Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa
File:                     323830333a633836303a3a2f33322d3332203d3e20323637383139.roa (raw, json)
Hash identifier:          8VjYrwnXA5Cv2AFzEh0an91nWQeFDaaShHpYpGFkWe4=
Subject key identifier:   67:8C:A8:4A:3F:27:20:DD:6F:B5:FF:79:EE:8F:55:B5:25:8C:C6:B1
Certificate issuer:       /CN=F2F56A7D46F18855519ECBFCA7BDC0C7D3508748
Certificate serial:       56DE60AF8D646CE5E98D1D4A0FEF62760B757477
Authority key identifier: F2:F5:6A:7D:46:F1:88:55:51:9E:CB:FC:A7:BD:C0:C7:D3:50:87:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa
Signing time:             Tue 05 Mar 2024 18:18:31 +0000
ROA not before:           Tue 05 Mar 2024 18:13:31 +0000
ROA not after:            Tue 04 Mar 2025 18:18:31 +0000
asID:                     267819
IP address blocks:        2803:c860::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:de:60:af:8d:64:6c:e5:e9:8d:1d:4a:0f:ef:62:76:0b:75:74:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F56A7D46F18855519ECBFCA7BDC0C7D3508748
        Validity
            Not Before: Mar  5 18:13:31 2024 GMT
            Not After : Mar  4 18:18:31 2025 GMT
        Subject: CN=678CA84A3F2720DD6FB5FF79EE8F55B5258CC6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:54:6c:a5:51:47:20:2a:5e:8a:26:de:a5:
                    6c:f0:e1:4a:95:cf:c4:b5:cb:31:56:d4:1b:0c:e8:
                    76:0d:20:79:fc:e3:cf:1b:4e:62:29:ba:45:5d:47:
                    3c:cd:e4:39:bd:eb:23:4c:64:62:63:4d:2d:97:59:
                    fb:71:4d:fc:16:64:27:4b:c4:65:5a:51:9b:9a:4c:
                    b4:3d:77:4c:2e:32:95:41:65:42:cb:9f:19:97:cb:
                    4f:dd:be:f0:44:96:81:90:ab:ab:b8:79:cc:97:07:
                    9f:62:14:e1:e8:50:a5:73:cd:a9:8e:a1:27:43:72:
                    46:3c:9c:5b:fd:a2:ec:d2:3e:09:39:bb:6b:f3:4b:
                    69:21:20:b6:f7:ca:41:cd:b2:02:d9:ff:3b:e3:93:
                    e7:11:42:6e:47:fc:ca:8d:e0:ca:c9:b0:16:34:22:
                    49:dd:cb:21:f6:d3:e6:df:cd:d5:23:51:6a:12:be:
                    53:31:bb:cc:68:3c:8c:d0:2f:61:ac:6f:e7:ce:02:
                    27:83:af:8d:fe:10:c7:42:34:12:82:34:fb:bc:a4:
                    4c:c4:d9:f9:e1:a3:f5:f7:fb:50:c5:ce:be:9f:d7:
                    e7:56:fe:0d:6e:1c:e8:6b:fb:79:47:51:b5:34:7b:
                    35:1c:3a:bf:6c:c4:79:55:40:cb:b8:54:a4:df:02:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8C:A8:4A:3F:27:20:DD:6F:B5:FF:79:EE:8F:55:B5:25:8C:C6:B1
            X509v3 Authority Key Identifier:
                keyid:F2:F5:6A:7D:46:F1:88:55:51:9E:CB:FC:A7:BD:C0:C7:D3:50:87:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c860::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:4a:eb:9b:5b:39:dc:56:87:e9:e9:85:a3:4a:c0:a1:71:8f:
         bd:d9:24:4e:6e:0d:68:c7:1b:ca:06:05:69:db:7d:fa:06:f0:
         f3:27:51:b6:c6:84:08:4d:c4:c8:86:9c:bc:c0:58:70:b8:95:
         78:d6:bd:b5:da:ea:aa:63:b0:ec:a8:f4:44:93:ec:e4:66:27:
         13:36:ab:f8:2a:a5:ac:90:2e:48:23:39:4c:ea:1f:62:24:99:
         1d:e2:fb:24:32:b1:bb:a7:0b:84:9c:b1:8b:96:f8:0d:35:5f:
         92:ee:2e:45:63:5d:42:1c:94:f9:6e:b5:b3:5a:be:ba:df:94:
         08:0c:58:e6:04:c8:ee:ba:2f:c1:b2:b3:9c:fe:d8:dc:dc:68:
         d7:b6:39:c6:08:a8:e9:7c:e4:1d:a9:d1:22:7d:78:31:4e:69:
         2d:dd:c6:9c:74:83:6a:b8:b8:06:05:c1:4a:27:87:0e:27:fa:
         45:f5:6d:53:3e:8d:41:2b:0c:1e:62:8e:47:39:60:4c:89:5e:
         1e:0b:fb:ad:ae:a2:dc:c6:12:42:53:2f:15:f3:6a:09:f2:84:
         72:19:c1:f7:cc:c9:1c:93:6a:a9:f9:a0:fe:84:f6:68:92:7d:
         c1:23:fe:d4:bc:fe:3d:40:f4:2a:a6:d1:0f:e1:98:6d:39:20:
         88:69:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org