Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/323830333a393763303a3a2f33322d3332203d3e20323635373730.roa
File:                     323830333a393763303a3a2f33322d3332203d3e20323635373730.roa (raw, json)
Hash identifier:          ImoNhgYPuNJWC5mcfzlcYDu6CVD2FB7ufrpBnsJbcjs=
Subject key identifier:   95:C8:91:5D:5B:42:FB:B8:B8:03:8F:1A:6A:C4:1B:60:C8:96:9C:BD
Certificate issuer:       /CN=6F2E85684756BECBED992F0B17433B71F691DBB2
Certificate serial:       36E017B617D25C0972ABA81EDB12944281BC1120
Authority key identifier: 6F:2E:85:68:47:56:BE:CB:ED:99:2F:0B:17:43:3B:71:F6:91:DB:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/323830333a393763303a3a2f33322d3332203d3e20323635373730.roa
Signing time:             Fri 12 Apr 2024 20:15:00 +0000
ROA not before:           Fri 12 Apr 2024 20:10:00 +0000
ROA not after:            Fri 11 Apr 2025 20:15:00 +0000
asID:                     265770
IP address blocks:        2803:97c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e0:17:b6:17:d2:5c:09:72:ab:a8:1e:db:12:94:42:81:bc:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2E85684756BECBED992F0B17433B71F691DBB2
        Validity
            Not Before: Apr 12 20:10:00 2024 GMT
            Not After : Apr 11 20:15:00 2025 GMT
        Subject: CN=95C8915D5B42FBB8B8038F1A6AC41B60C8969CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:88:d6:bf:43:d0:08:62:a7:53:32:8e:ab:
                    40:e7:d1:97:04:52:4e:51:1c:50:41:9a:30:4a:fd:
                    51:1c:14:ff:91:9e:b6:52:d1:0c:6c:fd:89:72:d5:
                    38:de:7f:0e:9d:fe:94:93:eb:ea:76:cd:16:b2:51:
                    81:7e:64:2f:93:83:48:3d:00:e2:d9:87:72:bd:40:
                    c8:36:0b:f2:f2:f7:7d:5c:f0:67:18:e8:78:b6:4e:
                    24:17:fc:ad:cd:bb:a3:d6:7e:0e:ee:48:55:72:1b:
                    02:9d:cc:e0:a7:4d:06:3c:57:c6:87:00:eb:a1:62:
                    c9:e9:60:8d:eb:c6:1b:cb:c4:29:8c:fa:92:a9:85:
                    d5:da:d5:3d:94:23:27:72:a0:a5:b5:a3:63:d9:fc:
                    8c:51:42:ea:46:3a:ca:d7:9c:3f:2a:21:f4:f0:dd:
                    4b:f6:6b:bf:81:ed:ab:59:f5:45:63:5b:16:7a:1a:
                    55:16:29:40:bb:9b:36:a4:0c:14:f7:f0:13:8e:67:
                    07:66:06:52:90:c8:00:63:6d:e0:3a:77:17:bc:74:
                    5c:3f:34:38:14:24:ea:8d:d5:eb:ea:ac:05:6b:6b:
                    77:48:88:24:21:83:fe:b1:47:a6:44:ba:29:fc:34:
                    35:53:91:e7:e7:8e:2e:60:fd:64:0c:2c:c5:d9:56:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:91:5D:5B:42:FB:B8:B8:03:8F:1A:6A:C4:1B:60:C8:96:9C:BD
            X509v3 Authority Key Identifier:
                keyid:6F:2E:85:68:47:56:BE:CB:ED:99:2F:0B:17:43:3B:71:F6:91:DB:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/323830333a393763303a3a2f33322d3332203d3e20323635373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:97c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:24:12:23:4a:46:d9:a6:86:32:a4:e1:25:a6:50:43:a7:
         d7:75:52:1e:5a:ce:53:f0:73:4c:d6:b5:4c:c2:df:3c:44:90:
         43:a4:43:2f:82:0a:e1:7e:1d:a3:c8:3c:76:b5:5b:d0:fd:56:
         3e:fb:27:9f:8b:e8:ac:d0:74:85:24:bd:ac:6d:f3:12:e8:34:
         5e:31:2c:e9:d4:b6:8c:0c:9c:42:88:3d:b9:43:5e:1d:04:92:
         dc:6f:e8:10:e0:12:cd:03:25:5c:03:94:5b:53:9d:4d:86:ca:
         24:be:24:7f:4c:ee:44:8f:be:2f:30:d9:82:32:8e:a2:a6:88:
         20:c5:8e:5d:0c:af:9c:80:cb:b0:1f:56:fe:9b:17:9b:f1:f9:
         60:93:4d:d8:2a:39:ca:1f:db:cf:4e:de:18:f4:4f:ce:43:82:
         68:0c:cc:b0:6e:52:f8:c3:10:eb:26:3f:61:d9:22:d4:ec:33:
         c3:14:a6:f7:3e:db:5c:dd:be:5a:34:d4:90:60:f1:f3:a9:7a:
         f1:1d:e3:a9:20:e7:69:4c:a6:9f:99:6f:ee:d4:99:bb:b3:9f:
         ae:bb:2a:c2:09:89:47:31:58:b6:e3:c1:90:da:d7:92:f6:28:
         1b:b2:f8:70:61:0b:a0:09:2a:ae:9b:81:ff:cc:1e:52:ba:81:
         49:26:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:39:13 2024 by rpki-client on console-fra.rpki-client.org