:9b:d3:84:21:41:b1:af:a7:f2:
                    04:01:63:46:a7:13:ed:ea:35:c0:72:54:3a:2c:ea:
                    05:ad:8c:cf:30:38:9b:b2:e8:e5:44:e5:2a:23:1a:
                    ba:a4:27:76:3b:a5:d6:67:b0:00:2d:90:f4:38:4e:
                    20:bf:d3:c5:15:b4:51:f7:06:fe:3b:3a:82:66:4f:
                    f2:f7:19:f1:cc:3a:04:f8:8d:41:7a:d7:a5:e9:86:
                    a4:93:2f:b8:f2:1e:87:ca:db:0f:59:4d:b9:ec:67:
                    4a:13:61:49:d0:b3:1d:52:54:32:f7:1f:55:2e:36:
                    ea:78:e4:c4:50:b8:58:b5:62:ac:a7:85:95:bc:a3:
                    7f:54:06:af:18:43:5e:38:4d:a8:f5:cc:db:7a:57:
                    6d:6c:69:0c:06:50:65:f6:d1:f6:93:a5:fc:cb:85:
                    b6:4d:ae:cf:0f:f6:73:72:61:9d:9d:49:8e:20:f7:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:DF:8A:0D:5D:DD:77:8D:0D:FE:35:F9:69:55:E1:58:A3:C7:9C
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/323830333a386565303a3a2f33322d3332203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:dc:c5:50:38:6c:a3:e4:a4:12:da:c7:54:85:a0:16:23:
         22:0c:3d:ae:2e:e4:30:43:01:72:cb:d0:13:62:e7:2a:e3:72:
         0f:ba:3e:cc:84:51:5c:a0:de:11:15:49:68:5b:7f:51:f8:ed:
         7c:d9:5d:29:0b:22:5c:20:c8:ba:62:b7:4b:de:d0:48:f7:a4:
         c7:7c:09:49:15:ef:46:e5:20:1d:95:2b:6c:ee:16:b0:04:c1:
         e9:20:9e:b1:85:d5:d4:6f:73:7b:69:54:ca:22:9f:72:be:84:
         0a:ed:16:e0:4b:77:37:03:51:98:26:cd:7a:41:3a:0d:69:be:
         da:91:35:a7:56:69:ba:72:e0:40:43:ed:ac:4f:3a:89:a4:ff:
         27:2f:36:cb:f2:82:ce:4a:e2:40:c6:79:31:2a:56:0e:f3:fa:
         0a:66:fd:48:ec:57:d9:73:05:47:ae:74:fd:dc:dc:96:74:4e:
         84:4d:b8:49:86:80:1a:db:b9:c7:5b:ac:1e:d5:34:e3:aa:50:
         3c:a1:48:7c:86:64:3f:d4:5d:66:79:e2:19:62:c8:f8:ac:2e:
         8f:61:a5:f4:35:92:d0:77:f7:b0:27:bc:e2:22:59:e4:7f:cd:
         2a:1c:58:f3:ce:93:51:13:9e:d6:dc:36:ac:c1:79:a2:c6:d3:
         84:29:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org