Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6330303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a6330303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          iI3QZzIOWO3YSNncfGw6fwyI+EX6htxaoWQ/rfN8xas=
Subject key identifier:   38:95:D9:F0:3A:05:18:72:38:3F:E8:93:DC:C3:2B:96:A8:91:C5:99
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       01D672B84873FC26ECF22160C79DB34DED5890D4
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6330303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:00 +0000
ROA not before:           Thu 25 Jul 2024 23:45:00 +0000
ROA not after:            Thu 24 Jul 2025 23:50:00 +0000
asID:                     273123
IP address blocks:        2803:450:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d6:72:b8:48:73:fc:26:ec:f2:21:60:c7:9d:b3:4d:ed:58:90:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:00 2024 GMT
            Not After : Jul 24 23:50:00 2025 GMT
        Subject: CN=3895D9F03A051872383FE893DCC32B96A891C599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:be:c6:aa:ad:16:6d:e3:9a:60:6c:bd:2f:
                    7d:94:98:80:84:55:a1:cc:82:41:0a:d6:35:a3:17:
                    32:d1:32:a0:b0:79:e0:b7:78:91:ba:81:2a:6d:a2:
                    ad:85:11:92:f7:5d:e6:a4:ce:f1:ab:dc:05:63:6a:
                    fe:73:ed:00:d6:55:10:60:45:d8:99:5b:37:ee:1b:
                    61:5c:ad:f2:7c:60:76:cd:d1:6b:51:87:2a:43:7a:
                    4a:a6:14:99:45:ff:9d:ed:8f:23:83:1a:63:12:e5:
                    14:63:ad:f6:7b:f3:b6:50:2e:f5:3e:66:9f:5c:b4:
                    a1:16:f2:b3:95:9c:e0:59:87:06:9c:32:53:38:6a:
                    ee:bf:58:73:44:7e:ba:4a:76:7b:62:02:9e:99:9d:
                    aa:94:0f:13:52:3d:1f:ab:29:dc:f1:63:77:3c:65:
                    b2:35:c9:b0:a3:88:2d:b6:af:1f:d8:02:b9:e7:82:
                    dd:33:75:af:05:51:e8:a7:4b:bc:d9:08:01:73:94:
                    af:5d:fd:4c:30:56:ea:49:f0:8e:e0:95:4b:cd:56:
                    33:68:19:01:e5:e9:c0:40:bb:93:88:68:c2:20:95:
                    ac:38:dd:6d:71:70:6b:14:00:cb:63:5c:48:54:37:
                    c7:c8:b5:8f:a6:b0:15:2c:89:dc:1d:c9:31:ee:1d:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:D9:F0:3A:05:18:72:38:3F:E8:93:DC:C3:2B:96:A8:91:C5:99
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6330303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:8d:9e:9b:99:17:1f:8e:e7:f9:b1:1a:a9:34:67:17:ff:
         b7:a1:57:9b:0c:40:8e:8d:be:cd:9c:a4:15:1e:d5:5b:d3:ad:
         b6:24:33:f1:70:57:14:e0:e4:3c:22:6c:07:30:0e:f5:8e:d4:
         fe:07:7b:df:cc:cd:bb:c2:b2:38:82:1d:51:7a:7c:cd:6d:b2:
         e6:01:b4:f0:31:ca:be:68:4a:17:87:c1:00:5b:ae:1e:a3:a0:
         46:cc:b6:ca:36:db:ef:6b:53:8d:9b:a2:8b:32:8c:9d:55:86:
         36:f5:a5:ff:88:e2:1c:8a:08:67:d5:e4:96:b8:0c:44:7f:69:
         1d:6f:2f:6e:a7:d3:18:10:d9:19:7f:b5:72:41:88:2d:9d:64:
         d2:5e:ef:52:19:e1:08:48:73:a1:0a:62:bc:df:75:d1:77:6a:
         1e:5d:01:22:5e:a8:e0:52:c9:80:eb:57:82:a0:1f:65:24:59:
         bc:ef:9f:02:62:1a:01:3a:98:ae:10:1b:f7:e0:ea:65:dd:de:
         da:dc:29:3e:b4:d6:dd:b5:4e:36:68:bd:5f:4a:80:59:b4:e2:
         ea:09:d4:20:83:ed:ac:b4:8b:fa:ca:6b:4b:cd:84:29:6d:1b:
         c2:29:90:b6:be:02:57:f7:88:e8:4d:fd:af:0a:fc:9e:9c:3b:
         8c:d8:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:41:55 2024 by rpki-client on console-ams.rpki-client.org