Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/323830333a393034303a3a2f33322d3438203d3e20323634383231.roa
File:                     323830333a393034303a3a2f33322d3438203d3e20323634383231.roa (raw, json)
Hash identifier:          GTPx0f4hO7NkHwoogHnr3M9qwXQG0A05j2IlSYeR6Kk=
Subject key identifier:   0A:B7:63:62:8F:CD:0B:9A:B6:E3:39:41:2C:BE:C2:1F:1A:71:AF:5F
Certificate issuer:       /CN=6A21791828146BC17DAE86EA069BF125DBBC3007
Certificate serial:       68AAA3ED6BF1FD046CEF128A3B6762D357F88B14
Authority key identifier: 6A:21:79:18:28:14:6B:C1:7D:AE:86:EA:06:9B:F1:25:DB:BC:30:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/323830333a393034303a3a2f33322d3438203d3e20323634383231.roa
Signing time:             Tue 05 Mar 2024 18:21:07 +0000
ROA not before:           Tue 05 Mar 2024 18:16:07 +0000
ROA not after:            Tue 04 Mar 2025 18:21:07 +0000
asID:                     264821
IP address blocks:        2803:9040::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:aa:a3:ed:6b:f1:fd:04:6c:ef:12:8a:3b:67:62:d3:57:f8:8b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21791828146BC17DAE86EA069BF125DBBC3007
        Validity
            Not Before: Mar  5 18:16:07 2024 GMT
            Not After : Mar  4 18:21:07 2025 GMT
        Subject: CN=0AB763628FCD0B9AB6E339412CBEC21F1A71AF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:a2:4f:ab:6e:29:e7:12:08:22:e6:32:64:
                    06:23:79:19:ff:4a:dc:36:f6:59:fa:39:73:29:4c:
                    ce:b1:b3:53:f5:04:7d:ec:44:3d:d5:4d:d8:09:b9:
                    21:97:49:bd:11:d8:16:01:ab:37:fe:1f:dd:f3:83:
                    d0:53:73:80:d4:ab:7d:9c:fe:85:72:9c:d2:4b:5c:
                    7b:de:b8:f1:a0:e2:12:d8:47:bc:6f:ee:5d:57:a4:
                    f6:32:b9:5b:cc:bf:fd:0e:5b:77:f3:05:94:54:0c:
                    b3:ff:16:90:1b:39:63:4f:b1:7f:a3:a7:d8:d7:82:
                    b5:05:15:6d:2d:34:ac:a1:22:4e:75:1e:7d:29:f2:
                    d3:ae:b1:a0:50:d0:19:f9:ac:60:c5:34:f4:9f:82:
                    af:69:42:a0:b8:03:95:27:8e:ba:d2:a9:98:0e:4d:
                    e2:9a:21:a2:ed:2f:c0:63:0c:3f:ce:d0:ee:e4:49:
                    d3:c0:b9:4c:68:86:33:1f:e2:b6:c1:3b:f3:a6:a7:
                    e6:d1:a1:f4:ba:93:94:95:aa:41:13:0a:01:38:86:
                    47:bb:5b:e7:b6:d6:6a:99:8f:10:12:42:b1:0e:0f:
                    90:1a:aa:a8:a6:b3:50:73:b5:2e:be:38:85:f9:5d:
                    cc:2c:36:85:47:c5:03:9a:1b:a0:0e:ee:f0:21:ce:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B7:63:62:8F:CD:0B:9A:B6:E3:39:41:2C:BE:C2:1F:1A:71:AF:5F
            X509v3 Authority Key Identifier:
                keyid:6A:21:79:18:28:14:6B:C1:7D:AE:86:EA:06:9B:F1:25:DB:BC:30:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/323830333a393034303a3a2f33322d3438203d3e20323634383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9040::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:5e:4b:da:e2:22:97:d7:13:83:fd:68:e8:dc:f8:a3:85:
         c6:d4:d0:9e:2a:93:dc:34:75:a7:62:7a:b4:51:f7:e6:ed:39:
         08:61:45:a8:81:8f:8d:3a:5d:f2:29:ed:c9:61:2e:f4:6d:d4:
         19:62:10:2d:23:28:ec:eb:10:90:44:6c:5f:0b:91:df:d4:7a:
         bd:08:18:bb:f2:f9:a4:68:6b:a5:41:e5:21:09:b8:12:23:12:
         36:27:e7:cd:ac:b8:f7:06:ee:0b:03:5b:45:47:20:6d:e7:0e:
         56:50:eb:f3:62:02:37:94:07:83:20:b8:65:e6:46:9b:6c:a3:
         6a:56:49:4a:ca:f4:58:b1:5c:66:b4:f4:41:f9:12:76:44:42:
         66:17:18:b3:54:a5:41:ac:c3:04:19:e5:4a:ec:5e:76:66:9f:
         5b:60:ca:e4:e2:fc:09:7b:d3:f0:88:85:a5:6f:8f:08:67:d8:
         2a:15:c2:4f:2d:c4:cb:da:03:a8:b3:0e:d1:66:ce:84:71:b9:
         cf:87:5d:c6:9b:52:92:21:a4:cd:01:c7:c8:bf:59:77:e8:fe:
         2e:83:4f:42:a4:ca:cc:bd:17:02:88:51:6b:ef:81:f4:85:bb:
         35:88:67:72:f6:49:7a:ac:72:17:75:d9:cf:74:a2:ad:5e:87:
         fc:6e:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org