Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383134303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383134303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          Fqf+w0tjbeIfPFzFpcruuMGicM6X68AvFY/XCWjYBxw=
Subject key identifier:   7E:0E:AD:DE:6A:49:33:1F:23:CE:00:CE:EB:73:EC:29:21:6E:96:F1
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       7244919B7BA682B7D4DA8478FA915D8DEF959CE9
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383134303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:00 +0000
ROA not before:           Tue 28 May 2024 02:35:00 +0000
ROA not after:            Tue 27 May 2025 02:40:00 +0000
asID:                     64120
IP address blocks:        2803:f080:8140::/43 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:44:91:9b:7b:a6:82:b7:d4:da:84:78:fa:91:5d:8d:ef:95:9c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:00 2024 GMT
            Not After : May 27 02:40:00 2025 GMT
        Subject: CN=7E0EADDE6A49331F23CE00CEEB73EC29216E96F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:30:76:08:54:4d:16:c5:01:64:63:7f:3c:
                    cc:74:72:c1:21:c2:b7:f9:88:27:e4:ed:73:5f:12:
                    87:e5:cb:e2:95:6d:fd:8e:4a:99:74:9f:0d:14:4d:
                    39:3b:1d:f8:10:28:06:af:78:e8:31:6e:be:fd:8f:
                    2b:84:9f:ff:66:ca:8b:c2:da:2f:a0:64:3d:69:b7:
                    0c:cf:9f:2d:7b:b6:80:7b:ba:ac:93:01:75:9b:80:
                    49:2b:9a:80:b9:b6:75:4e:e8:0c:34:7c:8d:fa:f8:
                    70:67:9a:75:8b:b8:2b:02:fd:19:8c:2c:c9:98:f4:
                    f3:dc:66:90:2d:23:1a:c6:03:04:f2:b8:02:54:59:
                    4e:19:2b:5d:ec:89:c8:ca:d2:b3:72:8e:01:4a:80:
                    85:a2:30:d2:51:a5:62:7e:f3:b9:f4:ec:0e:a8:62:
                    61:43:73:52:7a:37:3f:15:8d:34:72:26:13:5c:dc:
                    d9:b1:3b:32:21:f2:54:96:a2:17:c7:e0:59:b9:5b:
                    d3:e4:d8:2c:a0:17:89:94:cd:d0:3f:f3:d1:ac:33:
                    18:21:1e:5d:a2:aa:1f:ba:d1:09:c5:d3:72:11:70:
                    51:f6:dc:77:78:7f:40:38:ed:0f:33:22:8f:7a:5f:
                    23:b4:8d:22:19:a2:13:13:d2:34:59:d4:01:ef:00:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:AD:DE:6A:49:33:1F:23:CE:00:CE:EB:73:EC:29:21:6E:96:F1
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383134303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:8140::/43

    Signature Algorithm: sha256WithRSAEncryption
         51:74:1c:bb:6b:d7:ed:39:99:3d:5c:17:7c:cb:cb:d2:9f:e5:
         68:30:30:8c:06:3e:c8:72:40:01:d9:95:f4:25:31:ac:9f:ac:
         a8:fa:f9:9d:23:0e:85:a1:0a:17:0f:fb:b7:e7:88:cb:b8:02:
         a0:92:dd:47:09:a7:5a:1f:6e:66:e4:e8:2a:33:ec:56:7b:f7:
         6e:84:94:81:cd:a1:8c:4f:26:f9:f6:17:f1:6a:6d:13:01:bf:
         a2:cc:01:85:5c:ae:f0:e8:53:e2:32:1f:6f:e8:8e:86:06:1e:
         7f:14:41:56:e2:30:e9:46:41:0d:ca:70:dc:d2:ec:fc:f7:23:
         18:f6:93:14:ee:e1:9e:1c:97:2a:4e:15:8e:d9:65:79:90:62:
         43:a3:d8:5b:9e:de:81:c5:e9:67:bb:1e:ab:df:f7:6f:4a:6c:
         fa:1b:46:08:b2:b9:84:ea:96:e6:47:37:aa:8a:a3:77:5f:b8:
         34:f6:bd:24:b2:eb:e3:ef:fd:0b:3a:5b:3e:a4:f7:13:be:6e:
         86:76:48:cb:ff:f4:a5:18:52:96:b3:8c:c2:f3:bf:fd:73:99:
         34:99:d1:ba:a0:ec:cd:29:33:78:fc:31:72:d3:bd:34:b6:e5:
         f6:5a:e7:61:d3:c3:0c:19:02:85:69:08:8c:2e:29:11:88:d9:
         a0:8e:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org