Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/323830333a6338303a3a2f33322d3438203d3e20323633373137.roa
File:                     323830333a6338303a3a2f33322d3438203d3e20323633373137.roa (raw, json)
Hash identifier:          bbAJUriMq9cSbfGV4iDRf7QpessLEpVy1KyHQFPU/kU=
Subject key identifier:   46:87:14:CC:CD:54:8B:CF:18:5F:EF:53:95:9F:44:BF:22:50:F7:2E
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       7750A0F623847A0C038F2ABE7A0CE55D6014001A
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/323830333a6338303a3a2f33322d3438203d3e20323633373137.roa
Signing time:             Tue 05 Mar 2024 18:00:06 +0000
ROA not before:           Tue 05 Mar 2024 17:55:06 +0000
ROA not after:            Tue 04 Mar 2025 18:00:06 +0000
asID:                     263717
IP address blocks:        2803:c80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:50:a0:f6:23:84:7a:0c:03:8f:2a:be:7a:0c:e5:5d:60:14:00:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Mar  5 17:55:06 2024 GMT
            Not After : Mar  4 18:00:06 2025 GMT
        Subject: CN=468714CCCD548BCF185FEF53959F44BF2250F72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:ab:69:de:cb:05:e3:61:57:7a:7b:65:fc:
                    5a:0e:7b:0d:3c:31:db:f9:d7:fb:ae:6c:d2:ae:57:
                    aa:ad:fe:02:e5:e0:ea:7d:d6:aa:04:00:80:fc:85:
                    02:bd:4b:ba:05:8e:07:5c:45:6f:77:fb:e2:5d:e6:
                    d8:aa:09:85:23:b9:a9:fb:01:cb:bd:88:2e:e4:aa:
                    98:ff:e7:1a:66:30:be:a2:31:14:b0:78:2b:2c:56:
                    dd:20:01:93:89:8d:43:a6:14:b2:85:ba:86:84:d9:
                    e7:69:06:2d:d9:41:cc:f3:4c:c0:8c:3e:9f:34:96:
                    19:0f:ae:01:cf:aa:44:b5:f1:28:6e:e1:4c:ef:1b:
                    17:25:9a:4d:53:1c:98:d0:0a:f8:47:27:9c:6c:8a:
                    be:bc:20:87:59:e4:4b:11:cf:03:8f:cd:a3:c2:a0:
                    06:1f:03:76:3f:7f:33:1e:e2:a0:25:7c:a4:d7:5e:
                    c7:8f:02:53:73:90:df:d3:75:01:12:f1:ba:59:48:
                    3c:6b:c6:00:32:a5:fe:1f:3e:69:b9:92:cf:75:63:
                    8d:c4:5d:0c:76:9e:8c:d0:1c:b4:98:5b:69:5d:f9:
                    15:b2:87:00:bf:f4:33:6c:28:44:91:1d:95:02:20:
                    29:17:39:ed:84:fa:cf:54:8c:4b:46:e4:a2:96:90:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:14:CC:CD:54:8B:CF:18:5F:EF:53:95:9F:44:BF:22:50:F7:2E
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/323830333a6338303a3a2f33322d3438203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:9b:66:4a:f3:29:d1:d4:75:68:bf:2e:3b:e1:97:11:4c:e2:
         8e:3d:ff:72:3b:ce:c1:68:80:cf:3d:37:e1:30:19:c2:c2:2d:
         b9:00:05:c3:57:af:4a:3a:66:8b:c4:b7:4a:0e:fb:63:df:9f:
         e7:8b:78:b1:17:36:78:8e:58:47:bd:76:cf:9c:6f:5b:60:52:
         58:b5:23:13:3c:70:18:de:e8:63:56:c9:c3:b9:06:97:c6:87:
         45:c6:a3:e9:26:f3:bc:bc:5b:d4:cc:49:3a:f8:b8:37:8d:8b:
         02:46:50:06:f6:a5:e0:a6:13:1a:a7:9e:4c:3d:07:63:4e:cd:
         47:9c:e4:a6:45:2c:3f:dd:8c:03:e0:0c:0e:c8:e4:d3:fd:3f:
         88:87:94:90:6e:9a:05:15:e9:64:a0:ac:46:e6:9d:53:d1:21:
         7f:9b:ff:48:19:0f:81:d4:59:76:40:7d:35:c7:b7:f3:15:72:
         eb:97:13:f8:7d:e7:c8:67:85:94:5d:16:20:a5:8f:ca:64:f6:
         c7:03:85:a7:f0:b4:ff:50:54:bc:68:b3:e2:65:d5:e9:23:d0:
         aa:b9:ac:46:dc:32:01:1d:41:77:ab:12:95:43:61:23:41:15:
         45:c6:72:87:9e:33:a8:a0:35:ce:a2:fa:b1:4c:00:40:cf:34:
         06:1a:df:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org