Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a383a3a2f34372d3438203d3e20323633323337.roa
File:                     323830333a383138303a383a3a2f34372d3438203d3e20323633323337.roa (raw, json)
Hash identifier:          hsbkZnjO+Q9P+IVHnRioRTFfWN6G9ggMzALV0kzbY28=
Subject key identifier:   14:77:EB:AC:1C:8B:7C:FB:34:C5:8C:EE:1E:0E:82:01:95:EE:D0:EE
Certificate issuer:       /CN=6F5638A54E694E3FCFC335F3AFD2311F07D05D08
Certificate serial:       1FB0BF12D4AA31D1165EF90077C1D7A4F870973F
Authority key identifier: 6F:56:38:A5:4E:69:4E:3F:CF:C3:35:F3:AF:D2:31:1F:07:D0:5D:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a383a3a2f34372d3438203d3e20323633323337.roa
Signing time:             Tue 05 Mar 2024 17:43:51 +0000
ROA not before:           Tue 05 Mar 2024 17:38:51 +0000
ROA not after:            Tue 04 Mar 2025 17:43:51 +0000
asID:                     263237
IP address blocks:        2803:8180:8::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b0:bf:12:d4:aa:31:d1:16:5e:f9:00:77:c1:d7:a4:f8:70:97:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5638A54E694E3FCFC335F3AFD2311F07D05D08
        Validity
            Not Before: Mar  5 17:38:51 2024 GMT
            Not After : Mar  4 17:43:51 2025 GMT
        Subject: CN=1477EBAC1C8B7CFB34C58CEE1E0E820195EED0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:d6:81:99:69:fb:1c:cf:a8:24:f5:3b:da:
                    6f:8c:c7:8c:aa:c6:b5:d1:75:4b:e5:52:61:ca:4e:
                    46:7f:26:76:e0:8e:1c:c1:66:c1:fb:0e:c8:b1:6f:
                    7e:e6:e6:20:c1:df:23:d4:aa:3a:03:b8:0c:4d:ed:
                    31:9d:e5:9b:ef:cf:f6:20:c0:9d:c9:a9:a3:86:87:
                    88:66:8a:a2:74:58:2e:41:05:69:b9:85:b9:f9:ba:
                    e6:4c:3f:5c:d8:61:2e:59:a0:c7:84:09:e5:f9:3d:
                    d0:6c:30:aa:b0:c0:cd:73:92:bb:60:6c:99:d9:45:
                    d0:10:88:8c:3e:5d:a1:f7:51:bc:fa:e0:15:00:a8:
                    c1:a2:72:16:ee:0f:49:52:3b:c6:a6:f4:2d:aa:09:
                    72:02:ca:49:97:43:b2:61:9a:94:cc:57:a8:74:0d:
                    42:8e:5d:a8:d2:b9:74:36:5d:52:44:41:c1:d5:0f:
                    19:71:83:02:51:6d:f8:6a:3b:da:16:b9:57:5c:56:
                    10:c6:57:d0:5d:51:1d:a4:fc:82:47:5b:8c:9c:ef:
                    a4:81:ab:f2:af:9e:b5:7e:ed:65:8c:44:2b:d3:89:
                    43:03:2a:3d:78:a1:00:a8:ed:4d:1c:39:35:c3:ad:
                    0f:65:85:51:0d:0d:63:8e:7d:3b:0e:12:c8:d7:fd:
                    69:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:77:EB:AC:1C:8B:7C:FB:34:C5:8C:EE:1E:0E:82:01:95:EE:D0:EE
            X509v3 Authority Key Identifier:
                keyid:6F:56:38:A5:4E:69:4E:3F:CF:C3:35:F3:AF:D2:31:1F:07:D0:5D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a383a3a2f34372d3438203d3e20323633323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8180:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:15:27:35:18:6f:bc:d3:8c:98:3c:6f:3b:2a:f6:44:6a:
         81:14:45:1e:c5:37:4e:89:fb:bc:17:ab:7a:ce:76:12:4b:7a:
         15:7d:6b:79:a8:c5:77:5e:bb:ab:3f:52:e9:1e:86:37:95:c8:
         ac:13:70:f0:30:5d:8d:82:eb:8b:85:85:1d:96:27:c1:5f:40:
         0b:82:3d:d8:c3:80:3d:f2:d7:91:a5:b7:3e:c1:76:ed:dd:d0:
         b0:07:22:86:e5:10:de:00:bd:90:34:cf:78:c4:c9:a5:ea:73:
         59:35:aa:cb:7f:3c:f7:aa:29:e8:1c:1d:95:f6:5b:ee:f4:1f:
         34:dd:d9:16:bf:b0:54:33:7a:1e:fd:30:d4:42:10:91:e8:34:
         ca:f8:e6:85:2e:af:64:e8:df:0e:6a:4f:4b:0f:e4:7c:14:c1:
         fe:6a:87:a3:52:d0:19:dd:03:9e:29:d1:6c:76:bf:b9:31:4a:
         ac:33:7e:52:4c:11:02:80:e1:28:c3:79:0f:03:eb:51:f5:cd:
         89:28:e6:bf:f1:09:e4:c9:38:a9:29:b8:f1:6c:f8:99:79:16:
         71:57:6e:c1:d9:eb:29:c4:bf:f0:f5:54:e4:90:93:9e:a5:61:
         77:df:f2:37:83:4c:49:68:92:fa:ea:02:23:16:23:af:b7:c2:
         10:17:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org