Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326330303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          HqUYJQEEEPxXEhbIhrl82Ji0r4tNdd+VwvmORrpDceQ=
Subject key identifier:   CA:60:3B:48:93:27:8A:73:CA:F9:45:C9:C2:9C:EB:47:CC:F2:7B:40
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       479D8C99A16E72ACB54F95975AD2F69359D8BF
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:01 +0000
ROA not before:           Tue 28 May 2024 02:35:01 +0000
ROA not after:            Tue 27 May 2025 02:40:01 +0000
asID:                     64120
IP address blocks:        2803:f080:2c00::/43 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9d:8c:99:a1:6e:72:ac:b5:4f:95:97:5a:d2:f6:93:59:d8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:01 2024 GMT
            Not After : May 27 02:40:01 2025 GMT
        Subject: CN=CA603B4893278A73CAF945C9C29CEB47CCF27B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:8b:87:29:a8:29:1f:0a:a9:40:00:18:74:
                    d3:74:50:71:dd:78:ba:bb:8e:43:26:8b:45:5b:2c:
                    bd:72:6e:6f:38:27:66:9a:08:57:91:15:17:4e:05:
                    ce:39:9e:57:7e:35:33:33:38:cc:ce:4a:34:2a:d5:
                    c1:ad:ed:aa:d5:02:53:5e:bd:8c:21:c9:2d:79:3a:
                    b6:b1:6b:2e:e1:f2:36:4a:a3:14:68:46:27:2e:7a:
                    e5:d2:25:9b:60:f2:a7:c2:a8:51:48:3d:c1:0f:fa:
                    94:ff:d1:dc:12:f3:14:99:07:2e:7a:d8:3e:7a:84:
                    92:06:38:0a:4b:ec:c8:d9:9d:c9:83:5d:89:45:e7:
                    88:82:56:3c:fb:81:4b:2f:bb:91:1f:97:d7:f2:97:
                    01:83:8d:c7:dd:74:05:be:44:a0:d0:c6:38:ed:b8:
                    3a:c7:b6:14:08:a4:ea:87:29:14:91:34:a8:b3:d1:
                    9f:aa:44:c6:e5:0d:e2:c1:75:bf:c5:fa:7e:28:eb:
                    e0:cf:12:ea:54:2c:e5:2c:0c:7c:bc:82:6b:b4:7e:
                    19:9d:91:eb:f1:f0:db:66:4a:ac:0b:e7:29:db:bb:
                    e5:f4:8c:2b:58:53:0e:f4:71:c3:ff:a5:f7:d8:d5:
                    70:68:ca:43:50:05:01:6e:66:e5:b4:d9:8d:2b:3b:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:60:3B:48:93:27:8A:73:CA:F9:45:C9:C2:9C:EB:47:CC:F2:7B:40
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c00::/43

    Signature Algorithm: sha256WithRSAEncryption
         20:6f:3b:91:5b:d1:cc:b3:70:99:a5:ed:6f:d2:f8:ee:9b:4c:
         cd:86:7f:1c:1e:c8:fb:0f:ad:5f:53:39:35:ab:aa:4b:e7:e3:
         76:f9:ca:3a:47:7d:9e:62:ab:2b:be:0a:88:0b:58:60:00:4d:
         b8:d6:32:23:b3:50:11:34:ad:64:4b:1c:a1:c9:ff:37:b6:f0:
         1c:1d:34:6c:3f:7f:d2:71:5f:f5:4a:bb:9e:e4:18:0e:b4:b4:
         89:ae:4d:0f:03:7f:a2:c4:0e:bb:8a:d8:ed:0c:54:7a:54:7d:
         b2:ab:59:b6:be:25:47:bd:11:bf:18:52:be:90:ac:df:0e:18:
         7a:38:31:80:bb:78:b7:3e:46:89:6b:80:07:7d:93:6d:c2:8e:
         d2:93:36:50:d2:40:41:28:59:83:6d:b3:0b:e5:01:42:ca:42:
         20:d8:bb:db:0c:c1:5b:4f:58:55:d6:cf:ea:0c:d6:06:34:49:
         98:e2:77:e2:0d:7e:1c:23:3d:eb:83:d1:76:55:78:c9:4d:77:
         e9:12:71:7f:19:65:38:38:24:cf:4c:df:02:21:37:d5:4f:2a:
         1d:dd:4f:5b:52:e5:6c:2f:6c:e1:40:bb:2a:fd:cd:26:f5:0d:
         70:c4:40:2f:25:71:f1:d5:bd:39:0d:3d:70:f1:34:d8:bd:70:
         f7:09:60:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org