Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a3a2f33322d3438203d3e20323637383439.roa
File:                     323830333a616336303a3a2f33322d3438203d3e20323637383439.roa (raw, json)
Hash identifier:          DMoJhoa2gBkS4cR+/TAgGDUruXbX/JNKW+kLbA991Ls=
Subject key identifier:   E9:E7:38:BF:9C:18:2F:F3:FA:97:DE:0F:4A:75:1D:14:8D:6A:23:72
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       2DFD35C50AADC1A7DA2AC36B1E149D760A1CEA01
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a3a2f33322d3438203d3e20323637383439.roa
Signing time:             Tue 05 Mar 2024 18:04:38 +0000
ROA not before:           Tue 05 Mar 2024 17:59:38 +0000
ROA not after:            Tue 04 Mar 2025 18:04:38 +0000
asID:                     267849
IP address blocks:        2803:ac60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fd:35:c5:0a:ad:c1:a7:da:2a:c3:6b:1e:14:9d:76:0a:1c:ea:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Mar  5 17:59:38 2024 GMT
            Not After : Mar  4 18:04:38 2025 GMT
        Subject: CN=E9E738BF9C182FF3FA97DE0F4A751D148D6A2372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:2a:75:46:59:44:5e:ef:fe:3b:fd:c4:56:
                    38:dd:82:c7:1a:fe:15:d7:72:04:e3:dc:99:89:50:
                    13:c8:f4:76:18:d5:8e:85:6c:be:fd:fb:e9:45:be:
                    99:dd:75:7f:6d:ca:76:b2:86:cd:db:21:bc:34:d0:
                    96:d0:4a:4d:3a:2b:ad:a6:40:e1:39:ba:f8:73:a5:
                    4c:77:38:cb:98:0b:cd:f0:d7:80:f4:3b:18:a3:88:
                    78:05:24:53:cf:ac:e0:47:b9:4c:7a:17:4c:6d:51:
                    e8:1a:ff:6b:4b:82:74:f4:11:db:4c:38:d2:bd:18:
                    fd:e0:f6:26:f2:0a:13:7e:7d:3a:6c:48:e6:ce:e7:
                    18:be:22:cf:13:e0:40:9e:86:82:00:b1:6e:29:30:
                    49:44:ed:29:61:6d:e5:19:2c:b2:30:c3:af:c5:e6:
                    70:2b:b7:2f:6a:b5:59:da:fa:56:3f:91:58:d2:35:
                    fd:4e:7a:42:dc:a1:f4:86:38:d1:3e:bc:5d:4e:8d:
                    8b:0f:d9:a7:37:18:3d:82:ea:02:10:00:41:59:af:
                    b0:b0:a3:fb:af:61:1c:24:6e:68:d1:da:bc:f9:f3:
                    45:6b:48:d5:76:18:3d:2f:1d:ca:af:9d:82:a3:f4:
                    40:89:a1:a5:b4:42:f1:88:a0:c8:57:76:33:12:22:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E7:38:BF:9C:18:2F:F3:FA:97:DE:0F:4A:75:1D:14:8D:6A:23:72
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/323830333a616336303a3a2f33322d3438203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:b8:9e:dd:8e:9d:2c:6f:4a:50:9c:c3:56:97:32:9d:58:
         b3:82:cd:98:4b:45:be:90:5b:73:11:c7:21:cf:69:4d:bd:8e:
         de:cd:26:dd:f6:e0:84:6c:9e:39:0f:5d:22:fc:e9:05:0d:9a:
         0c:59:0e:a2:c1:5b:d6:83:aa:b1:ea:ef:c3:a8:f3:60:ff:0e:
         05:0b:71:80:f8:81:f2:71:82:34:ec:3e:14:76:fa:db:d6:43:
         bf:18:f2:84:15:72:71:71:ab:02:d7:00:dc:51:39:92:3e:7c:
         32:eb:c1:65:4a:27:bd:36:cf:19:2d:72:25:b7:f4:86:ff:69:
         f4:5f:e2:8e:a0:a7:bb:91:79:99:16:fc:a1:7d:3f:68:c4:b7:
         1d:6e:05:ab:4a:ac:c2:90:3c:f3:b8:bd:34:42:ab:94:26:44:
         a2:95:bc:6c:43:94:fe:a9:17:65:bf:54:21:9f:f8:3b:69:9e:
         5c:86:ec:b7:99:91:4e:4b:ed:44:7e:6c:20:39:c4:4b:77:78:
         b4:42:17:5f:09:bb:ed:e8:a0:27:eb:2a:35:77:4b:27:45:9e:
         ed:91:26:59:7a:08:66:86:b6:86:23:b8:5c:de:40:fe:f6:4a:
         2a:17:5c:d6:2f:15:cc:97:d6:ca:98:96:a0:65:98:db:aa:2f:
         5b:89:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org