Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa
File:                     323830333a366332303a3a2f33322d3334203d3e20323635383330.roa (raw, json)
Hash identifier:          9z3pm4JCXqOR8eGXoPbnVG3AkYcg5HC7Rh/nMSh1lDY=
Subject key identifier:   57:61:4E:92:F7:F6:69:DF:C8:57:C4:C7:CF:27:49:86:B2:86:3F:7E
Certificate issuer:       /CN=620CC3037E329EA6E6446036A75894936D28FD42
Certificate serial:       28843C1FC3FED9B37317D346EB51592FCB10424F
Authority key identifier: 62:0C:C3:03:7E:32:9E:A6:E6:44:60:36:A7:58:94:93:6D:28:FD:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620CC3037E329EA6E6446036A75894936D28FD42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa
Signing time:             Tue 05 Mar 2024 17:48:51 +0000
ROA not before:           Tue 05 Mar 2024 17:43:51 +0000
ROA not after:            Tue 04 Mar 2025 17:48:51 +0000
asID:                     265830
IP address blocks:        2803:6c20::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/620CC3037E329EA6E6446036A75894936D28FD42.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/620CC3037E329EA6E6446036A75894936D28FD42.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620CC3037E329EA6E6446036A75894936D28FD42.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:84:3c:1f:c3:fe:d9:b3:73:17:d3:46:eb:51:59:2f:cb:10:42:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620CC3037E329EA6E6446036A75894936D28FD42
        Validity
            Not Before: Mar  5 17:43:51 2024 GMT
            Not After : Mar  4 17:48:51 2025 GMT
        Subject: CN=57614E92F7F669DFC857C4C7CF274986B2863F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:03:11:d2:5b:2c:00:c3:9d:ee:20:21:82:
                    94:b9:51:70:10:e8:48:ea:d5:99:35:57:e5:7e:c4:
                    e3:1d:2e:6e:51:7d:e0:07:51:f6:65:7c:50:de:31:
                    07:79:ce:11:ed:04:6c:0e:ab:47:94:58:ba:a7:67:
                    e7:5f:c7:5f:60:eb:48:c4:42:78:20:ef:cb:61:7b:
                    9a:aa:87:b8:44:2a:3d:20:f5:40:00:ec:d4:85:7c:
                    a6:db:13:95:87:34:3d:69:65:8c:82:84:d3:c0:db:
                    d8:ff:97:08:80:21:63:f7:03:40:01:c1:f0:4d:ca:
                    22:50:f8:c3:8f:a5:bb:82:67:14:66:a8:61:25:8b:
                    29:b1:67:87:14:e1:b8:bd:fc:b2:da:b5:23:e5:e3:
                    97:3b:5d:8a:36:36:0c:23:79:c4:df:a6:4a:57:bc:
                    f2:6c:e5:db:5e:73:68:b9:e2:24:01:ae:62:c1:19:
                    6e:29:9b:99:0a:72:bf:d2:ed:ae:e4:b1:fb:de:93:
                    e4:8c:85:8c:b5:a2:17:0d:74:53:9a:22:fe:6c:de:
                    b0:e3:31:99:e5:24:86:74:56:28:65:c5:cf:0e:a2:
                    2f:3e:54:e4:20:47:6f:08:46:b0:3e:6f:b2:cc:6c:
                    72:f1:31:fa:e4:64:e7:33:80:38:fc:52:2c:c6:ba:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:4E:92:F7:F6:69:DF:C8:57:C4:C7:CF:27:49:86:B2:86:3F:7E
            X509v3 Authority Key Identifier:
                keyid:62:0C:C3:03:7E:32:9E:A6:E6:44:60:36:A7:58:94:93:6D:28:FD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/620CC3037E329EA6E6446036A75894936D28FD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620CC3037E329EA6E6446036A75894936D28FD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:74:23:4e:4f:75:89:d1:de:f1:d7:bc:03:2f:93:61:cf:
         a0:ff:d5:0a:43:67:ea:1a:6c:5f:fd:25:51:43:03:4e:b3:63:
         5b:ef:47:94:b1:6c:55:50:12:d8:db:d9:04:fd:ba:84:81:4d:
         d9:75:42:0e:fc:09:4c:5c:d9:39:2d:73:d2:c3:64:27:70:b7:
         00:f8:3c:9d:03:a7:cf:2a:8a:1a:9e:70:f0:a6:81:7f:a5:d4:
         71:70:aa:f1:0d:2e:e9:2f:52:5f:e2:1e:5c:92:26:e7:b3:dc:
         5b:4d:fe:72:76:00:54:b5:be:9e:a7:46:e4:0c:6b:79:e8:26:
         fc:8f:8b:86:e6:f8:46:1d:62:56:e8:c6:39:6f:fd:e5:51:72:
         52:2e:bb:b1:a3:ce:26:e6:7f:7e:7e:5e:45:62:29:92:cf:8c:
         ea:ce:83:d3:83:20:05:e6:ec:ed:25:d2:e9:0e:9b:e8:c3:90:
         aa:82:bd:f6:6c:0e:fc:38:a3:6b:b2:48:f6:04:1f:bb:3d:9b:
         66:53:0a:2c:9b:e9:4d:66:82:8a:be:fd:e1:da:63:41:f7:14:
         a8:69:15:94:2e:2f:bb:63:ab:72:e0:17:46:d3:c2:c6:d0:ee:
         04:4a:fc:63:2c:55:15:cd:c5:f1:a9:bb:8f:43:2a:78:64:10:
         e8:05:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org