Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3530303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3530303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          DuexiZhL6A3nfoelpil2uUdghytBOSAnbj1lWjjHXWg=
Subject key identifier:   D1:B3:78:D2:7E:D7:F2:66:F3:7A:89:3C:D2:C6:A4:BF:53:B7:B5:41
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       42B130D9A816EB17299ED1A4A23E107ACFFEB1EC
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3530303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:58 +0000
ROA not before:           Tue 05 Mar 2024 17:42:58 +0000
ROA not after:            Tue 04 Mar 2025 17:47:58 +0000
asID:                     264824
IP address blocks:        2803:e360:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:30:d9:a8:16:eb:17:29:9e:d1:a4:a2:3e:10:7a:cf:fe:b1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:58 2024 GMT
            Not After : Mar  4 17:47:58 2025 GMT
        Subject: CN=D1B378D27ED7F266F37A893CD2C6A4BF53B7B541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:97:8a:00:13:e6:be:e0:9b:09:8e:59:3c:
                    8a:77:e7:f5:c2:89:18:f3:cb:bb:a6:21:9b:f2:2c:
                    16:a5:90:69:70:2c:e6:04:d9:8b:48:7a:af:c2:15:
                    7a:4f:3d:c8:86:09:cb:71:cc:25:12:07:f8:eb:67:
                    8f:f4:39:04:0f:7e:4b:26:44:81:6c:7b:a3:ee:e0:
                    2a:10:27:48:8a:5d:4c:67:db:33:c8:2d:cc:8d:63:
                    8e:52:20:b1:38:94:9d:ef:ee:3c:7c:a5:10:83:2d:
                    84:2f:2d:2f:bf:b5:15:21:2c:10:6c:de:9f:00:a1:
                    e1:2f:63:58:e0:92:77:3a:86:a7:c2:7a:1e:a8:c4:
                    3e:c0:7d:97:bd:b8:8e:a8:00:d8:b6:f7:2d:66:e1:
                    42:86:15:8e:54:52:2c:d7:1e:e1:37:fc:26:15:a0:
                    1d:3e:d0:f5:66:32:6b:13:05:aa:e0:0e:90:60:b6:
                    4b:0f:67:d6:19:bb:39:74:94:1f:92:47:b6:ea:86:
                    72:f8:fc:73:4d:15:f6:14:38:7a:a8:13:25:b3:e9:
                    ef:e1:39:19:1c:15:05:b1:65:29:95:04:4d:fe:c9:
                    96:0e:1a:e0:db:bd:6b:d2:f4:30:3e:ca:9e:2a:91:
                    99:c5:1a:33:49:8d:73:92:46:ce:51:bd:ed:41:5f:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:78:D2:7E:D7:F2:66:F3:7A:89:3C:D2:C6:A4:BF:53:B7:B5:41
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3530303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:18:af:8a:b4:71:b4:89:50:e6:8e:d4:c6:f0:c0:ce:40:4b:
         91:73:f5:20:d2:8d:d9:42:0d:d3:43:64:be:6d:90:75:96:f9:
         75:21:89:01:7b:bb:d8:1c:a1:0c:e8:21:39:8e:04:0d:b9:d0:
         c4:3d:db:eb:08:bd:87:ce:67:27:bc:99:d2:3c:d8:4a:75:3d:
         e4:89:81:74:e6:7a:35:c7:42:83:93:0f:24:04:e4:fb:0f:d2:
         ff:16:30:79:aa:d3:df:5d:53:d6:32:a8:49:99:0a:5c:15:51:
         35:f0:c5:81:de:40:41:45:f6:88:02:ea:ab:08:4b:70:df:95:
         4e:1d:8d:d1:8c:9d:e8:a5:59:2b:43:39:c4:bd:b8:45:b1:5e:
         85:b5:20:fd:7f:17:26:d1:e5:05:e5:e5:52:52:cb:86:bb:05:
         68:2f:6f:33:de:c5:71:5c:d1:4b:fd:e1:68:93:7a:0e:7b:dc:
         53:37:53:f1:31:2e:7c:53:f2:f7:19:44:ce:5b:46:7e:cd:96:
         d0:80:f6:7c:72:84:53:ce:64:b1:11:af:6c:cf:68:3c:75:84:
         79:be:25:0a:a9:bd:06:8f:10:f9:65:76:07:93:ef:23:2b:8a:
         0b:61:b9:75:6c:17:18:86:dd:e9:e3:75:a7:18:38:a3:93:af:
         ea:c4:d6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:06 2024 by rpki-client on console-ams.rpki-client.org