Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313330303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a313330303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          Ubr+enxve/9GWsrCAP2WC3qJ2WkoCNU9GaBhDBkVBp8=
Subject key identifier:   6C:BB:42:58:47:11:75:B7:6F:EC:8E:9A:76:82:0B:E9:31:D7:39:EB
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       72E845BE7064F3084AA51D5CA1CF1CC55A2C84CC
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313330303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:07 +0000
ROA not before:           Tue 05 Mar 2024 17:39:07 +0000
ROA not after:            Tue 04 Mar 2025 17:44:07 +0000
asID:                     272966
IP address blocks:        2803:8590:1300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e8:45:be:70:64:f3:08:4a:a5:1d:5c:a1:cf:1c:c5:5a:2c:84:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:07 2024 GMT
            Not After : Mar  4 17:44:07 2025 GMT
        Subject: CN=6CBB4258471175B76FEC8E9A76820BE931D739EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:fa:0e:2a:eb:40:c7:15:0c:5d:b4:50:1b:
                    ac:88:a6:30:0f:9f:e7:4d:3c:56:ed:16:13:16:ad:
                    52:b9:5c:1d:bd:df:cc:fe:0c:ef:ee:f2:dd:c1:7f:
                    b0:ec:b5:5e:9d:a1:b0:21:69:d8:dd:33:c8:7c:8f:
                    89:d9:3f:cf:b8:de:1c:ee:8f:32:05:f6:74:89:62:
                    58:93:ed:c9:05:d4:8e:e6:e5:35:f5:4b:37:b4:ca:
                    7f:ac:c1:2f:18:08:da:78:32:be:e4:29:00:6d:95:
                    1c:1c:30:db:94:cf:f9:6b:5f:27:ad:95:1d:a0:bf:
                    47:f7:26:6e:06:6f:ea:53:3c:26:f5:69:4d:f6:2e:
                    18:15:e1:da:9a:06:bd:41:76:9b:91:fb:d7:2a:cd:
                    7d:55:47:12:64:fd:c4:91:8f:e6:d9:15:aa:71:44:
                    d7:fa:a4:ab:f7:2f:ec:b2:73:bd:02:b1:d8:76:e8:
                    9b:87:c9:8c:5b:88:cb:b7:4f:53:03:1e:d3:d2:bb:
                    9f:70:df:30:9f:87:0f:57:6b:66:f5:01:11:23:7d:
                    eb:0f:9d:d1:8a:2e:01:16:3f:0f:d4:2b:cc:d2:86:
                    5a:58:87:87:14:61:00:7a:6c:95:cf:3c:ff:13:29:
                    8d:ff:b9:0d:20:42:3f:cf:aa:9c:b1:7f:4a:43:be:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BB:42:58:47:11:75:B7:6F:EC:8E:9A:76:82:0B:E9:31:D7:39:EB
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313330303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:a5:0b:12:b9:7a:1e:57:6a:18:45:28:ed:79:6e:40:65:6e:
         01:f3:e6:b1:66:42:8a:78:7c:05:4e:f7:2d:f9:99:74:f7:f7:
         5b:8f:c5:bc:8b:64:df:6e:46:4a:b0:94:58:0c:da:f2:a0:2b:
         31:44:29:55:fb:ea:99:c0:4a:2c:2a:94:95:ae:d2:30:32:15:
         d5:13:64:97:8f:7b:1b:b2:c7:4e:13:8e:91:47:ec:c2:18:6b:
         9b:b5:b5:bb:fd:3a:bb:bd:50:61:13:dc:4d:09:27:98:dc:76:
         06:9c:69:56:81:f4:eb:c9:fc:28:5f:e3:e0:8f:8d:f4:eb:de:
         f8:fd:49:6b:aa:06:c6:2d:0c:c4:ce:3d:e6:4b:c9:1d:25:b1:
         a4:2e:4f:6b:60:f5:5e:c9:2f:ad:21:47:bb:63:79:fa:0b:0b:
         6a:0b:f9:36:72:45:ec:61:3d:d6:ef:73:80:5c:0e:29:fb:17:
         dd:b3:64:ee:f7:67:7e:ca:54:ae:34:21:c1:4e:7e:c6:6c:e1:
         75:37:9c:6a:df:8d:d3:2c:16:2a:c6:5b:cb:31:e5:df:a3:18:
         db:5a:6d:47:d3:09:47:ca:0d:c8:60:1b:ae:b9:2d:77:8b:62:
         9a:17:41:9f:10:bf:a9:4e:5d:5f:41:04:62:39:9b:6b:46:e9:
         97:a4:5a:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 25 10:00:13 2024 by rpki-client on console-fra.rpki-client.org