Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/323830333a643939303a3a2f33322d3634203d3e203532343132.roa
File:                     323830333a643939303a3a2f33322d3634203d3e203532343132.roa (raw, json)
Hash identifier:          mKykm/w4Tjc0EdKqD4Y+jHrWH7kX+wjYYW1rOHdlPPQ=
Subject key identifier:   6C:94:76:94:5B:6A:56:CC:B8:B5:F3:EA:BA:AF:D5:6B:D3:0F:C4:52
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       0E456A28431820DF9370E74B3CEE74755E4F80BF
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/323830333a643939303a3a2f33322d3634203d3e203532343132.roa
Signing time:             Tue 05 Mar 2024 17:57:58 +0000
ROA not before:           Tue 05 Mar 2024 17:52:58 +0000
ROA not after:            Tue 04 Mar 2025 17:57:58 +0000
asID:                     52412
IP address blocks:        2803:d990::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:45:6a:28:43:18:20:df:93:70:e7:4b:3c:ee:74:75:5e:4f:80:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Mar  5 17:52:58 2024 GMT
            Not After : Mar  4 17:57:58 2025 GMT
        Subject: CN=6C9476945B6A56CCB8B5F3EABAAFD56BD30FC452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:53:05:86:e9:e4:47:91:bd:32:37:f2:20:
                    05:64:21:8b:0d:f2:3d:49:96:2f:17:67:6b:27:16:
                    4b:28:42:ed:a9:10:fb:79:51:ae:98:d9:0e:09:5e:
                    f6:7b:0b:2b:f7:c6:d2:d8:6c:f2:52:ee:6a:b2:b1:
                    59:78:cf:ec:ff:15:85:9f:d7:72:98:7e:78:0a:ea:
                    87:0f:1f:f2:17:b9:34:ce:9a:6c:c6:a5:0d:96:0b:
                    1c:93:d1:73:6d:f9:44:42:2f:ec:d3:e0:37:c8:90:
                    a7:eb:f8:38:73:de:6c:9c:fa:b2:88:1c:00:ac:c8:
                    6c:48:d1:08:eb:03:53:76:7f:b4:2f:8d:a0:32:42:
                    9a:82:bf:ae:39:38:69:1b:be:69:fa:e9:50:1e:73:
                    33:b3:2e:67:39:60:34:83:28:5b:22:29:5b:ca:d9:
                    13:88:e3:8b:11:8e:45:05:09:9d:17:02:a3:78:ff:
                    15:9e:f8:b7:ab:ef:ea:bc:6a:f1:12:ad:36:0f:76:
                    c4:de:dd:99:97:67:68:83:16:e3:8f:5a:ea:b0:74:
                    e0:c9:6d:56:44:33:dd:24:07:2e:08:50:cc:f2:22:
                    b7:54:21:93:ee:2f:24:9c:cc:8c:28:ec:f2:ea:7c:
                    ae:8a:25:20:e0:85:bc:3a:7c:ca:5b:03:98:16:a6:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:94:76:94:5B:6A:56:CC:B8:B5:F3:EA:BA:AF:D5:6B:D3:0F:C4:52
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/323830333a643939303a3a2f33322d3634203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d990::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:74:b6:ad:f0:46:f9:bd:83:c5:22:fa:1a:25:1e:78:57:40:
         2d:bb:f3:0e:ea:33:f3:65:20:10:8f:ce:81:4e:9b:10:48:85:
         6d:ce:7b:be:64:d8:ed:40:1e:b8:b0:7b:8a:fe:0f:54:1e:41:
         ef:57:77:f8:c9:9b:16:4a:fe:99:d3:30:89:f6:26:de:16:76:
         69:29:41:c1:e1:7f:c7:fc:41:b0:e8:76:b5:b1:85:73:51:6f:
         24:2e:49:79:45:0e:68:2d:e0:90:75:ee:83:88:e8:90:26:e5:
         ce:32:16:76:e3:a0:b9:53:c1:06:ff:23:d6:86:7b:ea:cf:17:
         f9:3a:d4:47:8a:2f:e8:35:12:6c:80:04:16:bc:fe:0c:68:bf:
         1b:ac:97:f7:7d:68:d2:d3:ca:be:7a:4e:62:69:f7:6c:84:81:
         1a:ff:0f:34:da:de:47:5b:e1:43:07:24:c4:fa:75:8b:f7:e3:
         2d:0b:2f:9b:01:7f:11:da:7f:57:b4:7b:ac:61:64:47:9f:9b:
         df:00:ab:18:9a:7b:fa:87:cc:6b:27:9b:9c:bd:41:c6:73:1d:
         3a:58:e9:fd:1b:e7:82:d4:90:cd:ef:ed:3b:75:d6:f5:34:58:
         28:cc:e9:8a:9d:87:4d:74:3d:6b:00:a2:7b:82:3a:39:34:b8:
         e3:bb:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org