Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/323830333a356335303a3a2f33322d3438203d3e20323733303037.roa
File:                     323830333a356335303a3a2f33322d3438203d3e20323733303037.roa (raw, json)
Hash identifier:          HXGo3Dl0C8nn9LmftBK+PlqumsaTBOW41SYtBJs2Fh4=
Subject key identifier:   00:BE:5F:71:6E:05:8B:C8:79:2B:7E:D8:4E:B5:38:F1:D2:6E:BF:7C
Certificate issuer:       /CN=1EB366A35C302CF4E20900E65713C5A4AC4C0424
Certificate serial:       34B8F21ACF074B681DA4C05AED35E98E189A89F6
Authority key identifier: 1E:B3:66:A3:5C:30:2C:F4:E2:09:00:E6:57:13:C5:A4:AC:4C:04:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/323830333a356335303a3a2f33322d3438203d3e20323733303037.roa
Signing time:             Wed 24 Apr 2024 01:50:00 +0000
ROA not before:           Wed 24 Apr 2024 01:45:00 +0000
ROA not after:            Wed 23 Apr 2025 01:50:00 +0000
asID:                     273007
IP address blocks:        2803:5c50::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b8:f2:1a:cf:07:4b:68:1d:a4:c0:5a:ed:35:e9:8e:18:9a:89:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EB366A35C302CF4E20900E65713C5A4AC4C0424
        Validity
            Not Before: Apr 24 01:45:00 2024 GMT
            Not After : Apr 23 01:50:00 2025 GMT
        Subject: CN=00BE5F716E058BC8792B7ED84EB538F1D26EBF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:de:8d:c1:4d:44:fb:34:bd:72:bc:af:84:
                    86:82:31:1c:83:0e:d8:b3:4e:48:16:ee:80:67:29:
                    30:e0:f3:49:11:e7:2f:6d:c0:fa:5b:64:1a:46:e8:
                    47:5a:e2:f1:ec:24:ae:fe:de:75:59:7f:f9:8e:0c:
                    ee:f0:f3:a4:1b:95:10:5c:3c:3b:d7:1a:15:d5:87:
                    37:a6:58:43:2b:60:97:29:30:7f:cd:43:82:48:c6:
                    e3:29:e0:55:2d:ab:4f:8b:7e:46:9a:49:ee:95:5a:
                    86:34:f6:39:10:e3:29:7c:02:f5:22:2e:f1:3d:04:
                    28:eb:f2:79:24:b9:d7:ba:4c:7b:4f:15:c8:14:41:
                    9a:23:bf:4e:30:27:06:aa:7c:ff:e5:cd:36:04:f9:
                    d0:66:f2:16:c9:36:04:97:fc:ac:2e:08:00:ec:dc:
                    c2:ab:16:42:91:42:16:5b:3c:ca:56:73:a1:0c:41:
                    0a:d5:55:1f:cf:da:98:27:c5:c4:80:08:be:85:97:
                    9c:03:94:db:63:ac:ee:dd:51:74:f1:5e:79:cf:f3:
                    e8:7e:ef:33:13:24:1f:19:ca:3a:32:92:2a:89:b2:
                    05:89:29:c7:bb:c1:0e:4b:d1:ce:8e:68:c6:33:c1:
                    67:5f:6d:64:d8:50:03:5c:fe:30:a4:26:6b:bc:d8:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:5F:71:6E:05:8B:C8:79:2B:7E:D8:4E:B5:38:F1:D2:6E:BF:7C
            X509v3 Authority Key Identifier:
                keyid:1E:B3:66:A3:5C:30:2C:F4:E2:09:00:E6:57:13:C5:A4:AC:4C:04:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/323830333a356335303a3a2f33322d3438203d3e20323733303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:26:cb:cc:ea:aa:0d:e5:a7:ab:3d:46:dd:81:3b:1d:8b:
         5e:08:97:67:6d:31:a3:28:c4:9c:08:89:a4:b8:0a:38:83:cc:
         eb:77:82:c0:cf:e9:13:e8:7c:ef:f5:b1:ad:ad:66:e6:c8:2a:
         2d:dd:e5:a7:12:61:e2:0c:62:c7:a2:9d:2a:b2:77:8b:8a:e6:
         2c:b8:a7:ae:5d:d2:4f:4f:e9:3f:62:a8:fb:86:1f:86:ec:3a:
         a0:0d:e9:e4:69:bc:e4:a0:5e:f3:4a:e5:69:3f:b7:63:aa:2e:
         65:5a:d6:1b:50:44:50:55:13:be:fb:de:a9:a7:00:88:c6:9b:
         e8:92:4d:7c:5e:8e:f6:06:05:11:c8:36:d4:3f:91:9f:e8:4d:
         ff:a2:ef:9b:64:c1:37:3b:f4:50:80:0e:26:5b:b8:d9:b3:b7:
         93:35:d7:99:d1:a3:6e:83:81:f3:00:c1:ce:1b:d4:c2:c3:5e:
         9e:58:1d:9a:80:ab:38:29:fc:90:d4:df:ce:8c:87:a6:80:9d:
         d0:2a:6a:e3:db:83:44:da:4d:d0:48:e3:ad:f3:96:3a:4e:e9:
         0e:17:3b:7d:4e:ba:b3:91:fa:2e:29:bc:38:4d:dd:2e:c2:be:
         61:3a:18:e5:63:44:6e:89:6b:16:3e:ad:b8:db:ca:fa:7b:24:
         35:cd:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org