Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3530303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3530303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          VEEm/qZi0vaxpojG7wm9bRPOfU/0ITYyf4xJSe4b++Y=
Subject key identifier:   C7:62:1A:9D:56:06:26:DA:EA:A9:C7:E6:4A:4D:FB:F3:D3:C3:1F:34
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       1E9852B404CC7380F1A6ABAF440950302D6DD732
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3530303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:03 +0000
ROA not before:           Tue 30 Apr 2024 04:50:03 +0000
ROA not after:            Tue 29 Apr 2025 04:55:03 +0000
asID:                     273192
IP address blocks:        2803:650:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:98:52:b4:04:cc:73:80:f1:a6:ab:af:44:09:50:30:2d:6d:d7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:03 2024 GMT
            Not After : Apr 29 04:55:03 2025 GMT
        Subject: CN=C7621A9D560626DAEAA9C7E64A4DFBF3D3C31F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6d:99:b7:37:8a:c7:83:2a:e9:3f:f9:41:9e:
                    5b:de:85:6b:73:d5:29:a9:99:b6:70:6f:d4:bf:c8:
                    dc:85:b0:74:38:a6:69:6b:56:78:e8:d3:ca:d4:18:
                    92:3e:04:59:5a:02:fe:02:19:93:4a:72:da:57:31:
                    b1:9a:81:b8:e9:53:db:b4:3a:e5:de:cc:08:58:69:
                    52:12:88:f1:5d:65:da:fe:2e:ce:cc:ff:6e:a0:33:
                    e4:8d:bb:7b:c4:b3:55:45:65:93:f8:12:de:66:4b:
                    aa:bc:51:f7:3d:15:09:14:f0:3f:e9:34:d8:af:e5:
                    eb:c7:c5:1c:85:3c:98:eb:16:d4:49:fa:c2:d9:e0:
                    49:b5:42:82:4c:fe:4f:2b:1f:ec:36:4f:14:73:8f:
                    4a:9e:c6:f5:d0:dc:13:98:74:b9:de:00:ee:94:d3:
                    4b:05:c9:5b:1c:d6:80:22:48:d4:8d:a2:73:96:0f:
                    b6:6c:85:12:91:2d:b3:60:29:43:42:83:30:86:e0:
                    ec:9c:b9:fe:fc:8f:64:6b:9b:23:23:88:a6:ed:da:
                    2f:73:42:58:2c:ff:4d:7e:fa:a5:c3:b6:75:35:81:
                    fc:e5:ed:9e:5a:cd:04:3c:63:7e:c3:1f:20:e2:cb:
                    7a:90:3a:a2:74:95:37:3b:eb:48:2a:be:b7:77:e7:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:62:1A:9D:56:06:26:DA:EA:A9:C7:E6:4A:4D:FB:F3:D3:C3:1F:34
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3530303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:27:05:89:af:10:b4:42:05:c4:34:a8:4c:ad:a7:41:6b:
         4c:83:40:ae:f8:34:9d:bb:6f:a7:1e:21:99:1e:c3:7d:c6:bb:
         ff:13:1d:e4:1e:2a:45:f6:79:79:f6:71:41:88:a7:07:91:1d:
         4f:f8:64:46:6a:af:ec:43:2d:68:f5:8d:39:88:fd:42:86:fe:
         56:6e:f8:e6:8f:a4:a2:96:81:71:e4:45:bb:e3:e0:0a:35:da:
         82:bd:57:ad:4d:7e:de:fa:e4:1c:8d:6e:6b:c3:66:97:5b:aa:
         97:1a:b4:92:13:b9:3a:a5:b4:1c:4f:0f:43:49:6a:01:81:09:
         49:7c:fe:b1:ee:8d:01:00:a8:8a:a2:80:41:7d:39:63:a5:6f:
         e2:50:75:1b:00:23:f3:1f:70:e6:d8:db:4c:55:4e:dc:ef:89:
         16:3c:37:bc:d4:21:5f:d9:a2:5c:58:74:44:57:d9:72:05:e9:
         8c:b7:23:a8:e1:8a:f8:51:4a:d9:b1:dc:d0:95:92:c2:b2:09:
         61:55:06:87:f5:9d:8c:6f:4d:13:b0:0c:e1:ab:ea:99:24:74:
         7f:ff:27:1d:47:24:3d:b1:1f:cc:02:57:ba:1a:d9:34:b1:3c:
         54:de:92:27:fa:b7:48:ea:df:5b:0f:e4:2b:ec:2e:98:e1:03:
         78:58:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 05:58:20 2024 by rpki-client on console-ams.rpki-client.org