Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/323830333a383665303a3a2f33322d3333203d3e20323639393532.roa
File:                     323830333a383665303a3a2f33322d3333203d3e20323639393532.roa (raw, json)
Hash identifier:          3x+eEhrOPfloGNEJa9mK5kvrHF7xVT0OAredxaSL0Bk=
Subject key identifier:   CA:A1:63:2D:F8:59:6C:74:03:F2:81:9C:E3:40:B6:19:00:34:99:E3
Certificate issuer:       /CN=6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9
Certificate serial:       7667EC2AA1CD5D41E261C4F6F2BDB30BD341BE5D
Authority key identifier: 6B:AA:54:6D:DB:6E:CE:50:1D:36:EC:D3:50:6D:D8:6E:A5:EA:56:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/323830333a383665303a3a2f33322d3333203d3e20323639393532.roa
Signing time:             Tue 05 Mar 2024 18:13:02 +0000
ROA not before:           Tue 05 Mar 2024 18:08:02 +0000
ROA not after:            Tue 04 Mar 2025 18:13:02 +0000
asID:                     269952
IP address blocks:        2803:86e0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:67:ec:2a:a1:cd:5d:41:e2:61:c4:f6:f2:bd:b3:0b:d3:41:be:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9
        Validity
            Not Before: Mar  5 18:08:02 2024 GMT
            Not After : Mar  4 18:13:02 2025 GMT
        Subject: CN=CAA1632DF8596C7403F2819CE340B619003499E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:79:c2:76:29:75:65:32:6b:a3:9f:a1:01:
                    11:87:8d:7f:44:81:77:dc:1a:19:0e:0e:c3:f5:1c:
                    44:ae:da:cd:f9:77:6c:b6:c8:d3:ce:4c:87:a2:33:
                    c1:8d:86:04:98:e7:7b:1d:45:05:64:01:e1:07:7a:
                    4a:ba:4c:e1:54:ac:82:44:24:db:b8:19:dd:51:ea:
                    48:1a:64:71:b9:51:23:56:59:3e:31:7c:94:b3:a5:
                    a8:0a:09:fb:b7:9d:28:95:91:17:a8:47:dc:44:15:
                    5f:ab:a9:3f:5e:8a:1b:3f:05:32:ce:f1:f3:aa:c9:
                    44:b5:35:b6:ca:14:16:80:5b:67:7a:83:22:32:a4:
                    f9:2e:ce:3e:ab:80:f6:6e:74:8d:bc:3a:03:f5:ba:
                    11:81:f8:ac:ca:78:d2:71:de:ee:df:e2:93:16:75:
                    1f:a8:1d:1a:df:c3:ac:48:2c:14:73:6e:ea:cd:72:
                    ff:bb:46:2f:b2:2e:ec:2e:32:8a:a5:a6:85:64:71:
                    42:5b:43:2e:67:dd:5f:90:67:62:48:cb:94:24:54:
                    7c:95:95:73:d6:f7:e6:f3:d3:0f:a8:74:40:08:39:
                    97:8b:b9:ae:be:20:84:53:43:31:7d:73:7a:57:73:
                    4c:0a:29:61:f9:49:e4:0b:a1:e9:a8:3d:8c:11:b8:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A1:63:2D:F8:59:6C:74:03:F2:81:9C:E3:40:B6:19:00:34:99:E3
            X509v3 Authority Key Identifier:
                keyid:6B:AA:54:6D:DB:6E:CE:50:1D:36:EC:D3:50:6D:D8:6E:A5:EA:56:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/323830333a383665303a3a2f33322d3333203d3e20323639393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:86e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:41:d9:b0:0b:4d:52:3e:8f:fe:8a:41:37:a8:a3:a4:28:
         3e:e2:21:ee:6f:d8:ff:61:46:a7:8e:cc:a8:bf:60:c9:63:ab:
         25:e0:a4:e2:6d:49:b8:a3:1d:d9:45:15:b1:b2:ee:8d:56:06:
         1b:2d:41:c2:be:91:53:7d:51:b6:9f:d9:0c:30:fd:09:30:a4:
         1c:45:57:b4:e5:22:83:36:fd:ea:55:6f:62:d3:79:6e:d6:fb:
         04:34:f6:d2:1e:bc:5f:07:93:2e:50:7b:e6:3b:c9:75:b0:bc:
         23:f6:36:85:e5:ed:6e:f8:1a:2d:6a:54:ff:ad:f0:10:82:f5:
         e3:19:a1:50:f7:76:95:ef:d7:a0:f0:c8:04:e7:2f:76:3d:a2:
         48:7a:69:d9:26:d7:eb:44:9e:91:b0:8b:8e:62:7f:f8:f8:b0:
         9f:a6:f4:57:fd:b3:02:2b:43:24:46:78:c7:79:5e:e2:45:4e:
         79:33:2e:a7:4f:53:9f:07:22:b7:fe:79:02:ef:ee:5a:ae:bd:
         a6:72:0b:18:3e:2b:aa:f2:8c:30:ae:7e:a1:83:9d:53:49:77:
         d0:c9:d2:f3:0c:98:ae:23:4a:05:2e:48:ec:53:1a:38:ea:06:
         12:e2:88:c5:3a:d1:42:6a:9d:55:d6:d5:b4:1e:5b:9e:78:42:
         0e:87:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 11:56:29 2024 by rpki-client on console-fra.rpki-client.org