Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/0662113d2deb62ea089f59986fa9f96c06eda221.roa
File:                     0662113d2deb62ea089f59986fa9f96c06eda221.roa (raw, json)
Hash identifier:          Ady6sLT7eySq0ZHMnrCSzGPpJzonv05httjo6uICg6Y=
Subject key identifier:   E6:95:C3:FF:04:63:D2:C7:B7:13:81:B4:FA:79:E7:0D:84:12:83:36
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       20A685
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/0662113d2deb62ea089f59986fa9f96c06eda221.roa
Signing time:             Fri 19 May 2023 12:45:17 +0000
ROA not before:           Thu 18 May 2023 12:45:16 +0000
ROA not after:            Mon 19 May 2025 12:45:16 +0000
asID:                     266737
IP address blocks:        2803:1780::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Mar 2024 06:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139781 (0x20a685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: May 18 12:45:16 2023 GMT
            Not After : May 19 12:45:16 2025 GMT
        Subject: CN=0662113d2deb62ea089f59986fa9f96c06eda221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:a5:29:4c:cd:db:88:b5:8f:f7:03:e7:b7:
                    f2:c4:8a:eb:0b:5f:6b:ba:ca:71:b9:eb:c7:36:ad:
                    3d:16:a1:b6:1f:a5:b3:e4:c2:b0:b4:2b:b3:de:51:
                    3e:81:f6:62:09:0c:f0:df:0f:ad:af:9c:a8:6d:04:
                    85:4e:c4:a4:c3:52:b0:42:17:a5:48:f1:82:67:bf:
                    5a:5b:18:b0:f1:8a:86:21:db:60:78:94:a0:51:d7:
                    77:a3:f0:e1:57:20:8f:4a:c1:02:bb:df:2b:ae:1d:
                    68:98:b3:fe:d7:e7:f6:ae:0d:4d:46:37:9f:d5:aa:
                    3d:ff:53:88:61:75:e0:1b:e2:14:50:51:00:f8:1a:
                    45:27:7b:a1:8d:11:35:d7:a6:1b:99:3e:44:ce:d7:
                    20:91:d5:4c:40:c3:88:1b:d6:ef:08:ca:0e:18:3c:
                    3f:d6:f4:c7:93:25:9a:37:2d:1a:0d:1a:7c:3e:f4:
                    32:4e:d0:aa:63:e1:ad:d4:eb:7b:68:16:b2:ac:84:
                    30:72:88:5f:1b:11:57:8c:33:23:03:78:71:38:15:
                    98:49:75:a9:04:96:c6:91:12:7c:e2:38:02:fb:11:
                    b6:f7:63:6a:5c:5d:14:e6:4d:1c:43:c3:b5:f5:0b:
                    68:d9:a3:f7:b0:bc:b6:20:f9:34:88:94:93:0b:2c:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:C3:FF:04:63:D2:C7:B7:13:81:B4:FA:79:E7:0D:84:12:83:36
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/0662113d2deb62ea089f59986fa9f96c06eda221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:24:4f:32:51:f6:e3:fd:1e:f9:9c:46:6a:d9:de:98:03:
         2a:0c:65:51:b9:45:8c:1e:03:49:ab:e0:05:ed:dc:96:9c:a5:
         90:a3:4b:68:26:8f:ec:ec:67:ee:86:8d:c9:16:97:2b:35:63:
         9f:23:26:0b:e1:5f:28:0c:f7:5a:7e:18:34:23:a4:1c:71:c5:
         1f:04:be:46:ff:f2:88:91:cd:c9:61:57:b8:8c:1d:d4:d0:15:
         60:69:9c:eb:de:89:40:e4:c4:9c:92:43:ae:c6:62:88:86:88:
         e4:e5:9c:71:33:91:65:47:b2:85:e8:e4:5f:b8:88:f7:51:07:
         72:44:07:51:bd:d0:fa:e2:1b:56:f3:31:26:d4:a2:98:55:f6:
         b2:16:fe:93:c2:c7:b6:92:af:85:e0:ed:6a:9a:a1:29:06:97:
         61:61:d8:71:e2:65:c7:45:0f:dd:de:8b:06:b5:4a:38:74:f3:
         64:08:7d:85:63:f5:c7:2a:bc:fd:13:19:37:fe:4f:d3:27:c3:
         07:40:90:c6:d3:60:3c:cf:7e:ba:e2:84:06:15:33:5a:a1:bd:
         be:e0:1e:2a:1e:a0:16:26:96:33:b0:c0:d2:ed:72:b7:73:f5:
         a0:25:93:35:66:30:62:96:4e:ad:ba:c7:ce:b2:57:55:ca:64:
         2e:5e:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 13:25:59 2024 by rpki-client on console-ams.rpki-client.org