Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e20323733303139.roa
File:                     323830333a336339303a3a2f33322d3634203d3e20323733303139.roa (raw, json)
Hash identifier:          CVh3M0+rOpfpkuOo+oykJVEg7UsmGcq7hlC7e144MJk=
Subject key identifier:   55:CF:A2:F4:09:AD:82:3A:3F:88:49:62:E0:24:8F:99:D1:08:6A:2E
Certificate issuer:       /CN=B60DE235AFFBEBC89B74335E1C207C7C284BA7A5
Certificate serial:       69419191F758D7BF79AC843A82ABD76AB228CEB7
Authority key identifier: B6:0D:E2:35:AF:FB:EB:C8:9B:74:33:5E:1C:20:7C:7C:28:4B:A7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e20323733303139.roa
Signing time:             Tue 05 Mar 2024 17:51:52 +0000
ROA not before:           Tue 05 Mar 2024 17:46:52 +0000
ROA not after:            Tue 04 Mar 2025 17:51:52 +0000
asID:                     273019
IP address blocks:        2803:3c90::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:41:91:91:f7:58:d7:bf:79:ac:84:3a:82:ab:d7:6a:b2:28:ce:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B60DE235AFFBEBC89B74335E1C207C7C284BA7A5
        Validity
            Not Before: Mar  5 17:46:52 2024 GMT
            Not After : Mar  4 17:51:52 2025 GMT
        Subject: CN=55CFA2F409AD823A3F884962E0248F99D1086A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:89:ea:18:85:86:be:86:7e:86:c3:eb:87:
                    55:cc:0c:79:a7:1f:58:c6:b9:f9:03:df:ef:d0:1c:
                    7b:f4:c9:bc:b2:77:34:bb:aa:f8:e8:f3:c4:7d:ad:
                    78:f8:11:31:1b:45:91:3d:08:b9:1d:91:e9:1c:e2:
                    71:a4:b4:a7:e5:53:87:cd:cc:c8:f3:78:73:a2:de:
                    50:ec:be:ed:48:51:fe:58:9c:a4:8a:19:86:e4:db:
                    02:97:00:15:b3:12:1c:50:1f:e3:3a:93:e9:b3:47:
                    13:a4:8b:9b:49:3d:aa:03:3b:66:c2:ac:1b:a9:57:
                    62:ba:0b:4a:db:a6:ca:f1:74:80:d9:cc:4a:e2:74:
                    78:41:49:ea:75:d3:56:ac:8d:85:ab:a9:31:dd:84:
                    00:01:f9:c2:d3:56:4c:c3:c6:a3:d2:b0:8d:89:4a:
                    c8:cf:43:ca:2c:56:6a:ec:24:10:20:00:89:15:60:
                    f3:4d:b2:b9:b9:4d:dc:b7:22:e9:a4:7b:e5:eb:c1:
                    c4:0f:04:d5:44:00:61:00:ac:84:3c:ca:e1:bd:56:
                    fe:cf:3b:6a:8c:60:77:cc:b4:b9:9c:e8:e9:98:89:
                    d8:8d:f4:ca:72:50:d9:91:30:42:ae:c6:20:db:bc:
                    66:36:10:bb:c2:53:78:e8:e1:d3:42:d4:a4:fe:1b:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CF:A2:F4:09:AD:82:3A:3F:88:49:62:E0:24:8F:99:D1:08:6A:2E
            X509v3 Authority Key Identifier:
                keyid:B6:0D:E2:35:AF:FB:EB:C8:9B:74:33:5E:1C:20:7C:7C:28:4B:A7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e20323733303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:ec:24:0f:c8:4e:ad:72:0b:4b:5b:55:41:dc:78:ad:d5:7f:
         a7:70:e5:43:2f:e7:53:23:24:4c:9b:65:26:ac:d3:80:ea:90:
         65:74:69:6f:30:ff:23:cc:7f:c3:64:a3:34:89:13:1b:8e:9b:
         b6:dd:f0:38:b6:3c:c4:49:ad:fa:32:51:03:ad:23:70:23:67:
         94:8d:c6:af:4a:89:f1:72:bc:3d:c4:cb:51:cd:76:7c:ab:5e:
         a4:3c:91:55:55:e2:8b:ba:36:6f:48:63:f1:8e:6e:c2:7e:a1:
         a3:26:d4:35:76:9f:29:47:7f:96:ea:a3:b5:1e:0c:19:ab:af:
         92:24:f6:ee:43:ac:a0:f4:d6:dd:de:0e:a8:93:43:0b:11:53:
         7d:7a:ba:a1:5c:79:6e:49:7a:b5:bd:6b:19:a2:fb:97:c2:44:
         5d:ba:71:31:4d:a3:05:e6:39:40:a5:23:9e:f8:5f:4e:05:32:
         6f:76:65:5f:7d:19:e2:4d:a6:7a:05:77:2f:ee:23:4a:69:f0:
         56:63:b6:60:9d:95:14:bc:47:17:91:22:8b:94:02:66:fb:13:
         29:d3:e5:40:b1:a1:9e:a8:ff:31:c5:51:a4:2b:2b:ff:db:6b:
         fa:16:f5:b4:9a:9e:d0:6e:08:73:b6:f6:b6:7b:d6:61:b0:cb:
         8d:bd:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:53:03 2024 by rpki-client on console-ams.rpki-client.org