Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa
File:                     323830333a386536303a3a2f33332d3333203d3e20323637393134.roa (raw, json)
Hash identifier:          ACduNHtMjxQl1LgfubjXTkFgCWjBJ8jiK7ztGIVE25g=
Subject key identifier:   A9:BF:5C:3A:6C:82:D1:0F:D1:55:DE:6B:50:0D:5B:69:84:6C:C9:47
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       0B2A26E14E7DAFD60231219FB6B134802CAC91B7
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa
Signing time:             Wed 28 Aug 2024 20:30:02 +0000
ROA not before:           Wed 28 Aug 2024 20:25:02 +0000
ROA not after:            Wed 27 Aug 2025 20:30:02 +0000
asID:                     267914
IP address blocks:        2803:8e60::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2a:26:e1:4e:7d:af:d6:02:31:21:9f:b6:b1:34:80:2c:ac:91:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Aug 28 20:25:02 2024 GMT
            Not After : Aug 27 20:30:02 2025 GMT
        Subject: CN=A9BF5C3A6C82D10FD155DE6B500D5B69846CC947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:11:d3:23:25:3e:63:05:71:a8:31:ad:2d:5b:
                    a0:b9:62:91:eb:27:ea:4b:a5:fe:66:0e:ef:53:46:
                    80:8a:d9:53:82:c4:a5:cb:16:ca:f7:c3:9e:51:d7:
                    2f:b2:58:f5:53:94:38:7d:37:42:c9:e7:83:62:5c:
                    e9:6b:fb:4f:57:61:82:ca:bd:2f:c6:b0:d3:dd:be:
                    4a:2d:13:ed:9c:16:a8:52:95:a1:ea:1b:07:35:28:
                    b5:00:1a:4a:5d:d4:0e:f8:c5:fd:f4:13:64:80:93:
                    47:ca:29:8b:da:5f:d6:10:e6:99:fa:0a:ea:48:54:
                    4f:35:7f:e0:4f:79:4d:b3:c3:84:16:e2:cc:56:d0:
                    39:02:37:41:8b:c0:96:41:cf:73:fe:88:6c:9f:8c:
                    3f:9c:6d:79:bb:5c:46:57:7c:7b:fe:90:91:c6:b4:
                    08:28:8a:fb:9d:d4:72:8c:f8:18:4b:eb:2a:67:35:
                    0d:61:fd:d1:5b:60:16:22:3e:65:99:8b:16:92:ce:
                    cf:cd:bd:fa:1a:a2:e0:09:b5:ad:fa:0a:43:28:b3:
                    1b:b1:1b:97:ef:7f:4a:ab:ac:fe:f0:4a:03:60:e2:
                    ff:9f:53:23:2a:5f:7a:96:d6:33:0f:8d:b5:ab:c3:
                    03:f9:32:a0:22:fc:fd:b0:f2:5c:17:e7:56:5b:e1:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BF:5C:3A:6C:82:D1:0F:D1:55:DE:6B:50:0D:5B:69:84:6C:C9:47
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a3a2f33332d3333203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e60::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:bc:29:ed:9f:f0:c9:d1:9f:8a:4c:5f:ed:b2:4b:98:02:
         45:af:8e:95:45:1e:32:d1:9f:ac:b0:a0:7e:90:59:d8:ed:dd:
         15:88:d2:59:46:da:ec:07:14:51:cb:c7:db:54:13:dc:4a:00:
         cb:82:4d:6d:43:c4:4f:55:43:56:8e:54:09:80:98:b3:ad:d7:
         ea:76:b0:8d:e8:71:a1:76:6e:fc:24:3d:49:b2:e2:f6:be:e6:
         f7:b8:43:43:59:d0:47:15:9a:fb:fa:aa:c4:03:02:31:69:a2:
         28:04:46:03:aa:18:47:4e:28:0f:60:2d:ce:d7:5f:e0:be:ac:
         b1:8c:b2:2a:c7:34:77:a6:31:19:1c:8a:52:2f:2c:97:81:ab:
         bb:7c:e6:ff:c0:d1:d2:0a:92:bc:a2:84:59:b9:49:d2:63:e3:
         e6:66:78:23:cd:4d:82:db:43:3f:a2:20:04:22:54:0f:e7:fa:
         bb:e7:29:3c:7d:48:35:96:13:c8:13:3a:7a:fe:5d:01:5a:16:
         f7:d2:e2:0c:17:f6:3f:98:e9:8b:98:29:f4:cd:17:eb:1f:f9:
         98:ca:75:a4:63:0d:36:63:5f:70:50:a0:a4:9c:49:b1:71:d3:
         6a:42:9c:d9:34:25:ce:39:46:01:f6:6e:bd:6f:84:37:f0:1a:
         71:c6:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org