Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/323830333a373663303a3a2f33322d3438203d3e20323636373439.roa
File:                     323830333a373663303a3a2f33322d3438203d3e20323636373439.roa (raw, json)
Hash identifier:          j82kycGIpf76lUSl8A/3sxuz5x5b8m7YsXdO7QM+uK8=
Subject key identifier:   CA:0A:DD:DC:48:36:FE:3B:5C:AC:5F:67:10:58:9C:94:87:48:AD:FE
Certificate issuer:       /CN=F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50
Certificate serial:       07A1CF9166EFB69CD72F654082DDCEE5DCA1887C
Authority key identifier: F6:EA:46:D0:0B:DF:AF:1D:0E:67:F0:FB:53:FA:A2:DD:CB:FC:DF:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/323830333a373663303a3a2f33322d3438203d3e20323636373439.roa
Signing time:             Tue 05 Mar 2024 18:11:20 +0000
ROA not before:           Tue 05 Mar 2024 18:06:20 +0000
ROA not after:            Tue 04 Mar 2025 18:11:20 +0000
asID:                     266749
IP address blocks:        2803:76c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a1:cf:91:66:ef:b6:9c:d7:2f:65:40:82:dd:ce:e5:dc:a1:88:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50
        Validity
            Not Before: Mar  5 18:06:20 2024 GMT
            Not After : Mar  4 18:11:20 2025 GMT
        Subject: CN=CA0ADDDC4836FE3B5CAC5F6710589C948748ADFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:4a:07:38:b9:95:90:c5:a3:c0:92:cf:58:
                    26:a7:e3:a5:d4:b0:da:a0:0e:d5:56:5e:17:bb:5e:
                    86:28:6e:1c:4c:b3:f1:84:fc:81:7e:ad:0e:79:ef:
                    9e:14:6f:b0:e0:cd:39:39:68:0a:d9:42:cb:4c:87:
                    0e:10:39:2c:79:48:1d:86:f1:43:6c:b1:97:a7:f8:
                    f0:83:a7:2b:30:5d:f5:f8:7e:cd:b1:51:02:c1:e3:
                    4f:1e:74:bc:ee:43:15:ca:67:b2:a4:4d:7d:8f:19:
                    1c:0a:c5:46:d7:78:8b:e2:7e:93:26:5d:43:58:00:
                    90:60:41:01:06:f2:99:df:e1:3e:e6:9c:cd:10:e7:
                    76:16:1e:f0:e9:76:34:90:fc:a3:37:3f:8e:47:d9:
                    7b:71:25:00:1c:41:1b:23:53:4c:a5:f2:af:d7:c2:
                    f7:2e:1c:19:16:10:7b:a5:29:f6:42:63:63:cb:7f:
                    7d:9b:ea:3f:4e:ab:26:86:79:0a:8a:0e:31:39:8c:
                    3f:2e:65:e3:7f:28:5c:8b:c3:e6:57:c3:39:b8:36:
                    4e:02:88:78:d9:fe:50:cc:01:5f:f9:26:c3:18:14:
                    00:de:d6:50:e6:9e:3c:42:a7:13:ae:e7:a9:91:1d:
                    f4:11:84:c2:32:ca:7b:37:a5:6c:c8:2e:e9:0e:1f:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0A:DD:DC:48:36:FE:3B:5C:AC:5F:67:10:58:9C:94:87:48:AD:FE
            X509v3 Authority Key Identifier:
                keyid:F6:EA:46:D0:0B:DF:AF:1D:0E:67:F0:FB:53:FA:A2:DD:CB:FC:DF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/323830333a373663303a3a2f33322d3438203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:76c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:83:90:b8:a8:ba:22:27:ad:2d:13:cd:10:d7:84:0b:5d:6f:
         73:a2:57:54:90:68:89:2b:92:18:d8:a0:d4:3e:e0:84:e8:67:
         90:85:40:c4:d4:27:52:81:f6:e4:c9:8b:f5:08:60:7c:48:60:
         b6:61:8f:39:56:23:46:9f:ad:b7:bd:d8:76:76:6a:e3:db:0d:
         a5:28:08:fc:47:36:7f:58:17:27:2c:bd:f1:f1:ad:5d:00:b8:
         4b:d5:3d:ca:bc:9d:d5:78:46:09:c8:05:7b:a2:11:06:f2:28:
         60:ee:7a:ae:08:c1:cf:ad:fb:76:d9:78:a3:85:c4:53:89:84:
         c1:91:d3:77:14:ec:fa:47:e9:dd:5b:a2:a2:1a:b3:a5:80:e6:
         a5:d8:24:0a:ef:4d:43:88:14:ba:35:5a:e9:41:31:ce:40:b1:
         af:61:17:0c:cd:11:a1:9d:ee:aa:19:56:74:e2:14:bf:f1:5a:
         c1:3b:12:67:49:06:46:d0:fb:43:d2:d7:19:5f:f5:d7:23:27:
         6f:ae:83:49:40:3c:5b:0b:f7:89:15:05:17:9f:c3:2a:b1:26:
         eb:42:43:21:14:4b:6e:ae:d9:2e:a3:47:0f:6b:f8:83:37:10:
         c2:c9:76:c0:4b:98:3a:32:d4:78:4a:12:21:ab:ea:2a:66:fd:
         20:c7:41:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org