Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a666666663a3a2f34382d3438203d3e203631343933.roa
File:                     323830333a656238303a666666663a3a2f34382d3438203d3e203631343933.roa (raw, json)
Hash identifier:          qpogf6l0Gb+sssX2DoMY1o+aaBOgnCEPcm6fwkSPsgc=
Subject key identifier:   EE:5F:85:1C:3D:67:C4:59:4A:FA:DB:A9:2E:12:8C:AE:46:2F:AD:99
Certificate issuer:       /CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
Certificate serial:       53B27BCACA3044A426DBBCC659ED851125125852
Authority key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a666666663a3a2f34382d3438203d3e203631343933.roa
Signing time:             Tue 05 Mar 2024 17:54:14 +0000
ROA not before:           Tue 05 Mar 2024 17:49:14 +0000
ROA not after:            Tue 04 Mar 2025 17:54:14 +0000
asID:                     61493
IP address blocks:        2803:eb80:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b2:7b:ca:ca:30:44:a4:26:db:bc:c6:59:ed:85:11:25:12:58:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
        Validity
            Not Before: Mar  5 17:49:14 2024 GMT
            Not After : Mar  4 17:54:14 2025 GMT
        Subject: CN=EE5F851C3D67C4594AFADBA92E128CAE462FAD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:61:ce:96:8a:16:f7:90:63:47:a7:3f:bb:67:
                    e7:82:be:71:af:8a:46:3e:ae:c3:8c:28:a7:56:05:
                    2a:0a:8b:a7:cf:fd:7a:ed:a4:05:f0:93:7e:42:1e:
                    8c:81:f9:b6:02:c6:b7:06:63:9b:a1:b1:d9:44:d4:
                    94:7a:ae:b5:96:d6:9c:4b:2b:f7:14:47:0e:52:95:
                    f8:03:09:e5:e4:07:50:b7:a3:58:24:e9:e3:ff:bc:
                    b0:f2:b1:37:3b:3d:df:37:14:c9:7b:69:56:56:2c:
                    75:55:25:07:07:14:a8:3f:12:6f:c2:a7:25:28:37:
                    5a:da:ae:83:b0:f3:e4:1b:6a:44:ea:9a:0c:bc:c8:
                    99:27:e1:b7:3b:8e:6a:32:b2:46:6b:ed:c2:61:17:
                    ea:30:29:da:ac:06:b1:bb:46:c1:27:df:2f:89:c0:
                    84:f0:32:6e:87:0b:92:a9:ba:01:d3:16:a4:19:c6:
                    43:98:73:f7:7b:62:a6:3c:3b:0a:b9:48:bd:be:d1:
                    d2:63:f2:54:55:41:0f:a0:8a:89:b1:39:01:e4:9b:
                    aa:6b:c7:8e:5a:d4:fd:fb:09:0c:3e:e2:7a:27:5f:
                    d7:cf:5b:ca:60:61:4b:d6:11:85:87:0b:ba:c4:56:
                    ef:f7:62:d9:2d:66:94:f6:41:b9:a9:85:f7:55:f3:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5F:85:1C:3D:67:C4:59:4A:FA:DB:A9:2E:12:8C:AE:46:2F:AD:99
            X509v3 Authority Key Identifier:
                keyid:1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/323830333a656238303a666666663a3a2f34382d3438203d3e203631343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb80:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:18:c3:aa:4f:8b:a5:fd:25:c5:00:f6:ab:ff:3a:c6:2a:36:
         44:a5:ca:69:8f:1d:d5:7e:9a:75:13:93:7b:06:c5:cd:26:16:
         ac:1c:39:99:84:06:a1:2a:1d:3c:0d:47:17:66:83:35:44:2c:
         c6:35:e2:15:3e:74:e3:28:2f:00:2a:5d:f6:ef:41:e8:1c:3f:
         52:fe:4c:74:45:62:fd:ca:3b:aa:06:64:d8:26:99:9c:74:5d:
         40:6c:38:b8:14:1f:cd:34:3a:e3:02:71:08:c2:3d:0c:64:98:
         41:d3:06:86:17:db:1c:fa:99:f4:39:63:2d:c4:47:91:11:0f:
         bd:23:20:91:1f:88:ad:52:e7:33:f3:ed:3f:6c:28:59:25:43:
         33:3c:36:2a:4f:bd:67:1c:74:d8:ec:8d:b9:b8:0c:11:38:0c:
         32:39:18:2c:59:5d:c9:a0:d2:66:f2:14:2e:88:03:c6:f4:0f:
         d8:7f:c3:c9:41:08:ea:f6:ca:f5:c0:0f:dc:57:3f:ed:c8:5d:
         02:3a:18:60:8b:5a:a3:63:61:f3:51:a3:d6:46:b3:5e:a5:7e:
         74:87:ad:6d:09:fc:78:60:74:84:de:08:e9:93:2b:a3:c0:11:
         fc:96:af:78:f4:0d:61:b4:ce:c5:ee:1c:ad:96:3e:c5:13:7d:
         9d:64:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org