Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/323830313a303a3463303a3a2f34382d3634203d3e20323636373336.roa
File:                     323830313a303a3463303a3a2f34382d3634203d3e20323636373336.roa (raw, json)
Hash identifier:          6PVtcz9lgnT6qC7k3PTM/vozJp912DAgTdzWy5+aZYo=
Subject key identifier:   CF:D1:29:8A:C9:CF:E0:DD:02:EB:79:E3:95:1A:C7:32:8D:BF:6A:0F
Certificate issuer:       /CN=08A26042015ED7345A25228336BD6FF1618453BC
Certificate serial:       3AFC3BAEFAF794BB9AC488F72646B08C54CCD6F4
Authority key identifier: 08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/323830313a303a3463303a3a2f34382d3634203d3e20323636373336.roa
Signing time:             Tue 05 Mar 2024 18:11:01 +0000
ROA not before:           Tue 05 Mar 2024 18:06:01 +0000
ROA not after:            Tue 04 Mar 2025 18:11:01 +0000
asID:                     266736
IP address blocks:        2801:0:4c0::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fc:3b:ae:fa:f7:94:bb:9a:c4:88:f7:26:46:b0:8c:54:cc:d6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A26042015ED7345A25228336BD6FF1618453BC
        Validity
            Not Before: Mar  5 18:06:01 2024 GMT
            Not After : Mar  4 18:11:01 2025 GMT
        Subject: CN=CFD1298AC9CFE0DD02EB79E3951AC7328DBF6A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:54:d2:c8:77:ff:c4:cc:49:15:74:63:b4:
                    4b:be:e0:b0:b6:cf:da:8f:67:9b:64:1e:cf:b9:fc:
                    3c:31:5e:61:95:91:fe:56:fb:56:cf:c8:cf:dc:26:
                    19:33:60:ca:05:e6:22:15:bd:7d:06:7d:11:9f:b4:
                    5a:77:9d:ed:1a:f8:76:8c:9c:6d:a7:2e:2a:70:3c:
                    c5:fd:6e:16:90:a2:da:60:55:a7:99:50:20:75:6d:
                    60:89:6a:06:99:c2:a5:24:15:86:8f:29:02:39:a2:
                    1c:1a:6b:fb:11:4d:01:6e:0b:61:50:6f:67:cb:28:
                    a3:a5:fe:8b:f5:7d:7e:c3:f9:09:59:36:3c:1e:53:
                    6e:10:1f:93:30:ab:6e:e5:45:9a:83:88:73:c8:73:
                    fe:23:18:05:59:fa:e7:69:08:ba:09:90:c6:f1:c6:
                    6c:5f:ab:94:ed:c0:83:78:d4:d4:e2:ff:5d:a7:32:
                    5d:af:1b:2f:6c:ec:4d:32:e4:19:9a:c6:ba:2c:59:
                    05:27:9d:31:9d:c3:a9:8c:30:14:41:16:e7:f2:72:
                    8e:c8:d3:5c:da:2b:c9:9f:d0:36:86:c0:d7:41:e0:
                    db:33:ff:33:c4:aa:30:eb:20:57:07:91:d6:a5:35:
                    6a:87:d5:85:10:8c:5f:dc:2c:5d:6a:2c:2c:0f:3a:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:29:8A:C9:CF:E0:DD:02:EB:79:E3:95:1A:C7:32:8D:BF:6A:0F
            X509v3 Authority Key Identifier:
                keyid:08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/323830313a303a3463303a3a2f34382d3634203d3e20323636373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:e2:c2:0d:04:3d:c0:f5:66:79:da:2e:99:b2:0f:5e:e2:
         ca:5b:65:02:d5:e7:33:eb:85:0d:f6:82:8f:a7:85:af:3f:f7:
         df:c0:69:4d:45:cf:ff:63:36:ac:cc:cc:a2:4b:1c:65:32:8d:
         c4:07:8c:72:2b:1b:15:3f:2b:69:16:8e:4d:79:89:e5:02:a8:
         d7:4f:58:3c:d2:2b:64:24:5b:df:e2:2e:40:8d:6d:33:dd:74:
         34:77:c2:af:8c:0b:ed:da:c0:85:94:8c:2a:9f:15:7c:76:28:
         36:e3:43:c1:1a:ee:3b:8c:3f:b6:9c:03:2b:5e:73:7f:fd:fb:
         db:61:69:89:af:5b:2b:a8:1f:8f:0a:23:9b:9b:c2:cd:a6:48:
         2f:0e:1c:c8:30:03:cd:37:54:6c:76:b4:77:47:d4:9d:40:a8:
         98:8c:af:20:2e:fc:70:f3:9a:c3:c4:8a:7d:01:60:76:c8:f5:
         e4:87:b9:59:4c:b6:95:00:c5:c6:b5:75:c8:ae:5a:38:aa:ad:
         55:66:57:06:c4:31:96:1b:1f:7f:52:00:41:87:38:38:ff:b0:
         d1:b2:df:c6:cb:99:7a:14:df:ab:47:b4:21:8f:36:59:04:89:
         27:c9:08:2d:4f:93:c8:e6:78:22:9d:c8:5f:a5:c3:7e:7c:ab:
         5b:9c:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:00 2024 by rpki-client on console-ams.rpki-client.org