Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/323830333a376336303a3a2f33322d3438203d3e20323639383336.roa
File:                     323830333a376336303a3a2f33322d3438203d3e20323639383336.roa (raw, json)
Hash identifier:          kSLT5+Qf9p3pnx57k95uva7DxcdsxX4mBHMhBlCNVU8=
Subject key identifier:   60:19:75:42:86:D6:C5:70:32:CE:B5:A5:34:7A:ED:A2:43:C4:71:1B
Certificate issuer:       /CN=50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A
Certificate serial:       206BDDF78BFDC3FC6B7127976C4DBDCE6FF54DD4
Authority key identifier: 50:AF:2A:53:60:96:4C:4E:EE:F3:CD:FC:03:ED:A5:C0:D2:F0:64:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/323830333a376336303a3a2f33322d3438203d3e20323639383336.roa
Signing time:             Tue 05 Mar 2024 18:19:04 +0000
ROA not before:           Tue 05 Mar 2024 18:14:04 +0000
ROA not after:            Tue 04 Mar 2025 18:19:04 +0000
asID:                     269836
IP address blocks:        2803:7c60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6b:dd:f7:8b:fd:c3:fc:6b:71:27:97:6c:4d:bd:ce:6f:f5:4d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A
        Validity
            Not Before: Mar  5 18:14:04 2024 GMT
            Not After : Mar  4 18:19:04 2025 GMT
        Subject: CN=6019754286D6C57032CEB5A5347AEDA243C4711B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:a0:7a:06:ad:f4:b2:dc:9a:6c:61:c1:9d:
                    5b:6d:23:24:db:30:dc:bf:e9:45:79:ac:f5:f5:f4:
                    3e:5f:2d:65:18:63:2a:70:21:ff:3e:f7:95:38:de:
                    5d:d8:5e:81:e0:b2:8b:42:7d:1a:c8:cb:44:17:60:
                    51:fa:7a:cb:d9:f4:cb:db:eb:47:d4:a5:e9:a6:45:
                    d1:44:7d:d4:c3:91:3b:93:64:39:6a:ea:97:88:2c:
                    74:4a:88:72:25:8b:8b:ac:46:d5:0c:4e:41:b0:0f:
                    ef:27:07:bb:0b:2c:da:cd:6c:51:71:70:f1:51:9d:
                    39:12:22:a3:c6:68:3e:aa:4f:b4:16:16:6b:3e:e2:
                    02:2a:06:e8:e1:de:e7:38:94:78:fc:21:d0:19:ce:
                    13:f2:eb:07:d5:12:0d:79:70:20:7e:53:bb:60:1e:
                    32:47:81:30:50:59:d1:c2:71:19:46:0a:39:4a:5d:
                    3c:2c:85:e9:f7:83:fb:8c:db:87:40:85:2d:4e:b0:
                    dc:72:48:3b:fd:06:33:95:db:85:fc:5f:53:66:67:
                    80:b8:10:b9:61:2f:61:55:fd:6e:cc:21:2f:51:a0:
                    85:44:dd:5a:fd:c8:5e:80:a2:fb:83:7e:86:7b:44:
                    b4:19:96:a7:b9:00:7f:3b:bd:7f:10:d5:8a:8a:42:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:19:75:42:86:D6:C5:70:32:CE:B5:A5:34:7A:ED:A2:43:C4:71:1B
            X509v3 Authority Key Identifier:
                keyid:50:AF:2A:53:60:96:4C:4E:EE:F3:CD:FC:03:ED:A5:C0:D2:F0:64:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/323830333a376336303a3a2f33322d3438203d3e20323639383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:80:0c:5b:1c:8a:f1:33:37:a4:0f:ed:5c:b3:10:ac:be:
         f9:db:58:94:03:cd:b6:62:a8:dd:d6:4b:c6:42:77:33:cf:1d:
         aa:00:a3:2e:d7:4a:bb:91:fc:d3:35:ae:31:62:0b:a3:ef:3f:
         f1:ee:78:b9:7c:81:32:e2:6d:ed:0b:cf:37:0d:5b:85:da:36:
         e2:97:af:38:a7:08:53:f1:57:90:57:f0:94:e3:72:42:39:a5:
         72:d0:34:ad:0e:a8:0a:9c:ce:92:7d:3c:69:95:4d:e3:20:8a:
         b6:63:7c:61:e4:76:6c:2d:2c:18:97:92:f4:96:25:46:72:8f:
         46:ad:50:8c:a2:6e:78:cf:a1:f2:87:98:61:07:89:9e:dd:7c:
         4d:59:ad:e8:bb:70:c3:11:88:d7:a1:b4:d3:7b:d0:2c:f2:ae:
         48:eb:6d:1e:a9:f5:41:2b:af:59:29:29:26:c6:38:54:33:e8:
         d3:8a:51:08:7b:ec:c1:4d:58:26:93:7f:0a:4a:f2:08:d3:b6:
         b0:ef:9f:62:d8:1d:32:63:9e:26:a4:4b:6c:82:fc:1f:10:fc:
         32:e6:22:70:2d:e6:0e:b4:db:14:96:10:df:5f:8e:ca:ee:e2:
         87:1b:43:93:69:ff:b1:da:5c:10:cc:6f:27:55:5a:e1:d4:d4:
         69:92:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:57 2024 by rpki-client on console-ams.rpki-client.org