Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3630303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a3630303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          F7fI5hv6PTqaIRV6QHy3Q/leVIAenNXkVd2Z6B1FGBI=
Subject key identifier:   6C:5B:88:D6:E2:74:71:0C:3B:B6:5F:3D:57:C1:8F:28:FD:03:20:8D
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       496E1C0CA2C23E1573E1390A5C90940F5EEF24BC
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3630303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Wed 17 Apr 2024 23:35:01 +0000
ROA not before:           Wed 17 Apr 2024 23:30:01 +0000
ROA not after:            Wed 16 Apr 2025 23:35:01 +0000
asID:                     273218
IP address blocks:        2803:8e50:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6e:1c:0c:a2:c2:3e:15:73:e1:39:0a:5c:90:94:0f:5e:ef:24:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Apr 17 23:30:01 2024 GMT
            Not After : Apr 16 23:35:01 2025 GMT
        Subject: CN=6C5B88D6E274710C3BB65F3D57C18F28FD03208D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:e5:06:44:ea:06:9e:82:0b:47:39:84:49:
                    62:85:e4:54:08:95:79:b5:37:a5:48:27:bb:15:0b:
                    3c:bb:ab:6d:f9:64:d1:57:b4:b4:d2:d4:95:26:d5:
                    0f:ff:f1:20:69:59:37:4d:69:91:be:27:b5:f2:ac:
                    0a:41:f3:6b:bd:9b:e8:c2:42:f8:29:ed:7b:ed:ba:
                    92:4a:75:25:f0:de:50:b2:55:17:87:8e:54:70:19:
                    8b:a4:26:81:0b:9f:41:08:dd:72:d9:af:31:04:b8:
                    83:99:4a:38:60:e4:e0:fb:49:1c:9a:b6:6e:e9:c3:
                    bf:05:5a:dc:39:37:aa:33:f1:32:5e:44:ca:f2:4c:
                    f9:58:8e:97:27:04:f1:c3:5c:11:e2:ef:90:7a:95:
                    13:1e:b9:99:f2:23:dd:68:53:77:21:5a:c9:2d:94:
                    ea:21:ad:fb:36:87:18:cf:89:31:fb:ae:23:9d:1f:
                    f5:c4:7a:c7:a1:c8:2f:cb:cc:47:b3:52:77:8a:52:
                    b4:bb:20:1f:86:1f:42:76:42:20:5b:88:dc:7e:ca:
                    10:ba:5b:94:61:70:97:44:85:4d:8b:4f:c0:f5:47:
                    b3:84:3e:33:a3:f4:79:62:de:2e:06:28:2b:3c:0a:
                    74:e6:12:9c:b2:42:f4:a9:22:ef:8b:ae:1c:60:dc:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:88:D6:E2:74:71:0C:3B:B6:5F:3D:57:C1:8F:28:FD:03:20:8D
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a3630303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:07:79:2a:14:e0:22:0d:b0:76:75:6f:d1:6b:71:4b:f7:28:
         31:6a:67:5d:23:2d:18:30:2e:96:74:bf:d9:81:59:8e:37:5b:
         af:47:d7:93:9b:ce:f6:88:59:af:9d:b3:51:84:e5:43:f3:a1:
         1b:34:83:d3:9a:c5:9f:5e:c3:9d:03:c2:b3:18:ba:a9:16:9b:
         44:e6:1e:8b:4e:da:1a:12:8b:41:40:91:11:de:b7:40:5f:cf:
         bc:e6:55:8a:fb:f5:55:cc:bc:66:8f:6d:b2:dc:0e:68:b8:3e:
         fe:fc:13:f9:71:b1:91:ef:fd:ac:ff:3a:b8:29:11:4d:19:0d:
         bf:da:5f:77:54:83:b6:6a:48:eb:b5:d0:cf:b4:21:67:5b:0f:
         b9:ca:a3:4f:f0:f1:0f:11:28:0f:6e:e5:dd:1f:3d:69:ad:80:
         fc:54:b1:ae:67:01:27:bb:3d:e0:e8:e3:55:5c:c6:e1:9e:fa:
         81:5e:0b:a4:af:3b:6a:c9:55:67:90:fb:80:df:b5:4e:b7:f9:
         20:9e:c2:27:dc:c9:62:b3:f6:d4:4d:16:a1:4b:59:ca:a8:63:
         93:e2:57:a7:90:4e:aa:b2:90:d5:57:5a:f8:3e:45:d9:85:f8:
         ad:76:cd:01:62:e8:fc:01:a0:8e:ce:51:8c:07:d4:f0:df:ec:
         2c:69:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org