Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d3438203d3e20323634363035.roa
File:                     323830333a313963303a3a2f33322d3438203d3e20323634363035.roa (raw, json)
Hash identifier:          k3NGhMnMStpCTHINu6MvvjLc9sQGCpk5DZMU5NVKBDw=
Subject key identifier:   43:52:53:80:80:1D:F8:C5:54:AC:62:9F:B8:51:BD:52:87:17:D6:74
Certificate issuer:       /CN=B8196866E8E404DE886895D0DF5004CF22D49297
Certificate serial:       48787FA72068B7C5734143749A48AA88F73C72BA
Authority key identifier: B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d3438203d3e20323634363035.roa
Signing time:             Tue 05 Mar 2024 18:17:47 +0000
ROA not before:           Tue 05 Mar 2024 18:12:47 +0000
ROA not after:            Tue 04 Mar 2025 18:17:47 +0000
asID:                     264605
IP address blocks:        2803:19c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:78:7f:a7:20:68:b7:c5:73:41:43:74:9a:48:aa:88:f7:3c:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8196866E8E404DE886895D0DF5004CF22D49297
        Validity
            Not Before: Mar  5 18:12:47 2024 GMT
            Not After : Mar  4 18:17:47 2025 GMT
        Subject: CN=43525380801DF8C554AC629FB851BD528717D674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:b1:e4:52:9d:1c:b5:cc:56:7d:84:04:ee:
                    60:a7:db:2a:41:d1:46:31:83:dc:72:95:9e:29:62:
                    cc:43:3a:ae:01:a1:0e:0c:60:28:86:9f:bf:17:0b:
                    a9:f4:0d:d5:fc:a9:90:10:c9:ee:38:cd:b8:08:d2:
                    98:c9:ae:e7:fb:e0:39:c3:cc:e0:74:01:b7:92:a8:
                    ce:52:f7:57:ba:16:27:f4:3d:ac:e2:0e:be:71:5a:
                    91:0f:36:c3:53:9b:b8:a7:3a:9c:68:5c:9f:a0:a3:
                    a4:5d:ff:4f:cf:65:fb:60:96:a4:9c:0d:28:1d:ac:
                    3d:1c:8b:f4:4b:1c:37:1c:44:5e:a8:0a:b6:f9:2d:
                    37:d8:6c:6d:8c:eb:cf:7e:64:be:44:33:f5:ce:2c:
                    6f:e2:af:48:03:be:f7:94:d1:97:ad:a2:75:35:78:
                    52:f8:7c:30:c3:97:3c:5a:a5:d2:eb:bb:ed:34:46:
                    b1:12:57:2e:5a:fb:8a:16:29:de:9b:b7:3a:4a:0d:
                    4c:29:41:12:ff:02:a9:0a:39:60:b1:1f:5c:b7:01:
                    f1:9f:1c:eb:c4:9e:30:98:00:a1:cc:33:40:88:50:
                    66:26:7c:d7:13:72:f9:33:3a:0f:0d:0b:57:55:d9:
                    e1:6d:79:7b:1a:8f:2c:d5:32:9c:b6:47:0e:bf:24:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:52:53:80:80:1D:F8:C5:54:AC:62:9F:B8:51:BD:52:87:17:D6:74
            X509v3 Authority Key Identifier:
                keyid:B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/323830333a313963303a3a2f33322d3438203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:19c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:25:20:d4:29:1e:1a:0c:74:14:33:dc:a2:56:51:ae:3a:4d:
         a3:dd:dc:17:26:32:0c:2d:4e:02:46:0e:57:30:f5:8f:23:6a:
         ca:9b:02:6c:5b:79:50:76:80:0a:e8:9d:b4:19:4e:2e:86:c4:
         8b:da:4a:d5:e2:52:f7:87:ea:a9:9b:8b:a0:32:9c:04:8f:cb:
         ad:c0:c2:ac:a0:98:a5:73:ed:16:6a:9d:64:74:42:f9:67:0c:
         9c:a7:59:0e:0f:a7:fc:94:27:37:70:0a:0c:a5:23:46:59:e9:
         c4:2f:a0:a0:c5:c7:54:a8:9b:20:6c:97:6f:ea:97:18:4d:da:
         d7:68:e6:5a:4c:a7:0f:b0:7a:70:85:de:3f:ea:69:56:8c:bd:
         de:f8:dc:43:08:56:01:aa:26:bc:00:82:88:06:07:ca:76:27:
         cf:f5:97:12:49:c6:4d:da:b3:1c:fb:ff:15:4a:27:36:32:ad:
         d9:dc:07:36:b6:34:e2:c1:89:51:85:f9:ac:29:d2:b4:2c:01:
         06:6d:cf:1c:39:76:0f:ad:60:36:9e:6f:97:69:0f:92:88:83:
         c2:84:8c:75:e1:4f:2d:c6:54:e9:63:ef:1c:75:78:f1:b2:c8:
         25:27:10:8f:24:eb:bf:74:be:bd:e4:a3:31:74:18:5c:14:ff:
         87:81:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 13:46:52 2024 by rpki-client on console-fra.rpki-client.org