Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32303a3a2f34382d3438203d3e20323637383439.roa
File:                     323830333a616336303a32303a3a2f34382d3438203d3e20323637383439.roa (raw, json)
Hash identifier:          Ye6RZQfuz2LNXhK0gUGhz/u2GcatjO8vK56qI5Z/D3Q=
Subject key identifier:   CA:48:96:52:A8:54:23:7C:36:75:51:ED:37:70:6F:27:F8:AB:99:65
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       25F01A9ACC7A1600CC488E18D72612F00B284E99
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32303a3a2f34382d3438203d3e20323637383439.roa
Signing time:             Tue 05 Mar 2024 18:04:41 +0000
ROA not before:           Tue 05 Mar 2024 17:59:41 +0000
ROA not after:            Tue 04 Mar 2025 18:04:41 +0000
asID:                     267849
IP address blocks:        2803:ac60:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f0:1a:9a:cc:7a:16:00:cc:48:8e:18:d7:26:12:f0:0b:28:4e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Mar  5 17:59:41 2024 GMT
            Not After : Mar  4 18:04:41 2025 GMT
        Subject: CN=CA489652A854237C367551ED37706F27F8AB9965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:a5:67:38:57:22:95:ed:2f:bd:22:e1:ed:
                    d8:41:0b:1e:8f:81:f2:c9:85:5a:81:31:18:dc:0d:
                    eb:b7:01:db:4a:a9:98:f9:0b:f5:98:9a:18:9a:64:
                    bb:76:85:4b:d2:1d:2b:67:c7:e7:18:44:0e:18:de:
                    14:72:9d:8e:95:90:b8:4a:ac:96:09:8a:90:05:bc:
                    ce:b8:57:ac:4d:70:88:b1:5a:0c:2b:78:5e:3e:2c:
                    df:84:d3:f3:67:e9:62:03:2c:68:bc:ab:e9:fe:73:
                    1b:17:73:50:89:26:69:f2:be:c5:47:c8:dc:4b:e4:
                    51:e1:ff:2b:0f:b0:6a:bd:ad:9f:59:1a:96:e1:a4:
                    74:50:4b:4e:c3:99:ed:9e:d9:7c:df:bf:71:19:5b:
                    ce:de:af:91:17:01:b2:3d:45:7d:11:f6:31:bd:2c:
                    f9:39:83:71:e2:64:d8:af:a5:62:6f:4b:2f:a7:ff:
                    e0:a5:fb:3d:99:76:a4:7c:98:37:9a:7f:59:ec:a7:
                    0b:da:e5:2b:c2:99:15:c3:85:24:37:97:5c:32:b5:
                    e7:af:2c:20:62:95:77:c5:bf:7e:3b:a5:a4:6a:3a:
                    c1:cd:6a:99:ed:48:7f:60:6e:6d:63:5e:04:da:a7:
                    0a:c7:a3:e0:7a:e0:5e:59:fb:6b:1e:79:bc:13:65:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:96:52:A8:54:23:7C:36:75:51:ED:37:70:6F:27:F8:AB:99:65
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a32303a3a2f34382d3438203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:6d:d9:d9:36:21:db:08:f1:d4:21:57:1d:a5:73:6f:8d:b4:
         97:a2:bb:d8:d3:f9:3a:74:a8:a0:d5:f3:ed:6f:0a:e4:1f:cf:
         aa:1d:0e:06:d8:e4:23:79:1e:7c:08:0b:de:f3:31:3b:0c:8a:
         50:bd:2f:79:c9:58:17:25:2d:93:9b:a7:11:3a:88:5d:fc:f0:
         d2:23:eb:03:24:c2:d7:2f:78:9f:02:0a:a4:ba:24:34:1d:76:
         a8:ee:b9:5c:ea:8f:0d:41:55:fe:e5:7c:16:d2:d6:16:6b:96:
         91:c5:9c:ea:89:f0:67:db:0b:fa:da:d7:6a:5f:4e:ea:b7:4e:
         3e:e7:0d:13:52:d2:d5:13:ab:82:5b:7d:67:6d:07:52:0e:26:
         05:99:37:75:50:b5:68:cc:96:ae:34:67:b9:61:53:3e:5d:7e:
         b2:6f:3d:f8:10:0b:e0:ff:0d:b1:eb:39:36:cb:c5:55:03:31:
         6a:2a:7f:a3:d6:c0:bb:a4:ba:76:1b:68:51:87:6c:e0:18:3e:
         a8:59:1c:62:48:b5:df:d2:67:ec:d4:fa:27:1b:50:09:31:b9:
         94:a0:76:e8:c6:20:7f:b6:f2:1d:12:2d:dc:5f:f7:94:6e:be:
         3b:94:c0:a4:80:56:95:43:c1:df:ca:ff:34:d9:f9:ef:fc:6f:
         a8:7a:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org