Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3634203d3e20323636383534.roa
File:                     323830333a363261303a3a2f33322d3634203d3e20323636383534.roa (raw, json)
Hash identifier:          ZIKTkhKoDXtIV24kUQXl4yXGT9gnaZ2tB2yfwZ42Sbk=
Subject key identifier:   06:A5:C3:92:20:8C:80:48:6C:91:E4:AA:67:95:5F:64:A1:68:0C:EC
Certificate issuer:       /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
Certificate serial:       7B454178ABB96C07119FBD36D48A4F5204B0B63D
Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3634203d3e20323636383534.roa
Signing time:             Tue 05 Mar 2024 17:59:14 +0000
ROA not before:           Tue 05 Mar 2024 17:54:14 +0000
ROA not after:            Tue 04 Mar 2025 17:59:14 +0000
asID:                     266854
IP address blocks:        2803:62a0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:41:78:ab:b9:6c:07:11:9f:bd:36:d4:8a:4f:52:04:b0:b6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
        Validity
            Not Before: Mar  5 17:54:14 2024 GMT
            Not After : Mar  4 17:59:14 2025 GMT
        Subject: CN=06A5C392208C80486C91E4AA67955F64A1680CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:ef:13:8a:5d:40:a3:23:95:2a:bc:68:c7:
                    3e:d2:02:b4:3e:3e:8d:46:7a:b6:b2:f2:96:8e:ee:
                    7a:7d:04:f8:09:66:d2:e7:bd:03:d5:37:ad:74:e4:
                    b7:e4:f0:a9:8f:7a:59:b8:c3:4f:cc:09:0e:8b:e3:
                    46:02:3e:9f:d0:b7:6a:b0:22:f4:fe:84:9e:27:93:
                    b7:37:ab:61:1c:ad:30:80:9c:b1:4f:70:b1:b1:54:
                    a8:1b:ce:55:c9:d9:07:72:e6:0a:22:18:ed:fd:71:
                    7d:42:6a:b4:b2:dc:c3:1b:36:87:4c:3d:29:39:73:
                    59:e6:42:4c:40:93:bb:6f:9a:8d:c8:f8:04:ac:ed:
                    ee:c9:ba:3c:c4:d6:e8:8d:03:d5:07:63:b0:e6:5e:
                    c6:83:ba:e8:df:de:40:13:02:eb:90:7b:6b:b4:1a:
                    34:ff:d9:e7:88:5d:3f:a3:3c:46:23:91:d4:fc:3e:
                    56:92:c8:b7:6e:df:c2:42:11:83:a9:36:20:ec:7b:
                    18:9d:8d:4c:25:ab:9f:13:1e:13:b2:32:8f:e1:2d:
                    7f:a4:fe:3e:88:d8:e7:e4:90:9d:44:5f:03:30:e5:
                    06:52:63:94:6f:1e:1a:bc:21:3f:11:64:0f:39:16:
                    4f:90:02:63:2b:dd:81:0d:54:19:7a:57:c8:7f:75:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A5:C3:92:20:8C:80:48:6C:91:E4:AA:67:95:5F:64:A1:68:0C:EC
            X509v3 Authority Key Identifier:
                keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3634203d3e20323636383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:2f:35:55:35:17:ee:fd:09:f0:b3:7d:88:61:b6:88:15:
         ea:15:2c:93:51:76:ac:9f:e2:de:21:cc:67:1a:2e:76:d6:33:
         ff:51:94:d8:7d:f2:de:3b:e0:29:47:7c:14:9e:c3:75:9e:5b:
         34:2b:04:4b:e3:f6:79:06:1f:0c:9e:75:ae:65:5b:a2:83:3e:
         bb:4a:1d:6c:22:0d:0b:55:93:83:ff:b6:73:7e:44:bb:cb:72:
         e1:e7:7d:04:75:01:2a:ce:d6:8e:1f:b8:3c:7d:90:95:63:b8:
         ce:38:1e:67:58:ee:52:a3:05:6a:fe:39:07:74:95:c5:c4:68:
         67:cd:9c:74:3e:b4:03:56:9a:f8:38:1b:a0:cc:f0:29:d2:65:
         34:e8:6b:fc:00:3b:f8:e6:b3:95:30:05:b9:4f:9b:ff:b5:14:
         38:3f:92:18:c5:86:d0:df:74:3c:0a:51:7d:ce:25:d9:75:b1:
         8e:02:b8:88:6f:7d:75:f6:ef:ad:49:8b:0c:40:ce:b4:c8:ce:
         0b:cb:e3:3c:e8:38:0d:4e:59:11:31:4d:1c:16:7e:9d:50:9b:
         27:bf:ba:17:42:a3:81:53:5e:af:d2:da:35:ad:6a:80:61:ef:
         06:54:57:a2:eb:2a:a7:ba:70:2a:42:a6:40:66:1f:00:80:46:
         dd:51:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org