Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa
File:                     323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa (raw, json)
Hash identifier:          rYgTy4qq1+FbyjAPsiLTnne4QOkrz7N19QGIm0ZBD4w=
Subject key identifier:   B6:75:05:46:95:39:02:EC:11:CE:DD:88:CE:CC:88:A5:3A:A0:08:FA
Certificate issuer:       /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial:       54442F5218221E708749846400A7A0B1D04D44F0
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa
Signing time:             Mon 14 Oct 2024 02:40:01 +0000
ROA not before:           Mon 14 Oct 2024 02:35:01 +0000
ROA not after:            Mon 13 Oct 2025 02:40:01 +0000
asID:                     272889
IP address blocks:        2803:8690:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:44:2f:52:18:22:1e:70:87:49:84:64:00:a7:a0:b1:d0:4d:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
        Validity
            Not Before: Oct 14 02:35:01 2024 GMT
            Not After : Oct 13 02:40:01 2025 GMT
        Subject: CN=B6750546953902EC11CEDD88CECC88A53AA008FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:4d:9f:62:47:ca:44:ec:c0:97:cc:fa:9a:
                    39:46:03:d8:3d:f1:cf:2b:af:4e:1c:32:5b:3a:83:
                    06:9d:8a:ba:db:27:f8:ec:72:0f:4f:58:ee:e0:f3:
                    5b:e7:55:4b:44:f6:70:4c:a4:a3:19:b9:8e:04:85:
                    d1:5a:9d:84:a1:44:85:84:22:59:28:a4:46:e6:e3:
                    8e:a0:6c:6a:d3:a5:79:fe:92:2f:e8:7d:c0:dd:0e:
                    04:27:2c:ad:2d:0e:5f:8a:e4:de:0b:e0:23:e8:e0:
                    c6:c5:a8:a8:93:cf:c6:a6:77:f1:7a:d3:89:cf:b2:
                    f9:ac:6f:b7:05:90:fc:7d:73:75:a8:ed:e8:f9:55:
                    71:ea:dc:87:24:7c:5d:74:dc:a2:e0:d6:94:22:2d:
                    0a:26:84:d9:60:4c:9c:ff:61:ac:e6:ad:a5:69:bd:
                    62:67:bd:67:57:40:53:07:8a:8d:3e:a2:e4:b5:99:
                    d6:1e:36:07:02:9e:15:52:c7:4c:80:2a:22:3c:5b:
                    19:42:16:9c:a8:60:53:3e:e5:80:55:7f:62:17:4f:
                    2c:9d:53:b8:f7:70:78:af:da:71:65:72:77:e8:ab:
                    23:6a:bf:bd:37:80:bc:85:b5:c6:c9:51:56:a0:1b:
                    2a:8b:8f:29:23:af:8a:f0:aa:86:ed:dc:7f:8c:c6:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:05:46:95:39:02:EC:11:CE:DD:88:CE:CC:88:A5:3A:A0:08:FA
            X509v3 Authority Key Identifier:
                keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8690:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:04:5c:4a:67:7c:ea:aa:be:4d:57:59:2c:47:79:5c:eb:16:
         18:9a:ef:3d:40:4c:61:4a:1f:f8:3c:b7:98:d2:15:91:de:78:
         2a:bc:d4:c6:64:55:2d:91:87:fd:35:d9:30:c4:f0:a2:7d:7a:
         6f:db:0e:72:27:ef:35:8e:ba:bc:c8:2f:05:19:e0:00:b5:1d:
         5b:64:49:75:d6:67:d6:81:5b:92:5d:58:98:36:67:12:7b:c9:
         5f:04:91:56:82:49:3e:a8:a9:07:4b:b7:b0:1c:1e:60:c5:1b:
         8d:ff:f4:c4:26:a0:53:61:70:7c:ca:00:53:f2:ff:f4:48:bb:
         c5:8c:db:14:a1:eb:b5:6e:5e:3e:bc:73:46:69:69:33:6b:92:
         a4:ac:1b:96:50:a3:9e:2d:34:82:fd:50:bb:41:ec:96:e9:e5:
         21:74:49:3e:15:32:ae:7e:be:3b:bb:54:b6:79:c1:31:f1:fe:
         d0:f7:f6:79:2a:5a:a3:03:88:eb:82:be:31:8a:bb:ec:8a:53:
         b1:02:df:ef:f0:b0:da:28:bf:e5:3d:0f:36:6e:14:1d:34:ab:
         51:2d:8c:12:78:d3:5a:fe:80:3f:7b:c6:85:cd:69:39:24:f6:
         d8:27:b4:cf:ac:31:a3:f4:00:31:6c:de:7c:db:4b:59:73:db:
         da:8f:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:04 2024 by rpki-client on console-fra.rpki-client.org