Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          FCrTkwOdtg2cNumMMcPAukT9vQtTF2qw7x4xbUVXkKs=
Subject key identifier:   C5:2C:12:CA:A3:C4:BF:58:7E:D3:F4:92:9F:73:0F:3B:08:5D:C8:8D
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       3103130A17727FDBF4D60ABE7372F22210F7EAED
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:02 +0000
ROA not before:           Tue 28 May 2024 02:35:02 +0000
ROA not after:            Tue 27 May 2025 02:40:02 +0000
asID:                     64120
IP address blocks:        2803:f080:2c40::/43 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:03:13:0a:17:72:7f:db:f4:d6:0a:be:73:72:f2:22:10:f7:ea:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:02 2024 GMT
            Not After : May 27 02:40:02 2025 GMT
        Subject: CN=C52C12CAA3C4BF587ED3F4929F730F3B085DC88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:f0:c1:33:d0:93:07:52:44:1b:6e:6d:04:
                    65:38:24:57:87:3c:74:7a:e7:75:c6:5c:ef:c2:4b:
                    72:bf:ba:2a:8e:81:7e:27:bb:45:f9:3b:49:7b:18:
                    b0:45:17:fc:da:bc:a1:f3:f0:4f:b2:4b:50:93:ae:
                    2f:01:1d:ca:e6:67:46:af:2d:1d:07:7f:6b:55:25:
                    65:bf:5b:d5:b8:0f:13:a1:40:31:9f:c1:f2:ba:35:
                    e7:cd:36:9b:34:3c:30:82:c9:7b:ca:f5:0a:5c:ab:
                    fe:eb:29:00:e2:2e:80:78:66:5d:7b:a0:f9:bc:3c:
                    89:db:36:63:a9:88:d6:e9:1a:ac:d0:68:59:8e:d0:
                    d3:52:bb:b9:10:56:b3:3f:79:b9:b0:98:2e:c3:50:
                    49:ff:a9:1c:31:68:29:e9:46:15:d8:2b:f3:9f:21:
                    77:d3:7b:5b:98:44:c9:0f:e2:ca:c5:e8:9c:c9:f9:
                    00:48:9c:26:14:2b:57:3e:eb:5e:2c:44:bf:94:56:
                    3c:95:44:e4:f7:f6:72:4c:d0:bb:0a:a0:f8:27:f4:
                    72:7d:05:d9:81:f4:85:ef:15:37:ce:7a:a4:8e:8d:
                    cb:4c:03:96:94:cb:07:8d:f3:0e:49:3e:ef:d9:53:
                    73:fc:bc:8b:b6:87:c6:e8:9e:06:1e:03:ee:58:c1:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2C:12:CA:A3:C4:BF:58:7E:D3:F4:92:9F:73:0F:3B:08:5D:C8:8D
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326334303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c40::/43

    Signature Algorithm: sha256WithRSAEncryption
         7a:e5:8b:1f:8d:cd:06:10:7b:f6:76:c8:58:5a:59:1a:87:c8:
         b1:90:c7:5e:5d:c3:8a:78:48:2f:fb:9f:e4:9d:ed:a1:a7:df:
         87:14:69:73:b5:6b:51:c8:f6:b9:2b:10:85:3a:d2:8a:47:de:
         94:20:ce:17:00:99:ee:49:8b:5c:3a:72:9e:a1:c6:48:02:62:
         f2:61:7d:08:3e:b5:46:44:5e:b6:e7:90:d2:1e:1e:db:ae:34:
         e0:97:e1:62:c5:3f:87:05:6c:cd:c3:a7:76:16:5a:90:ca:4c:
         d2:cb:8c:a7:e3:18:dc:18:6e:4d:6c:26:14:fb:b7:c0:5a:73:
         bb:b1:20:b0:fc:e6:fd:29:4f:c9:36:f1:61:40:07:6a:6e:9d:
         47:5d:d1:db:42:25:a5:6f:6e:48:3b:83:4c:b2:70:c9:c9:6c:
         63:0e:30:53:6f:01:bb:16:2a:f9:55:83:ef:80:d5:3f:5a:ec:
         e4:11:ab:79:fe:07:99:e1:e4:8e:91:f6:8e:2a:23:fc:54:9e:
         87:52:82:99:97:f4:90:67:b0:ea:01:ab:11:25:47:16:65:d5:
         c3:1f:d1:77:33:8f:b5:34:71:69:e7:0d:66:53:e7:f1:a2:2c:
         69:9b:fb:0d:fa:b0:cb:ff:91:a9:72:90:13:e6:0c:04:93:a5:
         02:60:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org