Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/323830333a636439303a3a2f33322d3332203d3e20323731383039.roa
File:                     323830333a636439303a3a2f33322d3332203d3e20323731383039.roa (raw, json)
Hash identifier:          0v0cR4938ei4ko1nUmAO7rXphUL3NHaBem60qJJiiC4=
Subject key identifier:   1E:FB:8A:08:EE:C3:04:D7:4F:8D:14:0A:C2:32:67:B3:F5:1B:36:12
Certificate issuer:       /CN=A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F
Certificate serial:       033625A0529DBF67AD48D5E16DA39D7EBD93EEC2
Authority key identifier: A0:6A:7E:C0:BF:96:06:15:9C:BA:1D:61:C3:A5:1C:CC:BA:54:1A:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/323830333a636439303a3a2f33322d3332203d3e20323731383039.roa
Signing time:             Tue 05 Mar 2024 17:57:37 +0000
ROA not before:           Tue 05 Mar 2024 17:52:37 +0000
ROA not after:            Tue 04 Mar 2025 17:57:37 +0000
asID:                     271809
IP address blocks:        2803:cd90::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:36:25:a0:52:9d:bf:67:ad:48:d5:e1:6d:a3:9d:7e:bd:93:ee:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F
        Validity
            Not Before: Mar  5 17:52:37 2024 GMT
            Not After : Mar  4 17:57:37 2025 GMT
        Subject: CN=1EFB8A08EEC304D74F8D140AC23267B3F51B3612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:64:75:71:4d:10:e9:b6:f1:8c:8f:8b:7a:
                    8b:f0:57:b3:ea:cb:70:2b:27:61:f8:f4:fc:52:94:
                    65:7c:c9:86:da:77:fc:34:0e:f7:ae:59:09:8c:68:
                    8a:13:25:bf:1d:04:c5:34:35:f2:d3:93:ad:d2:b4:
                    5e:e2:50:97:01:65:b4:83:aa:8c:69:8a:41:cb:d7:
                    f5:74:9e:b5:8a:33:30:4c:7f:bc:2b:e4:cd:8a:ac:
                    da:e0:79:3c:8a:1e:c4:83:4c:2c:26:3b:44:f5:71:
                    57:de:0b:5d:fc:03:1d:28:d5:2f:36:8a:cb:cd:03:
                    da:07:bc:25:b9:74:33:05:0e:0f:f0:6b:0e:7c:f1:
                    22:f4:65:b3:73:fe:26:02:9a:5d:e7:4d:b1:72:4e:
                    14:ca:4a:85:8a:81:2e:c2:a2:c1:c0:cf:5d:be:07:
                    8c:f5:c1:19:9a:5a:72:12:12:bf:96:d5:f2:b7:fd:
                    35:f2:19:84:30:0b:32:3d:eb:d2:a2:1c:34:1d:db:
                    ec:45:6a:96:fe:fd:ed:97:34:34:60:4e:26:fb:4c:
                    1d:30:94:6a:a6:2d:06:b8:3b:f3:93:2b:7b:70:80:
                    a7:10:c8:a7:33:af:a6:38:89:48:d7:ed:2e:d3:1f:
                    14:b2:a9:0b:89:a4:18:6a:b2:ae:f9:dc:f6:2a:c9:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FB:8A:08:EE:C3:04:D7:4F:8D:14:0A:C2:32:67:B3:F5:1B:36:12
            X509v3 Authority Key Identifier:
                keyid:A0:6A:7E:C0:BF:96:06:15:9C:BA:1D:61:C3:A5:1C:CC:BA:54:1A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/323830333a636439303a3a2f33322d3332203d3e20323731383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd90::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:af:3e:e3:ee:36:92:d4:0a:78:ea:4a:6a:24:7e:7e:8e:d1:
         68:fe:e3:9f:19:ec:2b:14:b0:b6:7b:1a:21:00:de:66:07:91:
         44:04:44:d4:fc:1d:62:34:16:7a:c5:c7:7a:6d:e3:e6:43:70:
         1b:ce:7e:9e:b7:0e:18:fc:a9:2b:dd:e7:db:d0:7f:b1:88:0b:
         03:ea:2e:3b:d4:a7:5d:6b:8a:77:84:7a:94:08:12:4e:e6:2d:
         47:e6:3a:81:5e:44:b5:aa:04:0d:9f:99:16:52:6a:72:25:9d:
         1c:bf:47:1d:cf:eb:af:af:c5:0b:1d:18:fc:99:ed:1f:82:04:
         ad:36:23:52:1b:27:97:df:0b:eb:3c:a0:32:11:f4:14:29:db:
         06:03:fb:08:1b:3e:92:0d:8a:7d:ff:5d:1c:b1:36:7b:e8:c1:
         f4:dd:2e:98:c8:ce:d6:38:df:74:f8:07:81:7e:ab:dd:6b:11:
         3a:64:18:3f:b0:b6:96:df:38:83:d8:1b:af:0f:96:2e:af:34:
         93:92:6e:17:71:06:cd:14:71:aa:a7:4e:44:c5:01:5b:11:0a:
         ea:23:4b:a9:4d:29:21:6b:8d:aa:e2:6d:82:da:85:48:c7:ea:
         47:cf:66:55:58:96:d7:bf:7c:0c:d6:1b:f6:2a:46:03:eb:b2:
         ba:79:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org