Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a3a2f33322d3332203d3e20323633323337.roa
File:                     323830333a383138303a3a2f33322d3332203d3e20323633323337.roa (raw, json)
Hash identifier:          PMxreDgB3nSvSunH3gwQHQ2HXf7fLsnmK5XSa1ByVjM=
Subject key identifier:   08:85:75:68:30:44:84:7B:82:B0:4A:A1:B5:DC:4B:7C:C5:7B:FE:FA
Certificate issuer:       /CN=6F5638A54E694E3FCFC335F3AFD2311F07D05D08
Certificate serial:       62B09E448367DCF02353659C2F92CAE0129F87E1
Authority key identifier: 6F:56:38:A5:4E:69:4E:3F:CF:C3:35:F3:AF:D2:31:1F:07:D0:5D:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a3a2f33322d3332203d3e20323633323337.roa
Signing time:             Tue 05 Mar 2024 17:43:51 +0000
ROA not before:           Tue 05 Mar 2024 17:38:51 +0000
ROA not after:            Tue 04 Mar 2025 17:43:51 +0000
asID:                     263237
IP address blocks:        2803:8180::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b0:9e:44:83:67:dc:f0:23:53:65:9c:2f:92:ca:e0:12:9f:87:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5638A54E694E3FCFC335F3AFD2311F07D05D08
        Validity
            Not Before: Mar  5 17:38:51 2024 GMT
            Not After : Mar  4 17:43:51 2025 GMT
        Subject: CN=088575683044847B82B04AA1B5DC4B7CC57BFEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:40:d6:16:c0:07:a2:5e:bb:f7:7b:5c:70:
                    84:e4:a5:c9:59:ab:8a:17:7c:be:20:47:a0:b0:6c:
                    65:7a:3d:2d:ae:33:65:29:48:d0:90:1d:31:b0:2b:
                    a1:d5:bf:bb:86:9b:f5:cc:6b:3a:a7:3f:42:19:7c:
                    b4:41:65:fb:00:a0:4f:a4:aa:c3:b5:b9:96:e3:29:
                    fc:ef:0d:28:a0:61:7a:07:02:25:bb:92:13:2a:72:
                    d7:40:e0:d6:39:6c:c5:6d:36:b5:98:8e:21:34:00:
                    c9:1e:ea:e1:be:3f:05:a4:87:0f:e5:d5:64:bd:52:
                    a4:4e:13:61:63:8e:2e:b9:38:12:d8:ef:fb:ab:4e:
                    5b:c8:67:f9:3c:29:54:44:e5:6d:6d:06:8e:1c:31:
                    52:a8:97:26:59:13:b1:18:8c:e5:50:f2:46:87:e2:
                    04:e9:45:fb:a4:51:21:0f:1e:93:82:bd:8f:76:e2:
                    ae:18:5d:c9:34:bb:40:a6:11:94:84:ce:56:2a:1c:
                    e2:1d:e5:31:8b:e8:2c:7d:ae:36:f7:34:5a:c9:b0:
                    40:ce:6a:51:d1:f3:3f:fb:f5:67:d5:d7:ef:3a:67:
                    4a:38:93:70:24:cd:aa:17:35:6b:13:94:60:3d:28:
                    d0:c1:fd:97:5a:d0:56:b6:6f:82:0d:43:e0:d8:53:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:85:75:68:30:44:84:7B:82:B0:4A:A1:B5:DC:4B:7C:C5:7B:FE:FA
            X509v3 Authority Key Identifier:
                keyid:6F:56:38:A5:4E:69:4E:3F:CF:C3:35:F3:AF:D2:31:1F:07:D0:5D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/323830333a383138303a3a2f33322d3332203d3e20323633323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8180::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:2c:9a:d1:61:d3:55:29:9e:44:c8:22:8e:e5:d9:55:e5:
         90:7f:cb:5f:82:4a:76:5c:e4:d5:7c:3e:5c:10:d9:a9:2c:9f:
         69:eb:79:c1:4d:80:06:eb:ed:dd:d3:37:f5:06:68:b3:40:4d:
         72:df:bf:4d:4b:1a:d8:d6:e0:e7:8d:84:1d:a6:74:c1:c0:5c:
         93:1c:65:87:f9:47:9d:15:40:c6:db:77:67:fe:37:c7:cc:ef:
         7f:89:e2:56:60:d6:2b:8f:45:22:db:88:82:cc:d9:9e:fe:e9:
         db:48:a8:fc:5c:d6:77:d0:2e:20:34:5a:84:e9:7a:a7:bc:33:
         a4:70:05:57:2e:0e:6a:79:6b:69:f3:75:b1:f1:a1:c6:8e:70:
         60:e9:f6:92:5a:fb:e3:08:da:1e:71:d5:ab:5f:39:82:53:e0:
         6b:f4:3f:37:47:ea:34:9f:3e:ff:d5:ab:2b:c9:af:dc:e0:62:
         69:3a:b7:e5:a7:e6:a4:65:4e:d0:0a:30:a7:29:99:58:1d:19:
         3d:7d:96:ed:ce:b1:c7:60:07:db:ab:46:a9:09:1f:48:d9:f6:
         17:e3:70:46:30:27:a3:84:7d:3b:a1:c8:93:59:ab:03:ee:db:
         29:af:1d:69:78:1a:65:0e:36:ee:28:97:6a:23:3d:bf:d8:eb:
         69:a4:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org