Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/323830333a356136303a3a2f33322d3332203d3e20323637383835.roa
File:                     323830333a356136303a3a2f33322d3332203d3e20323637383835.roa (raw, json)
Hash identifier:          DVBT72KPkc1vtDSPBxH4xNZMa4Uuj933QU0hdJJB8AI=
Subject key identifier:   E1:3A:4D:FF:A9:87:57:6B:85:34:2E:EA:38:8D:E2:7C:E2:AE:75:48
Certificate issuer:       /CN=87E86111F292762220D44761EC4E8B3C4F012F38
Certificate serial:       10F10F81A793DCAED68EC5E517E567C14E12CB49
Authority key identifier: 87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/323830333a356136303a3a2f33322d3332203d3e20323637383835.roa
Signing time:             Tue 05 Mar 2024 18:02:48 +0000
ROA not before:           Tue 05 Mar 2024 17:57:48 +0000
ROA not after:            Tue 04 Mar 2025 18:02:48 +0000
asID:                     267885
IP address blocks:        2803:5a60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f1:0f:81:a7:93:dc:ae:d6:8e:c5:e5:17:e5:67:c1:4e:12:cb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E86111F292762220D44761EC4E8B3C4F012F38
        Validity
            Not Before: Mar  5 17:57:48 2024 GMT
            Not After : Mar  4 18:02:48 2025 GMT
        Subject: CN=E13A4DFFA987576B85342EEA388DE27CE2AE7548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:af:dd:fd:eb:d5:e1:bd:14:77:74:22:19:57:
                    98:a9:7f:91:e1:e0:9b:6f:bf:2c:d4:c7:24:0e:e8:
                    61:4e:7b:0e:93:29:b3:c0:7a:33:22:85:69:52:94:
                    e5:0f:53:32:d4:c3:f6:48:b5:e1:c0:9d:21:cb:11:
                    9c:18:23:24:48:12:b5:c6:aa:5a:fa:0f:2f:c7:bd:
                    47:0f:9a:db:a4:a6:a9:4f:36:2c:4e:1a:1f:1a:97:
                    da:ba:2f:0f:31:e7:de:e2:15:ff:72:0b:29:dc:9d:
                    ec:66:99:7c:91:a4:5b:ff:98:b4:54:93:ef:01:eb:
                    d9:92:12:53:ad:8a:43:38:1f:84:58:30:ec:f7:22:
                    54:66:c8:07:51:86:96:ec:43:3c:4f:87:ba:78:f1:
                    7d:80:2a:07:2c:aa:74:d7:f5:1f:d5:27:0c:c5:02:
                    ec:61:16:10:4e:89:df:6f:de:0f:86:6d:65:a4:8b:
                    4b:5c:7c:1d:3c:63:52:3b:16:1b:36:8f:fc:87:09:
                    51:82:ac:c9:35:87:35:2c:08:62:43:6e:67:20:c2:
                    97:a2:ca:78:6f:a5:d5:0b:1d:33:53:58:ee:74:76:
                    1a:a7:13:83:3d:d8:1a:60:a4:70:1e:a5:0e:54:70:
                    f1:d9:cf:fa:1f:c2:e9:18:76:01:17:a1:81:3e:9f:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3A:4D:FF:A9:87:57:6B:85:34:2E:EA:38:8D:E2:7C:E2:AE:75:48
            X509v3 Authority Key Identifier:
                keyid:87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/323830333a356136303a3a2f33322d3332203d3e20323637383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:c9:78:76:32:4e:bb:05:22:21:3e:44:22:82:d4:e9:f5:
         d8:ec:56:35:6f:1d:8e:ef:29:56:1a:ce:26:0f:95:da:64:8e:
         36:b7:ae:f2:a6:c5:43:15:40:2a:2a:9a:6a:24:75:7b:89:16:
         77:17:d4:4e:af:dd:82:39:9c:1e:78:df:c0:4a:bc:19:f6:12:
         22:c2:c5:ce:b2:89:20:88:9e:87:85:c6:27:7b:4a:63:1d:00:
         31:22:e9:5e:d3:74:6c:62:d2:c5:e3:5c:49:8a:87:60:1f:0a:
         14:98:ea:0e:ee:b0:b7:03:bf:72:b1:2c:cc:9e:e8:43:0a:7d:
         3a:14:67:12:31:a8:57:ad:c1:22:39:75:29:4f:d2:37:0f:c1:
         db:cb:80:7a:25:03:80:4a:41:8e:c7:fb:3a:e8:23:58:1d:01:
         7f:a7:8b:ab:d3:c6:d6:0f:04:5d:05:12:b1:aa:49:cf:17:40:
         6a:28:66:4d:c7:86:70:2c:d8:ba:92:59:dd:a0:df:86:60:f0:
         98:2b:45:d1:3a:f0:1c:95:5b:35:32:ec:e1:e2:78:5e:98:96:
         9b:fa:9a:1f:68:c0:8c:97:5c:a2:03:c7:be:5b:a7:a5:a2:07:
         35:ce:4b:87:0b:cd:32:ab:c6:06:0c:f6:1b:a8:36:d0:c3:69:
         3d:9f:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 23:04:45 2024 by rpki-client on console-ams.rpki-client.org