Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          ACfcRln1I4dN96Y6ZZisqwYEB4oxPYGqp1Bn7f7uUVg=
Subject key identifier:   7E:C5:1B:4D:7C:C1:96:A4:76:96:CC:20:3E:4A:E2:00:F2:C2:C4:6E
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       758ED0212F1B7FDE5124714303FA74B73E6909B5
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Sun 01 Sep 2024 01:10:00 +0000
ROA not before:           Sun 01 Sep 2024 01:05:00 +0000
ROA not after:            Sun 31 Aug 2025 01:10:00 +0000
asID:                     64120
IP address blocks:        2803:f080:20a0::/43 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8e:d0:21:2f:1b:7f:de:51:24:71:43:03:fa:74:b7:3e:69:09:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Sep  1 01:05:00 2024 GMT
            Not After : Aug 31 01:10:00 2025 GMT
        Subject: CN=7EC51B4D7CC196A47696CC203E4AE200F2C2C46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:0a:c2:69:59:c8:67:8b:5d:64:1f:af:bd:
                    b9:96:48:cf:1d:82:ee:13:f2:48:77:ba:e0:d8:31:
                    42:ea:75:b9:26:8f:cf:94:29:e0:44:bf:e8:70:43:
                    45:25:a1:b8:6a:0c:ef:bb:ff:26:1e:4d:3d:c7:ce:
                    4c:12:80:0b:cf:b2:2d:04:2a:ec:c8:f7:61:7a:ff:
                    d0:24:d8:b7:fe:aa:de:e9:ef:0a:6b:43:85:6c:03:
                    e6:e5:f5:87:6e:f3:ad:21:bc:2e:d3:5c:30:a9:d1:
                    9a:26:de:21:44:93:b1:1d:db:30:a6:24:fe:d0:26:
                    24:83:e1:50:3e:1a:29:63:71:a2:f6:63:39:9f:c9:
                    42:5b:a9:8c:b0:ff:fd:70:3e:72:ad:ba:b3:ed:e4:
                    f8:ca:6e:2c:36:73:0b:6b:f7:01:e8:72:54:af:b6:
                    67:65:86:c0:2a:71:06:f0:22:da:fe:92:1a:22:bf:
                    fc:4c:28:e4:46:ee:0f:05:48:bb:fa:b7:3d:eb:7c:
                    41:9b:83:e9:6f:41:dc:b2:3e:f4:84:cc:2b:8a:3c:
                    48:c4:a4:45:6f:4e:cb:38:88:33:bc:9e:f4:56:19:
                    aa:71:0b:e8:e8:f7:7b:e5:ae:0e:0f:65:8a:07:8c:
                    05:93:18:cb:72:d6:b8:29:2c:a1:7c:fb:c6:ad:df:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C5:1B:4D:7C:C1:96:A4:76:96:CC:20:3E:4A:E2:00:F2:C2:C4:6E
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:20a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         88:ed:50:97:35:f5:71:6d:d0:2e:72:aa:0a:29:3e:55:bf:c7:
         d0:aa:b2:16:22:f9:1d:15:7f:56:2d:14:3f:62:a7:bd:09:1a:
         41:34:f6:ca:b6:e8:93:d0:60:9f:33:f2:a8:37:b7:5a:b2:e4:
         5d:00:88:cf:be:d8:d8:23:6c:bf:dc:64:30:64:20:19:53:5c:
         72:82:4f:7d:be:57:96:7d:12:98:c4:db:4c:40:de:1f:ea:ff:
         5b:57:5b:76:bd:87:a3:3a:ae:3a:18:a8:e9:93:46:dd:af:b4:
         bd:f9:a4:b4:69:3a:de:40:b1:c4:19:19:98:85:38:af:f4:33:
         e0:ed:22:0b:e8:fc:c9:5d:10:b9:3e:c3:17:cd:72:63:ea:ef:
         47:51:99:3d:0c:7b:04:2d:ca:b0:a0:9c:93:7f:05:13:81:4f:
         07:f7:35:61:5f:13:b6:16:82:79:c4:a0:19:22:55:5c:b6:b9:
         7b:58:c2:ad:5a:05:e9:ae:68:b2:51:2d:49:ca:5f:43:90:f5:
         4b:d7:09:0d:e5:8b:bd:7b:8d:16:42:35:fe:ea:e1:7d:85:13:
         aa:bc:a5:58:5e:b1:c2:a7:a7:7c:d8:9e:52:5a:c0:d1:57:75:
         da:b9:b3:96:0d:16:e0:66:f9:c9:32:a5:43:d5:e2:e3:e4:d7:
         c7:da:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org