Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/323830333a626236303a3a2f33322d3438203d3e20323639383133.roa
File:                     323830333a626236303a3a2f33322d3438203d3e20323639383133.roa (raw, json)
Hash identifier:          IJ7M684FhM6TJqu7zM41CQvmDOsY1ucAmOdaEtZzLKI=
Subject key identifier:   A8:2F:4D:60:7B:9F:98:C6:2C:57:25:8B:BA:E2:C0:59:EB:5E:56:C1
Certificate issuer:       /CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
Certificate serial:       11206AADA4D9A4D8F38762EEC5803CA2B52B1468
Authority key identifier: 15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/323830333a626236303a3a2f33322d3438203d3e20323639383133.roa
Signing time:             Thu 06 Jun 2024 18:05:00 +0000
ROA not before:           Thu 06 Jun 2024 18:00:00 +0000
ROA not after:            Thu 05 Jun 2025 18:05:00 +0000
asID:                     269813
IP address blocks:        2803:bb60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:20:6a:ad:a4:d9:a4:d8:f3:87:62:ee:c5:80:3c:a2:b5:2b:14:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
        Validity
            Not Before: Jun  6 18:00:00 2024 GMT
            Not After : Jun  5 18:05:00 2025 GMT
        Subject: CN=A82F4D607B9F98C62C57258BBAE2C059EB5E56C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:49:99:d7:e4:30:20:88:03:ec:9f:22:3f:
                    a5:23:91:82:76:8c:f2:66:36:73:6d:2d:4c:fe:c3:
                    f8:47:e3:fe:6a:92:7e:46:21:d4:a0:af:df:ca:13:
                    3e:96:49:9e:e3:bf:9c:de:ae:bd:b6:c6:b0:eb:b8:
                    1d:29:61:8a:a0:31:dd:17:e0:6b:b1:4f:25:43:1c:
                    aa:6a:85:ca:21:98:7d:e8:98:e9:37:fc:59:bc:d9:
                    99:59:e7:7a:bc:d3:64:00:03:bd:e3:09:9d:70:6b:
                    c8:c6:b7:1a:c9:c6:b5:37:0a:92:be:bc:6e:4a:5e:
                    4a:b2:76:53:52:6e:c3:ba:b7:dc:e9:d5:70:01:c9:
                    04:eb:c0:46:29:da:b0:09:b5:0f:26:c8:c8:ea:84:
                    02:83:a0:80:b5:10:34:a3:a8:c8:b3:9b:40:8c:c6:
                    4f:9d:65:8b:ae:0e:f3:52:af:9b:ce:3b:23:68:64:
                    85:2c:3e:3c:0a:ec:3a:8a:7a:cd:c3:86:04:89:b9:
                    d9:f7:8c:2d:71:81:5d:ed:ab:4f:7b:f4:60:45:8c:
                    f1:c8:6c:be:76:a6:09:e5:9b:bb:96:9d:37:0d:fa:
                    51:c7:5b:dd:9c:7f:86:0b:eb:e1:33:dc:f3:3b:8f:
                    fa:3e:b1:78:37:13:77:be:03:a1:f4:f0:f3:e8:b2:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2F:4D:60:7B:9F:98:C6:2C:57:25:8B:BA:E2:C0:59:EB:5E:56:C1
            X509v3 Authority Key Identifier:
                keyid:15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/323830333a626236303a3a2f33322d3438203d3e20323639383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb60::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:e0:31:4c:1c:0f:a5:c3:65:5d:96:90:a8:73:af:d4:da:91:
         33:65:79:51:2c:ab:0e:e8:7a:31:97:48:a1:fb:db:49:7b:ff:
         81:45:8a:37:53:07:10:77:82:16:28:ba:5b:5d:f7:6a:67:7a:
         56:44:86:e9:d2:06:88:50:12:3e:17:04:ce:92:15:90:bf:af:
         57:41:0e:cc:2d:a3:1a:a5:49:65:8e:5b:bb:51:b5:49:86:c6:
         6b:cd:67:73:96:aa:fb:7b:11:79:10:31:8c:db:42:d1:64:c4:
         d4:19:1b:c0:71:9f:56:9d:22:3f:5d:59:21:2a:2b:39:fa:3a:
         f4:66:fd:90:10:18:43:3e:1a:d1:0f:e9:04:95:f8:c6:f3:c6:
         fe:5f:22:e0:49:4f:96:d7:0d:00:82:21:0e:99:9a:94:06:3a:
         f8:80:f2:96:85:61:a6:7c:3a:3b:27:5d:58:2b:ba:b6:08:37:
         83:b6:45:5d:f3:16:3d:44:3e:99:79:53:5c:f0:cb:53:3e:df:
         4a:0f:7e:87:c8:22:8c:cb:6e:90:49:52:06:cb:3d:90:72:0c:
         79:ae:33:46:f9:02:c8:7e:2c:b9:c8:87:57:ad:6b:0c:23:65:
         d3:17:07:3f:99:64:d1:8d:75:de:d6:4e:aa:bd:da:f4:96:3b:
         15:ed:a3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org