Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a34663a3a2f34382d3438203d3e20323637363939.roa
File:                     323830333a353161303a34663a3a2f34382d3438203d3e20323637363939.roa (raw, json)
Hash identifier:          sv6kr/SC1x64K2rVN1aVulSQ0ijjLFkIm2MvHXKrt1E=
Subject key identifier:   06:DA:78:DA:E8:C5:A3:9C:CB:D6:8C:29:B9:77:ED:8B:C0:DA:1D:92
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       60B4D94A89D495FE122A5EBA34778CF98F193A1C
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a34663a3a2f34382d3438203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 17:50:41 +0000
ROA not before:           Tue 05 Mar 2024 17:45:41 +0000
ROA not after:            Tue 04 Mar 2025 17:50:41 +0000
asID:                     267699
IP address blocks:        2803:51a0:4f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b4:d9:4a:89:d4:95:fe:12:2a:5e:ba:34:77:8c:f9:8f:19:3a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Mar  5 17:45:41 2024 GMT
            Not After : Mar  4 17:50:41 2025 GMT
        Subject: CN=06DA78DAE8C5A39CCBD68C29B977ED8BC0DA1D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:8f:49:0c:dc:96:83:29:ae:27:08:0e:dd:
                    27:e5:22:9d:85:1e:47:3d:a5:f0:b3:b1:9f:2c:92:
                    90:bf:18:42:4f:a4:b9:3f:3e:4a:a9:c5:80:80:a4:
                    8e:39:16:b3:56:cd:9e:eb:14:c3:bc:ba:0f:28:65:
                    09:b1:a5:61:e6:04:e8:cf:c1:31:df:38:6b:7a:00:
                    1f:8e:31:02:69:8c:f9:9f:38:9b:f8:fc:e1:bb:c6:
                    7b:25:74:8f:50:8c:48:39:7d:4c:32:fb:de:cc:17:
                    a7:de:13:df:0b:57:59:f2:39:4f:d4:f7:7f:35:c7:
                    40:ea:bb:3a:34:79:ee:29:22:88:bc:50:98:4c:bb:
                    ac:7c:f9:d8:f4:f6:3a:c2:87:ba:fd:56:6c:db:bf:
                    20:f2:2b:41:38:c1:b0:9b:a7:a3:59:7f:ac:0e:51:
                    cd:14:41:c9:82:09:e6:cd:00:67:29:51:fe:c7:05:
                    cb:da:05:46:5f:38:3f:0b:41:d9:5a:36:90:e5:c9:
                    4a:95:ae:20:9d:66:58:a2:aa:9a:0b:a6:2c:a5:5e:
                    1f:5c:7b:d8:a0:cf:16:4e:2b:e5:d2:d9:4c:a8:e5:
                    96:2b:a6:05:5c:66:e0:46:ae:bd:bb:56:7c:2f:f2:
                    74:0e:f2:df:b9:73:d8:b4:f7:63:3f:3c:4e:6f:90:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DA:78:DA:E8:C5:A3:9C:CB:D6:8C:29:B9:77:ED:8B:C0:DA:1D:92
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/323830333a353161303a34663a3a2f34382d3438203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51a0:4f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:91:1b:43:51:6d:60:fc:6d:73:38:bc:61:e7:f6:f6:c1:9e:
         b0:14:fe:2f:37:1d:72:ed:11:dc:df:42:44:28:c3:90:d3:bb:
         2a:d0:98:60:e2:0a:70:63:c3:33:dd:ba:03:08:1a:ac:a5:0c:
         2d:66:ef:f3:7d:01:2e:7f:9d:4a:c0:3b:ae:2d:52:72:f7:fa:
         d9:98:65:38:7a:60:b4:8f:ae:c3:b0:c6:ed:94:76:fd:74:13:
         c0:19:a2:4e:d0:1c:56:80:98:f5:46:aa:be:67:1b:20:0b:b9:
         ff:8e:d8:12:bf:4d:39:6a:ef:e8:12:31:49:04:9a:9a:20:d3:
         6b:b2:3e:f5:02:62:ca:0a:1e:58:a6:84:be:3b:6e:27:69:39:
         2d:5c:dd:08:69:b0:6b:93:1b:d9:f0:b6:33:a2:4a:ba:4d:76:
         89:4e:3e:24:1f:b3:21:85:77:30:f5:bc:95:26:02:d1:55:b2:
         c8:47:5f:77:1c:77:b7:c0:3c:61:3b:ec:41:62:cb:22:97:5a:
         1d:25:3a:83:c3:57:82:f7:31:ab:69:65:3d:a9:0c:09:59:de:
         5e:8b:b2:76:ee:29:79:81:40:bb:44:8a:69:f0:57:13:67:6a:
         ea:14:13:d1:a6:63:3d:92:9b:c4:44:1b:3c:48:01:8c:b6:b6:
         60:27:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org