Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3130303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a3130303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          qAmAk1qnK80bZe0s67ZTMB8Kpr5rauUtkTp4OtA32eE=
Subject key identifier:   71:66:93:69:32:F3:B5:92:57:72:FD:6C:83:28:CC:96:69:7E:6C:FC
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       4922720A2F0A7D850FCB83CBF7FB00D8678C99C9
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3130303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:03 +0000
ROA not before:           Thu 25 Jul 2024 23:45:03 +0000
ROA not after:            Thu 24 Jul 2025 23:50:03 +0000
asID:                     273123
IP address blocks:        2803:450:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:22:72:0a:2f:0a:7d:85:0f:cb:83:cb:f7:fb:00:d8:67:8c:99:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:03 2024 GMT
            Not After : Jul 24 23:50:03 2025 GMT
        Subject: CN=7166936932F3B5925772FD6C8328CC96697E6CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:56:d8:0c:4d:c0:0b:c7:39:c0:8d:17:6d:
                    c3:05:8e:4b:e3:8c:1f:be:53:36:23:99:e1:10:d5:
                    f6:26:20:ba:25:77:2f:d0:09:bd:23:c8:87:9f:5d:
                    56:01:f4:d1:c7:c2:a8:c7:55:83:63:51:9f:a8:43:
                    82:26:85:a4:db:f0:57:0e:cd:10:80:24:fa:21:af:
                    80:9e:fa:a0:af:14:bc:dd:16:d7:28:3f:13:07:a7:
                    bb:f0:5d:75:d7:d8:ba:7b:25:38:7b:9b:d2:e3:5d:
                    f9:06:ca:b8:52:da:cb:72:28:87:8f:34:d9:b0:9e:
                    9e:88:8d:a9:ad:28:ca:66:26:70:7d:2b:d0:ff:54:
                    e0:c4:c1:6b:91:b2:ea:0f:e5:ae:b1:32:87:5c:93:
                    5d:ab:94:e4:76:7a:e0:c9:b9:72:05:64:01:5d:ff:
                    be:4d:ae:97:43:96:74:c0:05:58:d5:f9:90:d5:73:
                    51:d6:aa:7f:b2:54:6f:60:24:5e:a1:f2:80:ca:d8:
                    91:85:4c:e8:e0:43:27:df:b6:21:8f:6e:1c:3a:ad:
                    20:07:01:3f:5d:fa:f5:8b:44:17:9e:4a:1f:33:1a:
                    a2:d8:83:9f:70:86:61:d4:e0:b3:b7:9a:b4:6f:a2:
                    8d:f3:87:8c:6e:f3:13:40:79:3c:85:ba:2d:a8:77:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:66:93:69:32:F3:B5:92:57:72:FD:6C:83:28:CC:96:69:7E:6C:FC
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3130303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:b0:a9:92:90:73:0d:72:7d:7e:44:d2:8a:8f:ad:5a:1d:
         8c:33:2b:f8:9c:6e:9c:dc:74:60:c2:76:fa:7c:ed:4b:ce:0a:
         f6:e1:ce:13:53:5e:cf:78:ea:d4:9c:bb:09:a6:91:ab:0d:1e:
         ee:0b:31:71:ac:fe:7b:1b:25:1c:81:94:2f:93:07:c2:35:21:
         82:51:41:5a:4d:1e:2b:88:63:50:88:51:8e:70:38:74:17:29:
         d1:15:fe:be:b7:51:70:f0:b1:ae:3c:9c:ba:a0:04:52:d4:46:
         d8:74:44:d3:c1:d8:17:c7:a5:a5:16:23:41:9c:55:00:61:77:
         03:a1:53:be:cc:17:fd:21:b9:9b:00:de:ba:44:67:40:38:b2:
         cb:2d:6a:ab:d8:dd:73:f7:b8:50:92:54:c9:fd:b1:d0:8b:1b:
         0f:eb:c9:0f:7a:b3:66:88:d8:d3:a3:4c:80:12:64:eb:98:a9:
         91:30:9f:eb:21:2b:10:10:56:85:45:5c:5f:71:56:c7:60:d8:
         0f:71:5c:0e:c0:6a:3c:1c:4b:05:44:e9:68:28:e6:4e:0e:01:
         af:0c:c5:32:d7:9f:75:f2:e1:6b:20:2e:53:21:c8:48:14:da:
         cd:a8:75:80:d3:82:e3:63:53:9f:02:01:6e:48:67:8d:4a:9f:
         9e:fe:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:32 2024 by rpki-client on console-fra.rpki-client.org