Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/323830333a343831303a3a2f33322d3332203d3e20323731383136.roa
File:                     323830333a343831303a3a2f33322d3332203d3e20323731383136.roa (raw, json)
Hash identifier:          s5sHdvU6MW36TfUOVOCqzyA0c7LSliw/hxDsFzrEq90=
Subject key identifier:   6C:D0:73:7E:D7:F8:91:08:50:20:72:B3:83:19:6C:4C:D9:46:D2:EB
Certificate issuer:       /CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Certificate serial:       5AAD7368FEF7E2B015230E73D932BD1559B2E30E
Authority key identifier: 08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/323830333a343831303a3a2f33322d3332203d3e20323731383136.roa
Signing time:             Tue 05 Mar 2024 17:54:06 +0000
ROA not before:           Tue 05 Mar 2024 17:49:06 +0000
ROA not after:            Tue 04 Mar 2025 17:54:06 +0000
asID:                     271816
IP address blocks:        2803:4810::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ad:73:68:fe:f7:e2:b0:15:23:0e:73:d9:32:bd:15:59:b2:e3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
        Validity
            Not Before: Mar  5 17:49:06 2024 GMT
            Not After : Mar  4 17:54:06 2025 GMT
        Subject: CN=6CD0737ED7F89108502072B383196C4CD946D2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e3:42:ca:6c:c2:28:a3:7b:b9:db:ca:22:b8:
                    85:a4:9b:5d:2d:8f:29:af:44:88:c5:87:6d:4a:14:
                    ab:c7:a3:96:f3:b6:69:ae:41:d5:de:a2:d8:15:99:
                    6a:a2:d1:9d:c6:ed:b4:f0:4e:01:2a:8d:27:f7:8a:
                    03:be:4c:e7:ca:11:98:14:6f:2d:09:8a:76:1f:41:
                    b7:d7:59:38:6f:f9:25:63:d9:d9:3a:eb:68:a3:47:
                    6a:e3:82:a5:71:af:79:dc:f3:9e:2d:ad:6b:d9:e3:
                    dd:5a:04:95:47:25:96:21:71:f3:1c:c0:11:49:e2:
                    76:ce:30:03:b0:54:ca:ee:27:09:fb:ef:d2:e4:cb:
                    08:8f:35:3e:6c:8e:28:17:d8:65:12:d4:4d:c8:24:
                    c9:09:c6:53:6e:c8:26:98:68:e1:7b:d8:01:16:a4:
                    90:9d:4b:8e:7d:66:1a:1b:ee:ac:82:ff:fd:74:27:
                    7e:56:81:fd:da:fe:1e:9d:be:d0:1c:e3:8d:8e:ec:
                    3a:47:45:85:7d:37:91:e1:44:ba:3c:9a:a0:ca:00:
                    5d:de:8c:40:76:4a:78:c8:5d:11:98:c1:0d:d7:dd:
                    86:29:3c:5f:d1:6a:6b:9b:33:2b:52:ed:4a:95:b1:
                    bb:3d:99:c6:5e:6c:9d:c4:a9:f8:e4:5d:53:94:c8:
                    b1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:73:7E:D7:F8:91:08:50:20:72:B3:83:19:6C:4C:D9:46:D2:EB
            X509v3 Authority Key Identifier:
                keyid:08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/323830333a343831303a3a2f33322d3332203d3e20323731383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4810::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:2a:1f:84:46:40:64:40:c2:4a:5f:6b:88:df:1a:e0:4d:fb:
         7c:14:85:ab:be:b1:38:d6:ae:33:55:08:c6:0f:fb:90:18:cb:
         19:c9:c0:dc:aa:55:53:91:6f:46:ed:62:6e:dd:58:a0:4b:de:
         f5:e0:b8:21:c0:0e:b8:0c:81:4d:22:16:6c:41:cb:9f:f6:6f:
         4d:90:2a:b0:6d:e1:35:80:4d:27:ec:55:a9:dd:17:df:08:30:
         95:eb:e2:2d:ed:09:d7:4e:28:de:52:33:64:7b:6c:a7:cf:79:
         11:56:8c:94:c6:f5:79:0b:55:94:84:5a:9f:6b:39:12:7c:50:
         f8:2c:d7:7c:c7:69:79:7b:1f:89:c3:a3:44:30:bc:c8:36:f8:
         0d:dc:ef:d5:2d:8c:fc:f6:7f:38:88:35:2d:df:ee:b7:1c:4d:
         46:cd:95:b2:1a:c3:b0:4b:83:7e:dd:82:32:38:88:09:03:49:
         ac:b1:73:f8:b2:80:4f:0a:d8:27:ac:5b:3d:e7:57:5c:0d:17:
         16:c5:de:ba:1f:cd:1f:f3:e7:6b:91:07:b4:f4:76:7d:4b:76:
         89:38:a2:f4:da:a2:31:55:b7:21:8f:69:f2:90:08:ca:90:c9:
         9c:9d:ef:01:f9:8e:fe:16:37:b0:0d:d3:8f:85:fc:24:88:60:
         82:eb:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org