Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa
File:                     323830333a663732303a3a2f33322d3332203d3e20323636373634.roa (raw, json)
Hash identifier:          lHzuqlJGkBLYulH0KQjqqSt0yU/BdsA+3qx4L5CSQD0=
Subject key identifier:   EB:0B:4F:59:4D:89:96:78:BA:3D:4D:20:37:C5:61:88:5F:90:A7:40
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       6BAC69ED0A3E644B28BB09D36E3B57766CA8A82A
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa
Signing time:             Thu 23 May 2024 23:20:00 +0000
ROA not before:           Thu 23 May 2024 23:15:00 +0000
ROA not after:            Thu 22 May 2025 23:20:00 +0000
asID:                     266764
IP address blocks:        2803:f720::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ac:69:ed:0a:3e:64:4b:28:bb:09:d3:6e:3b:57:76:6c:a8:a8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: May 23 23:15:00 2024 GMT
            Not After : May 22 23:20:00 2025 GMT
        Subject: CN=EB0B4F594D899678BA3D4D2037C561885F90A740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5c:e7:b5:0e:e9:79:19:25:82:fe:4c:ed:f4:
                    41:23:95:4e:6f:39:07:8d:42:d0:49:10:fc:e5:fb:
                    e4:47:9f:6f:a6:61:6c:2b:29:30:71:c4:09:de:9d:
                    38:c7:8e:25:5a:e5:8f:4f:b6:1e:91:6a:d2:96:f5:
                    2f:5a:ff:59:3e:35:bf:99:02:9a:37:d5:a2:91:de:
                    35:38:d5:d3:1b:81:0f:1b:f6:43:1a:e5:f0:a9:26:
                    5b:0a:1e:21:99:99:88:ee:a3:d4:bf:d2:bf:f0:e8:
                    8c:c6:95:a3:d0:71:19:11:f4:20:e6:bc:ca:5e:ff:
                    53:f9:25:17:19:da:78:05:4a:35:37:c1:63:b9:21:
                    96:4a:9e:8a:77:94:ef:03:ce:06:1e:60:62:67:b0:
                    52:cc:f2:bd:af:ca:10:0f:92:f4:81:eb:61:f8:bc:
                    3f:c1:85:5f:94:91:e5:f1:20:38:12:96:dd:81:43:
                    8a:91:f5:69:c5:48:87:4a:87:76:96:24:e1:0f:90:
                    5c:5d:86:db:2a:59:2f:f0:2d:04:6e:f1:80:5c:04:
                    22:c7:c4:86:b1:05:5b:6b:83:25:52:1c:83:9c:19:
                    20:70:db:ce:6b:d3:ad:ee:d9:df:1b:ce:ce:70:d7:
                    66:b3:06:cc:5c:b2:ba:c8:25:c6:0a:7b:81:72:83:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0B:4F:59:4D:89:96:78:BA:3D:4D:20:37:C5:61:88:5F:90:A7:40
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f720::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:da:b6:b2:43:fa:3d:62:63:c9:f5:22:17:f8:89:1b:86:c9:
         93:21:7a:2f:3d:42:c3:69:29:f4:94:4e:e4:3f:01:0c:0a:55:
         97:ee:09:b1:45:23:a5:fb:78:a1:f8:77:90:2f:e9:bf:f7:73:
         d3:fc:7e:90:d1:ff:f7:5f:a2:3c:6a:be:b4:dd:dd:c8:92:f3:
         e8:a1:2d:0f:33:cf:3e:d9:cb:38:07:7c:42:e5:bf:87:35:08:
         3f:49:ee:3c:62:23:48:03:b1:b1:7e:92:c9:24:10:61:b5:45:
         17:f5:a8:fc:05:78:da:97:86:58:23:34:8d:8b:ff:93:e5:96:
         0e:9d:0e:f8:ec:1d:0e:82:41:42:72:7c:47:b7:99:f1:79:80:
         1e:a2:83:9d:94:da:81:9a:c9:10:a3:80:ff:3d:b4:6e:cf:8b:
         57:97:a1:b1:b6:ce:8b:e0:70:a0:a5:c4:cc:1d:04:ed:65:3e:
         77:ad:2d:df:17:03:b8:14:eb:08:36:1d:ff:a1:14:cf:09:46:
         50:0f:bf:f2:97:f9:d2:fe:42:cb:e9:51:74:a0:e8:7e:25:15:
         21:12:45:cc:2b:80:7d:4e:c5:40:8d:5d:12:04:1c:97:c4:37:
         fb:6a:9b:1d:7c:cb:f4:b1:6b:f3:80:a9:a2:e5:18:78:1b:43:
         82:ce:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:11:07 2024 by rpki-client on console-ams.rpki-client.org