Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          TgCev5FqJTE/j5g9bG9lSxflzZZaa4X89RXH1M7GNLY=
Subject key identifier:   35:1E:2D:FE:4B:86:B5:2B:8B:4E:E4:60:42:FD:A1:D4:3F:44:35:40
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       100D9E2AAD214320189C4013869E689E058F63BC
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 25 Oct 2024 02:50:00 +0000
ROA not before:           Fri 25 Oct 2024 02:45:00 +0000
ROA not after:            Fri 24 Oct 2025 02:50:00 +0000
asID:                     273196
IP address blocks:        2803:2650:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0d:9e:2a:ad:21:43:20:18:9c:40:13:86:9e:68:9e:05:8f:63:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Oct 25 02:45:00 2024 GMT
            Not After : Oct 24 02:50:00 2025 GMT
        Subject: CN=351E2DFE4B86B52B8B4EE46042FDA1D43F443540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d8:c1:00:bc:04:07:a6:13:ac:33:90:9a:bc:
                    07:fe:e0:25:84:cb:72:0f:e6:03:34:23:7a:29:cc:
                    45:a6:29:0b:9e:4b:af:3c:c8:7a:90:20:48:c7:5c:
                    30:58:a3:6d:02:f6:29:c0:40:32:3c:6a:48:bf:5e:
                    75:5d:dc:87:d9:ce:da:85:df:3e:77:7c:8d:3d:16:
                    05:a6:18:c1:73:b6:09:eb:2a:cd:5e:fe:1a:9a:c4:
                    16:fa:38:5b:5a:cd:da:91:00:b0:25:52:47:cb:05:
                    4d:3a:34:82:0c:74:b7:9a:a8:81:5d:d7:33:ae:3c:
                    b2:51:d8:c0:13:62:c7:7e:eb:8d:1e:d6:5f:0f:ba:
                    3a:de:87:d6:a0:57:ec:53:1d:6a:dd:26:7e:e7:c2:
                    b5:eb:4f:f7:1f:5f:e9:3c:37:83:e4:19:55:2f:70:
                    0d:2a:3f:99:f7:06:b6:04:16:2c:c6:06:31:83:53:
                    bf:c8:50:21:21:46:2f:e9:a2:0f:12:8d:12:d2:3c:
                    57:3e:70:73:d2:29:36:a2:12:67:bd:63:a9:73:96:
                    56:02:4d:12:ce:3e:a4:db:3f:aa:4b:59:f1:55:6f:
                    90:c7:b8:d5:00:52:af:f3:69:77:02:6a:2c:e7:65:
                    71:56:5c:de:d3:44:31:ac:95:e6:7a:81:2d:82:11:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1E:2D:FE:4B:86:B5:2B:8B:4E:E4:60:42:FD:A1:D4:3F:44:35:40
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3830303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:45:fa:5f:9a:1c:be:fe:aa:62:56:2e:24:82:a7:c9:09:32:
         11:82:32:5b:33:22:9e:bf:43:9f:0c:6e:2e:47:73:05:eb:8f:
         2a:12:63:34:29:6c:76:9b:13:6e:ac:ec:fd:9b:0a:b0:60:1c:
         e0:5b:f6:84:aa:32:8a:d1:1a:67:8e:20:87:86:30:b0:1f:a4:
         d4:2d:a3:76:55:35:0a:f7:85:d1:32:d3:98:f0:f1:53:5d:67:
         b2:9e:6a:02:14:74:eb:ad:aa:cd:ef:c1:72:4a:77:3d:a8:d4:
         3f:00:72:53:55:9e:5c:16:d7:05:2e:07:b1:40:d5:55:f7:22:
         d8:19:d5:c3:f9:ca:e5:b1:23:cf:a0:38:de:c7:fe:99:25:9d:
         b6:76:79:61:48:4c:21:8e:5c:8e:49:61:db:3d:04:77:8b:61:
         fe:b0:1a:36:8f:26:c9:b7:bd:47:bf:27:ef:2f:f1:41:d5:9e:
         63:a8:25:41:ac:be:79:c5:ce:d7:41:25:a6:a1:be:7d:00:5d:
         a2:d9:6b:c3:4c:2e:52:01:30:91:1b:df:9a:40:e7:e6:e1:8d:
         fd:86:60:dd:2e:5f:89:7c:ea:03:b2:6c:30:ce:88:91:03:0e:
         e1:35:20:e0:40:7a:b5:6b:62:92:34:ba:e6:46:c5:02:d3:b6:
         20:4f:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org