Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/323830333a343032303a3a2f33322d3332203d3e20323635373931.roa
File:                     323830333a343032303a3a2f33322d3332203d3e20323635373931.roa (raw, json)
Hash identifier:          0hVrEaFOVWFkuyO1G/T9ZL06EqdL0qyGNRGeeMcyCCs=
Subject key identifier:   3F:A9:57:15:89:06:70:49:8D:ED:96:2C:32:2E:6E:60:73:57:50:C8
Certificate issuer:       /CN=C6791FEEF06E36CD47B24F50BE75204A96766A57
Certificate serial:       240EFA92EF9F1086C2F7D94100E6172E2AD54E5E
Authority key identifier: C6:79:1F:EE:F0:6E:36:CD:47:B2:4F:50:BE:75:20:4A:96:76:6A:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/323830333a343032303a3a2f33322d3332203d3e20323635373931.roa
Signing time:             Tue 05 Mar 2024 17:46:35 +0000
ROA not before:           Tue 05 Mar 2024 17:41:35 +0000
ROA not after:            Tue 04 Mar 2025 17:46:35 +0000
asID:                     265791
IP address blocks:        2803:4020::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0e:fa:92:ef:9f:10:86:c2:f7:d9:41:00:e6:17:2e:2a:d5:4e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6791FEEF06E36CD47B24F50BE75204A96766A57
        Validity
            Not Before: Mar  5 17:41:35 2024 GMT
            Not After : Mar  4 17:46:35 2025 GMT
        Subject: CN=3FA95715890670498DED962C322E6E60735750C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:25:23:0c:64:98:c2:fb:4d:ca:8c:a0:19:
                    6d:34:f2:4c:b6:12:c9:7c:ad:36:65:1f:74:b3:94:
                    2d:99:79:a9:fb:7f:7f:f5:6a:94:f6:23:ec:0b:43:
                    8c:ea:78:a9:13:df:2f:37:3b:ff:6d:f1:7a:19:16:
                    51:ae:09:7d:bd:e6:1a:88:e7:8f:9d:72:ef:d9:de:
                    1f:96:ae:2e:3d:f1:e9:74:0c:23:3a:aa:b8:82:ee:
                    21:a0:e3:53:aa:db:3e:b2:ef:af:62:c2:8a:45:1a:
                    72:e6:64:bd:9e:a1:5f:2d:0f:c4:67:44:39:6f:4d:
                    da:bd:c9:19:53:b3:af:a3:30:41:18:fc:6d:46:d8:
                    ca:66:d3:4b:9c:15:09:13:8e:11:b9:c8:a5:8d:15:
                    10:dd:10:c4:c0:e5:25:0b:87:f8:49:88:0f:ee:c3:
                    4e:3c:ac:bc:19:b0:2b:d2:73:78:f4:fa:e2:79:a2:
                    e7:97:b1:81:80:6f:8b:2a:cf:4b:08:67:56:d9:9e:
                    89:b0:1e:db:f6:7f:7d:96:91:09:56:a5:d6:dd:6a:
                    b2:26:db:cb:01:2c:4d:c8:70:1e:82:09:93:62:04:
                    de:c9:9b:53:58:86:0b:80:12:70:7b:23:bb:3e:26:
                    10:81:56:bd:15:04:4e:3f:6e:25:75:53:df:90:8c:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A9:57:15:89:06:70:49:8D:ED:96:2C:32:2E:6E:60:73:57:50:C8
            X509v3 Authority Key Identifier:
                keyid:C6:79:1F:EE:F0:6E:36:CD:47:B2:4F:50:BE:75:20:4A:96:76:6A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6791FEEF06E36CD47B24F50BE75204A96766A57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6510BCB84E06E5145140DF04BBA8221A64525EE4D85530184AF2FFB9A60E4A8/0/323830333a343032303a3a2f33322d3332203d3e20323635373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4020::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:15:a5:5b:26:b5:59:e5:9e:1e:a0:a6:db:b8:e9:e4:23:82:
         e2:e7:80:c3:f8:1d:e4:1f:16:91:11:c1:5e:14:c5:89:45:a5:
         4c:a0:9a:bf:c4:5f:cf:6f:8d:d5:b6:08:fe:b0:c9:15:e2:95:
         e1:57:1e:e5:e8:30:47:2d:d3:71:5d:d9:35:79:1e:39:ba:fa:
         44:0e:33:78:b4:7d:8e:6f:0e:c4:78:48:cc:8d:0f:ca:c4:24:
         97:69:e1:0e:e9:54:21:a0:36:47:72:bf:fa:8b:09:b5:eb:d9:
         65:4d:b6:74:bd:f8:f7:da:f0:76:31:59:66:7f:c9:b4:7b:bf:
         c0:7a:5b:84:6b:6f:e7:b0:66:91:67:0f:dd:a5:20:ec:b0:6d:
         3c:0b:7e:54:17:08:bb:79:34:2c:48:b4:46:bb:c7:23:b7:25:
         1d:f5:53:67:21:53:56:23:4b:c2:13:75:cc:3c:63:c0:7e:61:
         22:8b:b8:f0:3e:ca:af:5b:0a:cd:5a:44:d4:8a:5c:d1:c4:65:
         e0:88:1d:f0:f7:f3:f1:1b:51:2a:dc:f0:49:da:be:28:a6:23:
         42:28:ee:79:37:77:93:a4:ca:0a:4c:65:2f:b3:d9:05:8e:08:
         8f:5f:25:69:5b:62:f4:94:b8:77:fd:80:2b:4f:7b:89:4d:37:
         87:be:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org