Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3730303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3730303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          WasQ6ThWUKO3UzNai1Q9Jrad0g3uNDcSas8Gap8gX2E=
Subject key identifier:   C0:76:15:9A:35:F5:D2:C8:BB:CB:E6:59:42:86:EE:84:84:8B:C2:C2
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       3093ADE726DBECF7E80C8D4543005DA0E95281EB
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3730303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:04 +0000
ROA not before:           Tue 30 Apr 2024 04:50:04 +0000
ROA not after:            Tue 29 Apr 2025 04:55:04 +0000
asID:                     273192
IP address blocks:        2803:650:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:93:ad:e7:26:db:ec:f7:e8:0c:8d:45:43:00:5d:a0:e9:52:81:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:04 2024 GMT
            Not After : Apr 29 04:55:04 2025 GMT
        Subject: CN=C076159A35F5D2C8BBCBE6594286EE84848BC2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8f:05:63:62:5b:d3:72:9e:c8:cf:7d:6a:28:
                    09:60:a1:4b:f6:fe:b2:63:ed:44:90:84:67:b0:4e:
                    6a:df:d6:9b:ab:61:a0:98:c9:32:25:7b:a1:45:88:
                    c8:54:ef:8b:89:f6:75:d4:13:4a:57:54:6d:de:ac:
                    f3:e8:93:8d:6f:c4:8d:fa:ce:2b:9c:c0:15:30:98:
                    dc:db:01:40:f5:ab:03:94:09:d6:b9:6b:04:47:e8:
                    50:16:63:a1:7f:b5:52:75:f7:ee:bb:db:cf:49:c5:
                    74:cc:49:aa:4a:d9:e3:58:81:c0:f7:03:80:7e:12:
                    6b:d4:32:e1:f4:86:f8:03:0e:90:b5:3d:64:6b:2e:
                    38:87:f4:d8:1f:c5:f9:c5:7c:5f:ed:88:af:73:9f:
                    02:39:2c:3f:d5:e0:36:d8:72:e8:0a:d1:aa:85:04:
                    8a:85:ec:84:8d:5c:13:f6:61:1f:21:b9:0d:77:b4:
                    23:ef:da:70:65:0b:e0:50:dc:10:17:17:f4:ba:aa:
                    61:80:ae:9f:be:35:04:b8:2d:d2:e0:83:a7:09:a4:
                    6b:cc:11:df:ee:0f:aa:2c:74:0a:3a:87:26:4a:51:
                    88:64:9d:25:a3:30:d2:1e:52:ce:77:47:84:ec:04:
                    a2:d5:ef:33:b5:7c:57:64:36:fc:ca:62:7c:40:4e:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:76:15:9A:35:F5:D2:C8:BB:CB:E6:59:42:86:EE:84:84:8B:C2:C2
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3730303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:7f:81:30:3d:fc:5b:f9:2c:57:e3:1d:7d:01:74:eb:91:89:
         af:b4:3f:70:b7:e4:7f:38:6a:7f:43:5d:72:c8:8c:ab:99:a5:
         f1:65:f0:cb:24:4a:ed:1c:6a:d6:67:5b:79:79:21:5a:b7:11:
         92:b9:23:1c:b8:55:f8:a5:ad:19:c1:36:db:0d:6e:71:15:8f:
         9a:89:36:20:f2:66:54:c9:c0:59:9d:3e:1c:f9:50:bb:20:06:
         ce:62:1b:b1:37:24:16:85:8a:ad:95:39:44:b6:f0:bf:67:25:
         da:b2:ef:a9:52:f7:3b:46:c3:c6:03:8d:d9:86:ea:97:35:06:
         ea:16:46:a4:76:2e:91:ce:15:e8:e3:16:86:b8:c8:97:85:6e:
         06:17:ec:38:81:dc:52:cd:20:f6:27:c3:c5:75:fa:4b:1b:c7:
         03:bd:34:22:08:e0:61:f1:8b:31:ec:f2:a5:e4:76:fb:26:b2:
         a0:1a:92:41:fd:a2:c9:d1:51:cc:92:c7:fe:19:4a:da:fe:b3:
         63:87:dd:22:95:9b:1c:62:ac:d7:f2:62:ee:7e:77:88:43:45:
         a1:7f:04:a7:86:18:df:4a:d0:a7:87:b7:68:99:7e:d9:4a:a0:
         41:1b:1e:52:62:06:7c:3e:26:e4:62:f7:d0:d8:ac:f4:99:c4:
         b7:6d:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org