Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6230303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6230303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          vNaGVz0P5utEPLlmMpouP+3FsufBydGNC3eE3bYNy5c=
Subject key identifier:   E6:C6:18:52:8D:B1:79:B9:5E:A5:13:41:28:CF:04:AD:10:E7:BF:BE
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       18093EF77AB68C4C26B7C81736A824A95D0F522A
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6230303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:48:00 +0000
ROA not before:           Tue 05 Mar 2024 17:43:00 +0000
ROA not after:            Tue 04 Mar 2025 17:48:00 +0000
asID:                     264824
IP address blocks:        2803:e360:b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:09:3e:f7:7a:b6:8c:4c:26:b7:c8:17:36:a8:24:a9:5d:0f:52:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:43:00 2024 GMT
            Not After : Mar  4 17:48:00 2025 GMT
        Subject: CN=E6C618528DB179B95EA5134128CF04AD10E7BFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:e6:a5:b7:81:40:0e:08:70:ec:7b:88:12:
                    3e:89:ae:28:2b:4d:a4:e0:1a:4f:51:a0:36:0a:7f:
                    7e:94:b5:bb:94:1d:32:12:cf:1c:08:f8:11:02:9e:
                    94:5b:c3:f4:fa:4b:e4:77:f5:b9:f7:c8:45:55:1a:
                    09:44:68:05:79:ec:e7:86:2f:28:f5:e3:df:d5:f8:
                    d5:d3:3c:10:0e:22:41:bc:a4:0a:fa:4b:51:54:e8:
                    62:07:b5:33:da:43:6c:d0:f4:fa:99:69:04:29:5a:
                    29:f1:f0:ab:56:1d:44:30:03:db:71:e5:9b:81:fd:
                    fe:42:46:4d:1b:3f:ef:47:d4:89:b6:68:af:85:27:
                    d1:14:78:e7:2a:68:84:bf:44:a0:70:75:55:57:2e:
                    d7:7f:9a:96:3c:1e:4a:39:02:db:b4:9c:ac:f6:42:
                    b8:14:62:a9:1c:d3:40:da:99:45:26:df:ea:c1:c3:
                    6d:30:87:90:6f:67:bc:7f:09:29:8d:d6:ea:d1:0c:
                    24:2f:08:82:7b:75:fb:c5:34:d6:50:52:58:b8:81:
                    f5:34:07:73:47:58:9b:1d:74:c2:ba:91:05:e1:c5:
                    19:4b:ea:25:08:5f:48:95:69:18:a2:6c:93:1c:f0:
                    c8:a4:be:cc:9d:8d:66:7c:61:9a:15:ba:b2:17:1e:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C6:18:52:8D:B1:79:B9:5E:A5:13:41:28:CF:04:AD:10:E7:BF:BE
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6230303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:bc:c9:92:08:44:47:f2:d4:5f:c0:41:fb:57:7e:51:19:
         ee:42:43:23:38:76:95:ff:9c:be:ba:6d:11:60:2b:74:a4:20:
         41:a0:41:d8:b2:6b:46:f4:ec:ea:d0:e7:11:93:89:07:2b:96:
         72:de:9a:a1:63:d9:52:95:9a:70:18:d5:85:37:82:27:4a:6b:
         f9:f2:54:76:b4:ba:33:27:1e:45:25:a9:81:d4:59:8e:5f:aa:
         83:54:b3:55:27:9b:e8:a1:02:0f:8b:db:f6:41:4b:00:d0:27:
         de:35:a0:9c:89:73:87:1a:7e:19:56:00:47:96:ba:5c:03:76:
         17:cc:8c:01:e3:75:7a:bc:c1:74:96:75:a5:8f:45:cf:d6:8c:
         a1:00:6d:ae:e3:86:1a:be:b4:20:93:41:5a:62:e9:74:7b:f3:
         f4:72:89:3d:59:01:df:bd:d5:d6:ed:cb:6c:88:68:44:72:33:
         2c:7b:df:56:93:21:f2:c2:f8:89:ac:b4:ef:b2:d9:df:9f:77:
         c8:0f:5c:9c:8e:52:47:9e:2d:0b:36:32:cd:95:20:b8:19:bf:
         a3:26:51:95:12:32:19:11:38:c5:b5:12:34:8b:34:b5:08:4d:
         91:c8:5c:2a:76:4f:be:fb:ec:e7:1a:b4:f9:0e:87:8f:06:ef:
         d6:67:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:25:48 2024 by rpki-client on console-fra.rpki-client.org