Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a663263303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          pTuGn/XFSzOyT3gc4j4pc3+R+PhOZyTOjIO+036RTec=
Subject key identifier:   39:66:FD:45:40:F0:F4:40:96:6B:67:97:C1:12:C7:F3:9B:A8:2B:C0
Certificate issuer:       /CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
Certificate serial:       3556458753E2A7B95303425CE5ED017BBE595AB6
Authority key identifier: D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:09:02 +0000
ROA not before:           Tue 05 Mar 2024 18:04:02 +0000
ROA not after:            Tue 04 Mar 2025 18:09:02 +0000
asID:                     52468
IP address blocks:        2803:f2c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:56:45:87:53:e2:a7:b9:53:03:42:5c:e5:ed:01:7b:be:59:5a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
        Validity
            Not Before: Mar  5 18:04:02 2024 GMT
            Not After : Mar  4 18:09:02 2025 GMT
        Subject: CN=3966FD4540F0F440966B6797C112C7F39BA82BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:e3:1d:fe:c7:9a:04:b1:94:cc:ac:40:ae:
                    6c:95:87:ef:a8:01:f8:67:59:27:1f:4d:c3:bf:6a:
                    a1:3b:93:44:e4:8c:34:b5:5d:b2:12:be:22:7d:74:
                    bd:5d:af:de:d0:9f:aa:60:ad:bf:10:66:d8:8c:c9:
                    b8:55:0d:a0:2e:46:6c:d0:61:b8:3f:f8:a3:90:9e:
                    e5:87:b7:db:85:55:66:b5:83:55:97:76:37:ab:89:
                    00:af:66:14:04:fd:6a:46:21:c6:d7:91:39:22:81:
                    be:7d:6c:08:3a:09:a0:e1:31:40:c0:f4:8a:6a:6c:
                    1f:28:62:a5:c2:1c:d3:28:a3:33:5a:3f:fd:a2:a9:
                    67:b0:58:20:aa:6f:be:45:3b:bd:5b:3c:d0:82:e6:
                    7f:0c:4b:39:0c:87:4d:1f:1e:3b:dc:9a:6a:9f:0b:
                    e0:84:7c:6c:35:77:9d:46:95:95:27:60:c2:a8:6c:
                    68:80:8a:74:3c:3e:44:69:26:3b:0e:31:35:20:83:
                    ea:99:0c:ff:f4:f2:a9:9c:cf:0a:a1:94:d9:c5:7b:
                    3c:0f:88:51:dd:b6:fd:2a:13:e1:00:1e:26:5e:21:
                    cf:18:14:d7:bf:72:32:3b:d2:e2:6d:6c:a2:e6:f2:
                    23:3d:e1:b6:9f:3c:75:06:49:a5:2f:00:15:9b:98:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:FD:45:40:F0:F4:40:96:6B:67:97:C1:12:C7:F3:9B:A8:2B:C0
            X509v3 Authority Key Identifier:
                keyid:D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/323830333a663263303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:15:3c:44:21:75:a3:c6:5b:09:ff:b5:8a:44:0e:90:1b:ac:
         14:46:e3:16:2c:99:23:6c:82:94:49:22:cf:a7:0b:62:17:6d:
         d9:d7:9b:6e:14:a3:71:5e:d2:7f:a1:f3:43:cc:f9:db:0a:e4:
         4c:15:74:04:1a:e1:b2:d1:49:4a:26:31:d5:9b:f2:09:83:ce:
         89:81:b7:95:0d:d5:9a:6f:9d:4d:d0:04:f6:32:7f:fb:1e:d8:
         57:3f:9d:4c:81:7b:65:53:71:99:d8:6a:75:45:dc:dd:e3:05:
         12:f0:b0:e1:4d:58:e0:dd:77:5a:ae:4d:df:89:1a:77:79:e8:
         95:c5:99:0e:b6:a8:0a:dd:42:3d:ce:d8:84:f5:07:9a:db:7e:
         f5:67:84:be:d0:2e:d1:7b:aa:54:95:4e:4b:b0:fd:c2:51:bd:
         d9:3a:ff:1c:79:2a:08:a5:43:a1:84:c0:e1:5e:b7:e9:b2:75:
         81:e1:dc:ed:d9:0b:1f:c5:4c:6b:f9:f9:b7:59:1f:17:27:bc:
         55:ce:74:11:fc:48:03:64:72:81:0c:f9:5d:e1:cb:59:5d:94:
         46:31:cd:f2:25:f4:a7:4c:b3:95:e8:f2:9c:47:a0:80:6c:80:
         10:15:90:3d:6e:50:19:26:49:e3:a8:b3:c4:29:c9:23:2f:48:
         b7:e9:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:37:01 2024 by rpki-client on console-ams.rpki-client.org