Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/323830333a326531303a3a2f33322d3438203d3e20323731393638.roa
File:                     323830333a326531303a3a2f33322d3438203d3e20323731393638.roa (raw, json)
Hash identifier:          CQvdLbLxqeQuHK9oa9ZM0XQnLyBKPrbXY8jCPgVX2vw=
Subject key identifier:   C8:90:50:D0:00:24:02:F4:7A:0D:13:3E:46:43:84:B8:74:A9:49:98
Certificate issuer:       /CN=6E6B77941C60D76197108ECB30C50DE32D4837A0
Certificate serial:       4940C7D38A35E17011BE6C4B0248F53946CC4679
Authority key identifier: 6E:6B:77:94:1C:60:D7:61:97:10:8E:CB:30:C5:0D:E3:2D:48:37:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/323830333a326531303a3a2f33322d3438203d3e20323731393638.roa
Signing time:             Tue 04 Feb 2025 19:59:55 +0000
ROA not before:           Tue 04 Feb 2025 19:54:55 +0000
ROA not after:            Tue 03 Feb 2026 19:59:55 +0000
asID:                     271968
IP address blocks:        2803:2e10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:40:c7:d3:8a:35:e1:70:11:be:6c:4b:02:48:f5:39:46:cc:46:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6B77941C60D76197108ECB30C50DE32D4837A0
        Validity
            Not Before: Feb  4 19:54:55 2025 GMT
            Not After : Feb  3 19:59:55 2026 GMT
        Subject: CN=C89050D0002402F47A0D133E464384B874A94998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:42:8e:b5:5f:63:e2:b4:a1:0e:20:45:8b:
                    8d:3b:20:41:59:40:39:dc:a6:2a:18:aa:67:6b:e0:
                    26:14:64:5a:08:c4:ad:37:71:7f:63:c3:99:32:2c:
                    a9:0c:11:71:f7:01:18:63:9b:f2:75:52:62:e9:b0:
                    9b:e8:c8:25:c9:e2:c2:3e:22:7a:58:41:8c:fb:24:
                    d7:57:61:5e:15:95:82:e2:a8:a7:97:8c:40:3b:32:
                    77:5b:2f:47:65:4a:90:e9:32:ac:24:23:e4:48:0f:
                    d1:99:38:6f:a3:c2:e1:45:ab:01:74:8c:59:d0:5d:
                    03:cd:00:13:77:41:36:72:85:91:24:ca:5d:14:c5:
                    b4:51:9e:12:16:70:36:2f:56:89:9f:f5:93:49:bb:
                    d9:fb:f8:32:a9:e6:44:a0:e2:94:39:3d:d2:f8:03:
                    54:e7:6c:d7:29:32:11:99:22:ab:12:97:d6:c3:55:
                    37:49:21:df:23:9c:d8:3a:22:96:f6:7d:79:20:a6:
                    29:b1:e3:a5:79:e8:42:92:cc:c2:0c:02:3d:c7:57:
                    f9:4b:04:17:af:fd:9c:08:68:97:d7:4d:db:8a:74:
                    c4:4e:d1:d0:85:58:8b:62:c2:a0:5e:98:9d:70:70:
                    79:da:2d:4d:61:e8:4c:42:d8:1d:10:96:0a:a0:2d:
                    bc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:90:50:D0:00:24:02:F4:7A:0D:13:3E:46:43:84:B8:74:A9:49:98
            X509v3 Authority Key Identifier:
                keyid:6E:6B:77:94:1C:60:D7:61:97:10:8E:CB:30:C5:0D:E3:2D:48:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/323830333a326531303a3a2f33322d3438203d3e20323731393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:c2:d6:f4:91:2b:0e:b7:55:95:88:4e:95:a8:7e:6a:fc:2c:
         b2:04:b8:d7:24:d4:49:d0:9a:27:31:7c:e9:39:35:ec:7b:d3:
         48:bd:2d:6a:98:e0:fc:5b:f1:9f:e8:8c:e5:68:6a:49:87:87:
         f7:3b:fe:bf:2d:54:87:d5:26:fd:63:f7:74:57:15:ff:24:68:
         65:e7:17:62:17:fd:aa:2b:bb:61:3a:b7:6b:10:65:8b:fa:ab:
         49:6a:d5:7b:a1:b4:36:58:ef:21:e2:97:ff:df:ab:02:72:9d:
         8a:25:95:6a:13:01:ac:32:47:69:10:9a:e1:12:0d:a0:c7:8c:
         fd:61:3e:f7:17:ae:e5:de:43:4a:52:da:3a:67:be:e9:42:97:
         2e:e1:08:bd:6a:de:39:ba:71:a3:19:96:51:32:7c:1b:98:5c:
         95:85:a8:7e:b6:18:3a:6f:d2:43:8e:dc:79:82:61:33:10:02:
         24:77:fe:53:88:fb:f4:7c:23:e3:11:3d:37:e8:cf:23:a0:c9:
         ec:2c:d9:90:af:a0:24:49:9f:1b:1d:18:dd:16:0c:72:c6:65:
         9f:72:78:75:81:88:ac:6f:43:08:e0:c9:f7:a4:ee:5e:d9:3f:
         d4:ae:31:90:f3:c1:46:b3:2e:e4:3c:ee:af:3b:7e:3e:7d:7f:
         9c:bf:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:16 2025 by rpki-client