Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030303a3a2f34382d3438203d3e20323730303935.roa
File:                     323830333a383765303a633030303a3a2f34382d3438203d3e20323730303935.roa (raw, json)
Hash identifier:          8jxRFlzEVDO0B1wF4FkXbAMBBnVagD4DB94sG1YL7+E=
Subject key identifier:   99:B9:97:BF:72:95:45:59:64:2C:EC:5D:A2:5C:AB:DD:B9:0C:80:0A
Certificate issuer:       /CN=D8A18733999685921EBB92D26BE397469451AF8B
Certificate serial:       4697CE8D121480D84E3A381B3F15F18A8B7DE2CF
Authority key identifier: D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030303a3a2f34382d3438203d3e20323730303935.roa
Signing time:             Fri 07 Jun 2024 16:45:00 +0000
ROA not before:           Fri 07 Jun 2024 16:40:00 +0000
ROA not after:            Fri 06 Jun 2025 16:45:00 +0000
asID:                     270095
IP address blocks:        2803:87e0:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:97:ce:8d:12:14:80:d8:4e:3a:38:1b:3f:15:f1:8a:8b:7d:e2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A18733999685921EBB92D26BE397469451AF8B
        Validity
            Not Before: Jun  7 16:40:00 2024 GMT
            Not After : Jun  6 16:45:00 2025 GMT
        Subject: CN=99B997BF72954559642CEC5DA25CABDDB90C800A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:60:ab:74:0e:18:dc:15:dd:5a:6d:6c:ec:
                    cd:cd:c3:dc:11:d6:88:3a:21:70:52:e9:e2:e4:e4:
                    bd:14:f9:da:b6:7d:b7:a8:a0:f1:b5:39:2f:0f:f6:
                    89:4f:53:4f:df:81:d4:f3:c4:10:5f:ad:98:6e:a8:
                    33:8b:ae:2d:08:de:72:78:c6:2d:aa:be:7f:37:d4:
                    0d:61:f1:17:e4:18:81:7e:9d:d6:84:82:43:cd:63:
                    4a:83:0a:8e:37:59:a7:da:82:04:5a:3d:c0:56:eb:
                    3c:0c:e4:69:83:e3:66:1c:4d:7f:40:44:9b:93:34:
                    28:29:ba:27:63:89:68:67:c9:c8:db:ec:73:5f:d5:
                    46:83:6a:67:7b:b3:72:cb:35:f4:6e:8c:41:44:53:
                    64:87:d7:ed:9f:1d:c3:cf:76:0a:06:3a:e2:10:b0:
                    bc:97:ab:3d:85:00:ca:80:03:65:42:12:aa:0e:cc:
                    0b:cb:2f:e0:b0:74:0b:1e:c4:7a:70:98:7a:29:95:
                    28:5f:2c:3a:d3:8f:f9:1f:80:28:54:11:45:cd:8f:
                    6c:28:c5:3c:99:5c:9c:91:45:5f:15:b6:53:89:31:
                    71:cf:56:f6:6b:f9:88:bc:29:1f:d4:d3:65:59:e9:
                    c3:dc:59:99:b6:41:8d:23:23:93:1a:c3:a0:18:6f:
                    38:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B9:97:BF:72:95:45:59:64:2C:EC:5D:A2:5C:AB:DD:B9:0C:80:0A
            X509v3 Authority Key Identifier:
                keyid:D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030303a3a2f34382d3438203d3e20323730303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87e0:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:98:50:c5:ff:30:af:8d:00:24:18:53:4a:e1:bb:06:15:
         33:f6:09:4f:a6:7f:45:e9:bb:29:0a:7d:b3:bb:0b:e1:e0:2d:
         45:2b:ed:59:68:3c:9f:2e:f3:18:ca:41:e1:3d:6f:f4:f2:2b:
         25:3c:19:69:e3:ee:f4:19:c9:c3:b0:88:f0:d3:6e:be:2d:cc:
         31:2a:e3:f3:7c:fb:04:de:0b:8d:7c:71:45:18:71:e8:3b:df:
         4a:0e:e0:e5:e1:c3:a2:69:bd:7b:19:2e:20:de:c8:ed:83:29:
         8d:2a:05:d1:08:0e:3b:6a:84:8c:eb:98:67:c0:a6:ac:5b:b4:
         0d:e2:91:05:a0:71:f8:ef:a2:c5:03:67:05:ca:52:5e:83:74:
         99:b8:3b:fd:c2:c9:0f:77:c3:9c:d0:f9:f5:51:b8:29:2f:ca:
         33:7e:6d:05:8f:2f:70:74:98:ff:f6:04:56:75:7a:ee:b8:33:
         da:9c:e4:ec:ee:5d:ee:da:e1:e4:72:a1:c6:4b:54:f7:e9:a7:
         95:29:6c:6a:f3:bb:6f:3f:50:9d:bc:e6:e5:c3:f3:48:85:2b:
         f0:4c:ea:ec:25:2b:88:13:bf:e5:d1:45:31:5b:03:20:bc:b6:
         29:9d:1b:5a:47:b8:ac:74:c4:47:10:e5:44:1d:2a:bf:d4:c7:
         c6:9c:d4:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:32 2024 by rpki-client on console-fra.rpki-client.org