Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa
File:                     323830333a643036303a3a2f33322d3438203d3e20323637383133.roa (raw, json)
Hash identifier:          VIfJCB+XYTf+/Mp5xPcLwPP5KFzc4YAJZs+33d+lIQU=
Subject key identifier:   FB:31:C0:D4:8C:3F:EA:91:2F:79:AF:FE:B0:04:2B:09:D5:C0:F9:97
Certificate issuer:       /CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
Certificate serial:       61F99E6AE26DAF575F664EAA6F40EDD5DF0B90EB
Authority key identifier: 4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa
Signing time:             Tue 05 Mar 2024 18:16:46 +0000
ROA not before:           Tue 05 Mar 2024 18:11:46 +0000
ROA not after:            Tue 04 Mar 2025 18:16:46 +0000
asID:                     267813
IP address blocks:        2803:d060::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f9:9e:6a:e2:6d:af:57:5f:66:4e:aa:6f:40:ed:d5:df:0b:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
        Validity
            Not Before: Mar  5 18:11:46 2024 GMT
            Not After : Mar  4 18:16:46 2025 GMT
        Subject: CN=FB31C0D48C3FEA912F79AFFEB0042B09D5C0F997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:9f:33:5c:78:b0:dc:bb:aa:8a:3f:56:77:
                    83:6b:01:35:6c:c3:f9:24:ab:17:8e:7f:54:04:26:
                    15:f0:3c:77:e7:7d:93:6e:aa:84:32:aa:6c:dd:d8:
                    18:8d:cd:c7:64:fc:35:d1:85:d1:76:6c:29:13:2e:
                    5b:ac:2b:44:e0:e8:49:d0:7b:96:3f:62:c8:50:1b:
                    1c:fb:71:88:db:a9:e4:93:5f:53:ce:ba:9b:68:5b:
                    f1:10:ed:b7:7f:9b:10:f0:ac:46:04:40:91:93:79:
                    95:ab:85:65:53:51:8a:e4:a9:d3:e5:ef:4b:44:f3:
                    7a:8f:c6:9a:9f:ae:62:f1:f2:9b:1b:bb:e9:d3:09:
                    96:4a:52:61:69:fa:94:6b:26:cf:f0:4a:3e:ad:87:
                    a7:4a:d4:43:69:4f:42:44:be:97:89:89:4f:0d:b8:
                    af:c7:7b:6e:3e:46:0c:eb:c7:b1:be:14:38:d1:60:
                    45:18:cf:11:f9:5a:3b:e5:5c:e7:99:d0:09:f2:b4:
                    4a:75:be:c4:e3:e9:d4:a7:c8:50:da:2f:80:77:77:
                    75:db:01:78:11:6c:a1:86:60:ec:5f:44:05:b8:ae:
                    08:0c:6c:76:d7:ba:cb:b8:7a:01:87:aa:6a:7b:10:
                    84:0f:ed:d4:a5:f3:bf:08:0d:bf:36:c1:46:69:c2:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:C0:D4:8C:3F:EA:91:2F:79:AF:FE:B0:04:2B:09:D5:C0:F9:97
            X509v3 Authority Key Identifier:
                keyid:4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e20323637383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d060::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:96:bf:e9:87:59:b7:d7:25:26:92:79:89:14:fe:4c:aa:a0:
         63:7e:29:18:f5:14:1f:69:8f:23:d4:1e:52:0c:f2:cb:03:c6:
         a8:ca:05:e2:ab:c3:e4:70:fd:fe:52:ef:18:10:11:47:d6:7a:
         53:05:10:fc:11:be:65:38:6d:38:31:45:d9:11:e5:39:ca:e7:
         70:3f:a0:54:9c:d8:c9:c1:5c:dd:3d:58:9f:87:e3:5a:23:8f:
         f1:8b:c1:69:a6:95:2c:67:60:47:3d:53:cd:81:e0:b8:fa:84:
         6a:99:66:86:42:54:22:6b:56:34:1b:f5:23:e5:28:ef:dd:56:
         11:36:0f:0c:f6:b3:71:11:60:e6:8a:51:ab:01:7c:13:b5:f7:
         e4:13:83:6c:06:88:28:6e:88:fa:84:13:a3:8d:2c:c4:0d:ff:
         76:3a:85:2d:cf:c1:06:94:45:e1:95:92:e0:72:39:36:64:cd:
         57:cf:14:1d:bf:e2:2e:bc:9f:87:41:6c:c9:9d:18:05:9e:7a:
         00:98:ea:26:97:db:43:6f:ae:a9:2d:a8:e0:e4:ea:2c:e2:57:
         b1:6a:1b:3b:03:59:93:05:5f:d2:c0:a2:82:8c:66:bc:4b:04:
         d6:de:1e:50:91:b2:59:dd:97:69:5d:0e:60:7e:fe:b8:cc:70:
         39:1b:dc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org