Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/323830333a383932303a3a2f33322d3438203d3e20323636363733.roa
File:                     323830333a383932303a3a2f33322d3438203d3e20323636363733.roa (raw, json)
Hash identifier:          6LNSbeUceQwfHnm8UVi6E8CVPnPrpZcJOQUdMiBQK10=
Subject key identifier:   CA:8A:BD:78:A1:5B:A0:1B:0E:17:01:0A:14:DD:9E:0A:B0:CF:CE:56
Certificate issuer:       /CN=D762BD634950F86F90198996258F5C888AE2933E
Certificate serial:       4C3EEC7C163B29D00FF2927C3DB3A858A3F5231F
Authority key identifier: D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/323830333a383932303a3a2f33322d3438203d3e20323636363733.roa
Signing time:             Tue 21 May 2024 03:50:00 +0000
ROA not before:           Tue 21 May 2024 03:45:00 +0000
ROA not after:            Tue 20 May 2025 03:50:00 +0000
asID:                     266673
IP address blocks:        2803:8920::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3e:ec:7c:16:3b:29:d0:0f:f2:92:7c:3d:b3:a8:58:a3:f5:23:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D762BD634950F86F90198996258F5C888AE2933E
        Validity
            Not Before: May 21 03:45:00 2024 GMT
            Not After : May 20 03:50:00 2025 GMT
        Subject: CN=CA8ABD78A15BA01B0E17010A14DD9E0AB0CFCE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:27:79:06:57:73:a7:96:51:f3:73:a3:2b:
                    99:9e:02:ef:07:31:97:19:4d:b7:22:ff:08:e7:50:
                    c3:3c:3d:29:34:59:df:f8:62:39:b0:e0:86:d9:3b:
                    a0:1a:a5:e2:a0:81:9f:e5:b4:c7:71:26:1f:65:77:
                    65:9e:95:ff:3d:bd:38:7e:66:27:db:fd:4c:79:7e:
                    0a:8b:34:75:c0:88:08:c1:0f:1c:74:d3:65:24:eb:
                    37:58:2d:2b:37:82:14:b8:69:19:3d:c0:03:a0:85:
                    d6:83:5d:02:d7:52:64:8c:33:72:5e:fe:21:d2:21:
                    9f:e6:e6:1d:5c:e9:1f:e4:9b:dd:03:a2:8d:53:1b:
                    cd:6b:a8:a7:c6:1d:42:ea:f3:86:0e:60:da:a3:f6:
                    0c:b7:b7:19:f9:de:db:5b:90:80:93:cb:04:81:17:
                    50:e8:bc:1e:30:8c:24:6e:f7:9a:d3:6d:9c:ce:e9:
                    a3:19:8e:26:fc:83:e1:aa:57:f1:42:a1:2c:fd:b5:
                    f9:2d:ce:d9:02:24:c6:36:ad:8c:c4:0b:1f:70:f2:
                    b0:89:73:86:61:79:3b:56:83:98:8f:04:5e:3b:bb:
                    af:25:7a:bd:ce:17:c7:4b:22:f3:75:d6:3c:89:29:
                    25:d7:69:74:1e:5b:2f:a7:cf:7a:34:e2:48:10:97:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8A:BD:78:A1:5B:A0:1B:0E:17:01:0A:14:DD:9E:0A:B0:CF:CE:56
            X509v3 Authority Key Identifier:
                keyid:D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/323830333a383932303a3a2f33322d3438203d3e20323636363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8920::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:06:2e:e2:1d:22:70:94:09:31:1a:2d:17:0c:fc:dc:76:
         84:e0:1e:f0:eb:90:93:c2:56:63:ee:42:2c:24:b5:1c:50:72:
         20:d8:95:3e:d8:b0:38:5b:dc:f9:ec:f8:23:08:38:f2:21:be:
         95:e6:11:4e:b9:c1:12:14:29:a3:55:44:84:c6:83:1c:fb:1a:
         9e:dd:5f:ba:1c:0c:cf:38:64:e3:f8:cf:d5:8c:72:fd:56:a7:
         8b:ac:e0:53:06:e4:5e:c5:98:68:12:06:df:27:4c:1d:01:ab:
         3e:63:f4:97:bb:51:32:62:56:e0:d4:08:0b:22:e3:56:3e:fb:
         c6:5c:15:a9:7f:04:8f:f8:39:cc:1f:7c:a6:5c:4b:d0:e1:5c:
         1c:ba:1e:a6:33:11:8a:b9:a6:71:0e:43:cb:d8:a4:58:91:a2:
         cf:e9:73:a1:7e:94:d3:99:13:e0:e2:75:ae:2e:21:2a:b4:02:
         17:0d:aa:1b:71:53:2c:a7:80:70:8c:1a:99:e2:ce:db:0e:3a:
         8d:73:13:5b:76:74:26:04:8b:29:88:b3:50:71:fd:ef:e0:9c:
         e9:7d:0f:26:07:ac:d2:7d:12:bf:85:67:39:b5:56:08:5a:df:
         7d:de:53:93:13:7e:c5:65:c0:ac:cb:f5:4b:fa:00:f1:85:9a:
         c5:fc:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:28:17 2024 by rpki-client on console-ams.rpki-client.org