Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a376630303a3a2f34302d3438203d3e20323733303739.roa
File:                     323830333a386335303a376630303a3a2f34302d3438203d3e20323733303739.roa (raw, json)
Hash identifier:          CuPnbT9GFaT1G6p9ayba7U+i4acGHN245fHhVDDpoG8=
Subject key identifier:   F9:80:2E:D3:7F:39:16:1B:07:29:73:8F:47:F7:DA:E0:D7:04:C6:02
Certificate issuer:       /CN=C8585F69732D336320CC1588DC6B16D9F54DDE9B
Certificate serial:       20F37AD5ED69EF8CE62F60075344D1C29749BB01
Authority key identifier: C8:58:5F:69:73:2D:33:63:20:CC:15:88:DC:6B:16:D9:F5:4D:DE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a376630303a3a2f34302d3438203d3e20323733303739.roa
Signing time:             Tue 05 Mar 2024 18:19:17 +0000
ROA not before:           Tue 05 Mar 2024 18:14:17 +0000
ROA not after:            Tue 04 Mar 2025 18:19:17 +0000
asID:                     273079
IP address blocks:        2803:8c50:7f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f3:7a:d5:ed:69:ef:8c:e6:2f:60:07:53:44:d1:c2:97:49:bb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8585F69732D336320CC1588DC6B16D9F54DDE9B
        Validity
            Not Before: Mar  5 18:14:17 2024 GMT
            Not After : Mar  4 18:19:17 2025 GMT
        Subject: CN=F9802ED37F39161B0729738F47F7DAE0D704C602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:ec:1b:0c:ba:58:c1:cf:ce:8e:1d:8d:a1:
                    73:d2:e1:0c:05:a9:ec:0a:87:21:64:1c:d3:4f:23:
                    08:41:cc:fb:4a:1d:46:56:2d:e7:ce:ea:a7:9b:4b:
                    67:05:29:c5:0e:86:c9:35:25:cf:61:2f:ce:29:11:
                    ed:9c:7e:45:ad:cc:fe:77:9b:be:f5:88:3e:af:1e:
                    aa:cf:62:bd:87:67:12:ca:7f:f6:e4:aa:33:ee:0c:
                    b2:c1:b6:af:5b:9f:17:5d:36:ef:97:bd:36:55:58:
                    5c:0c:b3:97:66:f8:45:9b:65:e1:26:b7:7a:b8:aa:
                    4b:63:a6:55:66:64:6e:2e:5b:b8:21:5d:63:b5:07:
                    00:fe:56:2d:f8:b9:ab:13:02:a9:bd:82:7b:ae:77:
                    92:91:d6:38:da:27:03:80:19:fd:76:f9:d1:89:f3:
                    90:c9:5d:e9:3b:3b:04:b6:25:b0:c7:90:75:24:1a:
                    7b:1c:79:0a:0b:13:f3:a6:44:b2:2f:09:3e:a6:7a:
                    ad:4c:82:f5:e9:8e:24:9a:e0:71:a8:f2:b9:a3:e9:
                    dd:e9:32:d2:3d:e4:7a:a7:2b:5d:f9:5d:15:b6:26:
                    a0:77:8c:11:ea:c2:91:78:2e:c7:09:f0:a6:e5:e4:
                    1a:df:2b:6e:4a:17:98:6e:29:b4:e3:66:e0:11:89:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:80:2E:D3:7F:39:16:1B:07:29:73:8F:47:F7:DA:E0:D7:04:C6:02
            X509v3 Authority Key Identifier:
                keyid:C8:58:5F:69:73:2D:33:63:20:CC:15:88:DC:6B:16:D9:F5:4D:DE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8585F69732D336320CC1588DC6B16D9F54DDE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29CCEC70C1DA8253E769D8930647ADE90D845C1DFC34D23C16D7798DC79939EE/0/323830333a386335303a376630303a3a2f34302d3438203d3e20323733303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c50:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:dd:6f:db:f6:99:98:c4:2c:ff:b8:4d:3b:14:22:1d:6d:
         07:88:37:db:93:13:f8:c7:fa:88:cf:a8:49:fc:92:9f:cc:b6:
         a0:2b:df:0c:36:d5:e7:1f:a6:97:56:4a:c9:11:32:5c:22:c1:
         04:25:cb:31:fa:a7:49:cb:f9:eb:92:e4:be:19:bc:22:e5:d1:
         71:27:27:f1:1b:f3:ca:68:de:8f:0a:cb:a5:30:b1:1a:84:cd:
         c8:fb:27:ba:8a:c7:4c:57:2a:35:35:5a:e0:42:e6:f3:55:a9:
         a2:71:1a:80:24:29:68:bc:34:d8:3c:ae:b4:25:34:48:b2:33:
         bd:dd:8a:be:4b:c1:da:46:b9:18:1d:12:cb:8a:fe:d9:29:02:
         41:74:27:1f:df:d5:cf:d6:5f:4b:02:dc:49:5c:2b:ba:e3:ed:
         fb:22:13:5c:f1:79:52:e8:04:5a:43:f9:37:56:ea:3b:b9:66:
         ec:ad:e5:e6:32:12:0b:39:fa:52:d3:7c:3f:97:c4:cc:ff:ce:
         d7:a7:d1:0e:57:d5:4c:a5:c4:c0:00:1f:9d:4c:82:d8:21:42:
         89:0e:10:51:03:d7:1d:31:8e:10:01:c9:48:63:d3:1a:ce:b6:
         b4:dd:43:16:62:3c:dd:bc:00:7d:f9:20:99:71:f7:28:a2:6e:
         b9:82:02:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 31 03:13:48 2024 by rpki-client on console-ams.rpki-client.org