Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3630303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3630303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          FBz83hooy8HAFGtXcbFayeB7k+oUPiC7GMqzbNSsiOY=
Subject key identifier:   91:3F:11:6E:9B:1A:7E:7F:1B:F0:C3:C4:0D:09:6B:17:09:97:58:59
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       2767751276532F279016673EDEB2B4784FF1E6F5
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3630303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:02 +0000
ROA not before:           Tue 30 Apr 2024 04:50:02 +0000
ROA not after:            Tue 29 Apr 2025 04:55:02 +0000
asID:                     273192
IP address blocks:        2803:650:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:67:75:12:76:53:2f:27:90:16:67:3e:de:b2:b4:78:4f:f1:e6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:02 2024 GMT
            Not After : Apr 29 04:55:02 2025 GMT
        Subject: CN=913F116E9B1A7E7F1BF0C3C40D096B1709975859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:90:b1:03:95:fb:55:ef:ae:b1:79:df:19:
                    0d:4b:ab:84:6d:06:1d:31:9b:21:60:10:f0:0e:36:
                    3d:b5:04:1a:8d:eb:f0:fc:0c:c6:da:46:17:f7:2c:
                    2b:0f:17:e1:96:a5:98:5a:32:47:7e:0a:5b:9d:6f:
                    49:df:c8:04:7b:18:e4:05:30:81:91:90:09:22:8d:
                    87:92:0f:a3:02:25:42:3b:24:ff:2e:68:e7:4c:6a:
                    9b:fc:17:94:ae:8c:a9:25:0f:72:b0:35:4d:2c:68:
                    3f:f7:dd:46:69:65:4b:92:b3:9d:b3:17:dd:b8:fa:
                    62:ea:4a:b5:e4:6d:34:80:8a:4a:32:d3:7c:fb:81:
                    cd:70:d1:ad:84:75:bf:14:be:ea:c8:71:7a:d1:12:
                    09:5d:69:35:27:41:c5:28:6c:cc:b2:35:9f:ad:5b:
                    bb:3d:d5:19:09:d6:a6:85:69:9e:75:0c:da:06:15:
                    90:d6:4f:08:f6:81:6a:52:97:94:2d:ad:3c:02:25:
                    62:30:ac:54:84:be:28:66:b9:34:5e:9c:da:07:1c:
                    01:5b:a9:ef:70:43:f4:cf:4a:1e:26:7e:fd:ed:62:
                    12:f8:a1:f5:39:c0:aa:b1:d2:ac:66:a0:5d:67:5d:
                    6a:53:74:71:fa:eb:0f:87:0e:14:d0:68:51:c2:4b:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3F:11:6E:9B:1A:7E:7F:1B:F0:C3:C4:0D:09:6B:17:09:97:58:59
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3630303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:35:f6:4d:08:d7:3c:3f:09:b3:c5:62:08:90:72:69:11:7f:
         61:27:f8:29:ce:4d:34:7a:d1:a9:23:fc:ec:a4:87:57:47:0d:
         cc:b2:4f:e4:0c:b9:7b:0a:24:f2:f3:91:a6:c3:2e:f2:b0:6d:
         b9:f5:e0:3d:a9:46:d1:d3:51:fb:5b:43:ab:8a:f4:46:1d:80:
         61:6e:b3:eb:ba:e3:0b:a9:14:1f:00:b4:73:72:08:a1:c5:f7:
         3e:33:93:96:b7:3b:e9:e1:a6:8c:7b:89:6f:06:e1:a1:08:e0:
         34:d8:72:c6:2e:8e:e1:47:c3:b2:c3:22:8e:19:9b:da:01:13:
         90:1b:08:13:de:65:c5:3c:79:d0:04:4e:7e:b0:c9:c5:28:de:
         fb:55:30:fe:20:3a:48:24:94:4a:87:db:a3:d6:ec:1c:b4:f3:
         d0:95:0c:3d:21:a2:14:fa:5d:ad:a2:aa:6b:0c:a7:43:e1:a5:
         41:6e:15:09:a5:9c:b5:10:c0:fc:64:e4:fe:64:56:4b:f8:73:
         73:20:00:3c:0b:90:65:3c:42:e4:78:c7:a2:fc:b3:c8:69:71:
         50:f7:e3:d1:ab:3b:d3:f0:c5:e7:19:67:ff:e0:23:25:1a:10:
         9e:38:b6:1c:96:da:12:b6:94:32:89:4e:4d:e8:6e:18:b9:28:
         46:ac:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org