Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa
File:                     323830333a633163303a3a2f33322d3332203d3e20323635363739.roa (raw, json)
Hash identifier:          E5dUmlV4O/Opgi49a7gDTHnxfh+aTWw3YIWTm+X1Pt8=
Subject key identifier:   68:53:98:9F:DC:71:71:DB:59:05:22:85:FC:3E:5D:9A:13:AE:DD:FC
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       452BE3AC64296C58D84ED8829710D2CEDD1E11BC
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa
Signing time:             Tue 05 Mar 2024 18:15:41 +0000
ROA not before:           Tue 05 Mar 2024 18:10:41 +0000
ROA not after:            Tue 04 Mar 2025 18:15:41 +0000
asID:                     265679
IP address blocks:        2803:c1c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2b:e3:ac:64:29:6c:58:d8:4e:d8:82:97:10:d2:ce:dd:1e:11:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Mar  5 18:10:41 2024 GMT
            Not After : Mar  4 18:15:41 2025 GMT
        Subject: CN=6853989FDC7171DB59052285FC3E5D9A13AEDDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:7b:25:06:dd:ec:fa:d2:df:3d:f6:20:5e:
                    60:96:7e:d8:f2:45:da:95:27:38:c8:72:fb:fc:e0:
                    c8:bf:9a:29:61:19:8b:c2:e8:62:79:18:9c:75:44:
                    92:08:fd:3e:d1:59:1d:c6:80:38:23:80:c5:ae:6b:
                    3c:1e:94:cb:3b:59:98:a9:77:c5:cf:f3:69:f4:1e:
                    ef:1c:33:20:4a:49:0e:6c:4e:72:e4:9b:0f:c8:54:
                    05:ea:fd:bb:51:c6:51:94:b4:3c:ea:4a:9e:0a:15:
                    52:eb:1d:1b:4d:78:22:27:4e:bf:ca:82:c6:47:0b:
                    5f:4c:46:b5:55:b9:ab:dd:a6:6a:8a:ae:e7:cf:d3:
                    fc:d8:95:4f:b6:7a:87:fc:ac:a3:27:ed:10:8b:69:
                    cd:38:df:75:f2:1f:13:00:b5:bb:ab:a4:88:bd:41:
                    29:f2:a2:d4:9f:1b:8d:3f:54:1b:fb:d1:2e:50:2c:
                    24:20:7b:08:3a:79:0e:61:76:9b:a4:0b:33:91:5b:
                    13:b9:4d:cb:df:1d:6b:8c:25:38:bf:ee:78:b8:0f:
                    be:f6:d1:d8:e5:ff:49:ee:e5:87:25:a4:75:53:00:
                    b5:f7:59:41:3c:56:4e:b7:21:f1:f6:70:09:80:8e:
                    d1:14:01:18:00:7d:92:41:28:7d:39:2a:43:55:e6:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:53:98:9F:DC:71:71:DB:59:05:22:85:FC:3E:5D:9A:13:AE:DD:FC
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:15:cb:9a:6f:b1:be:78:1c:9e:7d:81:48:82:c6:4b:a8:
         48:cc:e9:84:09:98:6f:4a:6f:b8:d8:67:a7:fe:6a:aa:21:08:
         5e:8b:ce:5a:71:ad:e6:40:64:74:d9:fd:67:63:b5:20:96:9d:
         9a:85:eb:79:93:a8:bd:b8:c4:f9:4d:a0:af:57:33:ec:65:e0:
         53:ce:34:86:60:0d:1b:ef:a5:c1:70:64:be:c0:b6:60:e1:33:
         23:51:f0:6a:c5:64:6e:ed:0f:3b:25:05:65:71:d4:9e:c7:db:
         25:0c:3d:24:73:ad:fa:8c:d4:50:68:80:6e:b6:6f:6b:ab:c5:
         5f:4b:46:69:93:d4:3a:45:cb:68:36:3a:70:dd:d3:a7:85:1d:
         f8:75:d9:ac:5c:76:e8:e2:0c:8d:05:52:22:90:37:b3:08:c3:
         89:0d:24:7d:7e:01:f1:7f:83:2a:65:f2:09:9b:5a:4e:5f:ab:
         67:e8:99:11:1d:1b:f3:e6:b7:45:cd:83:f7:fd:cc:0b:d5:cd:
         29:34:ff:d7:ed:23:df:67:d0:01:22:1c:59:33:4b:55:d7:f2:
         9f:ba:c9:ad:d6:bf:cf:b5:7a:b7:37:76:55:4a:ca:26:44:b8:
         f1:99:2b:2f:7c:91:9d:9e:24:95:45:fa:39:d0:6d:76:eb:0a:
         9e:b7:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org