Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3144A0A2AD5BDBDA223163B480EC00357E2B7E758218CE9AEC9D37D3C6C1F20F/0/323830333a623036303a3a2f33362d3336203d3e20323637383135.roa
File:                     323830333a623036303a3a2f33362d3336203d3e20323637383135.roa (raw, json)
Hash identifier:          HUFo8JmVkyCK5ECTcTGExgbOlaZeBlpQ3C88BNy1w+o=
Subject key identifier:   C2:05:CC:EF:6D:BC:AB:6F:15:93:28:27:F1:10:82:7A:82:A1:8F:C7
Certificate issuer:       /CN=253884FEB4F65EB5E046241A1ECA6B109C3621EC
Certificate serial:       0F654BBA29B6ACE50FE3D15CCB1E694AECB636B7
Authority key identifier: 25:38:84:FE:B4:F6:5E:B5:E0:46:24:1A:1E:CA:6B:10:9C:36:21:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253884FEB4F65EB5E046241A1ECA6B109C3621EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3144A0A2AD5BDBDA223163B480EC00357E2B7E758218CE9AEC9D37D3C6C1F20F/0/323830333a623036303a3a2f33362d3336203d3e20323637383135.roa
Signing time:             Tue 05 Mar 2024 18:16:50 +0000
ROA not before:           Tue 05 Mar 2024 18:11:50 +0000
ROA not after:            Tue 04 Mar 2025 18:16:50 +0000
asID:                     267815
IP address blocks:        2803:b060::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3144A0A2AD5BDBDA223163B480EC00357E2B7E758218CE9AEC9D37D3C6C1F20F/0/253884FEB4F65EB5E046241A1ECA6B109C3621EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3144A0A2AD5BDBDA223163B480EC00357E2B7E758218CE9AEC9D37D3C6C1F20F/0/253884FEB4F65EB5E046241A1ECA6B109C3621EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253884FEB4F65EB5E046241A1ECA6B109C3621EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:65:4b:ba:29:b6:ac:e5:0f:e3:d1:5c:cb:1e:69:4a:ec:b6:36:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253884FEB4F65EB5E046241A1ECA6B109C3621EC
        Validity
            Not Before: Mar  5 18:11:50 2024 GMT
            Not After : Mar  4 18:16:50 2025 GMT
        Subject: CN=C205CCEF6DBCAB6F15932827F110827A82A18FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:ce:59:30:4f:06:fb:a8:85:03:27:a9:dc:
                    7a:c7:b1:51:a7:5e:b7:da:56:f9:96:61:57:51:00:
                    38:a5:13:0b:db:6c:d6:0f:9b:1a:06:32:b5:84:a0:
                    2e:b8:56:dd:4e:8f:10:2d:b0:29:80:55:dc:8d:66:
                    88:2b:f9:0e:f2:db:e4:a6:9f:9f:ea:0d:96:a9:ef:
                    01:a8:f3:5c:d4:8b:50:4a:d4:a4:68:36:55:cb:8f:
                    68:a3:2f:6f:98:cf:a8:6b:a5:44:d6:24:71:bc:72:
                    fa:69:1f:2e:30:8e:26:99:27:1e:53:af:30:4d:ae:
                    f9:37:5a:64:c5:f8:89:fe:1b:75:81:42:b3:38:0a:
                    83:21:2b:4d:06:80:af:ac:2d:1b:d3:24:7f:97:33:
                    3a:b5:46:5b:3d:9b:97:9e:23:73:c6:cd:56:31:8e:
                    d8:d6:b7:2e:18:8e:34:17:c8:c7:dd:fc:71:f7:ff:
                    e9:50:c7:61:a7:0a:52:92:48:f3:94:3e:3e:54:a1:
                    ec:99:d1:65:b9:8a:b7:b3:a3:a1:12:65:a3:37:b7:
                    2f:3d:f7:e7:ca:60:b7:ef:b1:5c:c8:b5:5b:df:1f:
                    39:d4:b9:1e:e3:9d:b3:8d:0d:ee:f4:78:78:2a:32:
                    78:fd:c5:fa:b0:f6:9c:8d:45:93:c1:4c:f9:b2:99:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:CC:EF:6D:BC:AB:6F:15:93:28:27:F1:10:82:7A:82:A1:8F:C7
            X509v3 Authority Key Identifier:
                keyid:25:38:84:FE:B4:F6:5E:B5:E0:46:24:1A:1E:CA:6B:10:9C:36:21:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3144A0A2AD5BDBDA223163B480EC00357E2B7E758218CE9AEC9D37D3C6C1F20F/0/253884FEB4F65EB5E046241A1ECA6B109C3621EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253884FEB4F65EB5E046241A1ECA6B109C3621EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3144A0A2AD5BDBDA223163B480EC00357E2B7E758218CE9AEC9D37D3C6C1F20F/0/323830333a623036303a3a2f33362d3336203d3e20323637383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b060::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:21:62:ea:fb:4d:15:26:23:61:50:0b:05:22:80:0e:19:
         f5:44:d3:50:76:d2:a9:39:fe:fa:4c:00:50:ed:25:f5:53:e9:
         2e:c9:49:ec:d8:87:4e:1e:92:51:3f:9a:5f:c1:6a:8c:76:2b:
         0a:02:ee:12:de:82:54:20:67:a6:10:02:32:db:d4:85:c5:2f:
         98:30:64:ad:ee:ae:43:2c:d6:e5:0a:45:ff:1f:d3:c0:db:ea:
         7d:67:0e:d2:6a:b7:c9:fc:9a:2d:41:0f:61:08:cf:16:c5:9e:
         2f:05:6b:27:f6:66:31:5b:fb:e6:29:fa:84:25:3a:60:fa:35:
         8f:a2:e5:2b:0d:1e:75:39:13:a5:21:7c:57:4f:1b:38:59:70:
         69:97:a0:d3:a8:d7:52:c2:d5:18:71:21:5c:49:5a:57:82:f8:
         88:88:cf:1f:e0:88:13:3e:48:a1:70:86:d7:f7:6e:ad:8f:68:
         ca:6d:53:4c:ab:25:79:45:f1:94:69:86:2a:45:cf:80:f5:29:
         0c:05:4d:fb:0d:be:34:8a:32:d9:6c:dc:08:a2:1a:65:5d:bd:
         a7:21:f0:75:e2:a2:b7:98:31:1b:9b:26:43:c4:24:f4:d0:2f:
         52:c6:5e:16:18:98:64:e2:63:37:1f:89:a4:92:cc:50:cf:88:
         7e:8b:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:03:11 2024 by rpki-client on console-fra.rpki-client.org