Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a31393a3a2f34382d3438203d3e203238313134.roa
File:                     323830333a323630303a31393a3a2f34382d3438203d3e203238313134.roa (raw, json)
Hash identifier:          5s1Bcbctujc2wqbPcTw7o2iXnLWjPxeE/kDbhk7b4lU=
Subject key identifier:   D8:90:76:0E:D3:BC:86:95:07:D8:49:8B:5F:75:94:E2:25:21:23:D7
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       040B989F7ED4CFA5DAB539F5526D12A07C4C3CC4
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a31393a3a2f34382d3438203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:14 +0000
ROA not before:           Tue 05 Mar 2024 17:53:14 +0000
ROA not after:            Tue 04 Mar 2025 17:58:14 +0000
asID:                     28114
IP address blocks:        2803:2600:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0b:98:9f:7e:d4:cf:a5:da:b5:39:f5:52:6d:12:a0:7c:4c:3c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:14 2024 GMT
            Not After : Mar  4 17:58:14 2025 GMT
        Subject: CN=D890760ED3BC869507D8498B5F7594E2252123D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:96:d0:4b:ab:c5:64:0c:6b:e0:c6:8a:ad:
                    73:ca:82:d8:be:96:9d:19:76:20:6f:70:15:ce:a2:
                    35:07:a6:98:bb:f6:27:19:59:53:33:19:c6:3b:a8:
                    52:c3:b0:23:4c:9e:10:05:3b:03:71:d4:a1:30:92:
                    87:d8:ad:4e:00:54:27:4b:c9:71:0a:96:5c:cb:19:
                    6c:02:ea:cb:b1:5c:3b:67:f7:55:4e:7e:bc:20:ad:
                    d8:e0:d4:e6:87:14:a9:86:6e:7c:93:8c:83:9a:a2:
                    5c:aa:3b:d5:4a:2e:6d:f0:f1:76:81:0e:f5:32:90:
                    23:c8:38:f0:25:c9:6d:c8:e9:2c:9a:00:2f:81:11:
                    d1:8a:6d:7a:ee:48:22:6c:5a:85:a7:a0:ac:28:6a:
                    8b:ce:da:d8:93:22:c9:ec:46:c3:70:68:5d:5c:99:
                    c0:ea:dc:02:9e:fa:13:20:33:dc:07:4b:92:3b:58:
                    ec:5d:04:69:9e:c5:39:b0:63:c5:fb:7e:b1:d9:d1:
                    d5:38:13:b3:b3:84:50:67:e0:03:fd:94:f7:2e:7a:
                    ed:6c:bd:7d:b5:1f:a4:9b:aa:49:02:02:c8:2c:a8:
                    f3:77:f7:70:6f:00:3c:58:81:92:58:c9:4c:9b:6a:
                    73:a6:98:76:be:08:83:2a:5b:f9:ff:16:fd:08:cb:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:76:0E:D3:BC:86:95:07:D8:49:8B:5F:75:94:E2:25:21:23:D7
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/323830333a323630303a31393a3a2f34382d3438203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:26:db:52:76:98:ed:61:65:7c:bd:12:b7:70:f5:25:3e:82:
         e3:01:7f:e5:2d:86:5c:7c:e7:db:83:9f:81:96:98:92:0e:39:
         67:91:fc:96:d7:cc:9e:6b:2c:52:d7:cf:4c:d9:02:7f:6a:d9:
         50:43:c0:21:44:05:eb:d7:4a:20:6e:19:7b:80:02:3f:2f:a3:
         87:02:00:d5:dd:ab:1d:0f:08:e3:25:e2:94:53:b4:9f:0c:e1:
         84:2b:62:2c:a2:a8:c1:73:d0:66:65:b9:9c:ef:cc:16:ec:eb:
         61:92:ad:08:36:32:99:b1:66:6a:fe:38:62:fa:65:80:1f:26:
         50:7a:00:6b:7b:ec:8d:47:3e:15:27:a1:f7:a1:10:1d:00:98:
         1d:c8:72:08:76:1b:09:1d:af:48:ea:cd:6a:7b:a1:e8:c9:40:
         4b:4a:f5:e3:c9:fa:4c:87:17:da:ae:fc:88:8c:52:cb:24:9e:
         82:be:e5:83:2d:8e:0d:b2:ef:ed:fd:52:17:69:ac:54:63:ce:
         62:e4:6b:cd:6d:a2:f1:a3:f9:a0:2d:9d:14:8e:ce:34:ca:0c:
         48:10:12:d8:cc:37:8e:cb:04:c2:7a:25:81:26:6a:fd:a3:c3:
         cf:ff:c3:7f:e6:8d:7e:35:92:18:ee:2b:78:fb:53:f5:c0:4e:
         05:aa:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org