Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3938303a3a2f34342d3434203d3e20323636363833.roa
File:                     323830333a633532303a3938303a3a2f34342d3434203d3e20323636363833.roa (raw, json)
Hash identifier:          RbxQ8zpECdIkDEgo27nPbvqICHo3oh1zAB4efD+J/jo=
Subject key identifier:   C3:86:85:01:7D:D9:57:3E:8E:14:3C:60:E2:90:62:8D:FA:ED:70:42
Certificate issuer:       /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial:       489D79760E865CD7C1C8906BF4E48E025331A39A
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3938303a3a2f34342d3434203d3e20323636363833.roa
Signing time:             Fri 14 Jun 2024 15:00:00 +0000
ROA not before:           Fri 14 Jun 2024 14:55:00 +0000
ROA not after:            Fri 13 Jun 2025 15:00:00 +0000
asID:                     266683
IP address blocks:        2803:c520:980::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9d:79:76:0e:86:5c:d7:c1:c8:90:6b:f4:e4:8e:02:53:31:a3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
        Validity
            Not Before: Jun 14 14:55:00 2024 GMT
            Not After : Jun 13 15:00:00 2025 GMT
        Subject: CN=C38685017DD9573E8E143C60E290628DFAED7042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:07:fd:ff:e5:48:59:b8:d9:91:c0:8c:34:
                    f5:8e:a1:e2:99:fa:25:39:2e:43:bc:77:09:7d:31:
                    f6:4a:19:42:19:d9:27:36:82:2b:5c:da:b0:a2:30:
                    6d:f3:9c:7c:2c:f2:e8:1f:b0:6e:0e:fe:59:d3:a2:
                    b8:9a:13:d9:f9:ed:aa:f3:2c:06:0c:65:9a:35:f5:
                    35:60:fd:4f:a1:3d:cf:40:60:68:b6:f2:e5:c7:5a:
                    8f:97:f9:51:4a:4c:59:98:3d:7b:3c:f5:df:dd:3c:
                    f5:01:68:b3:7f:84:ab:e8:93:f2:4f:43:48:f4:22:
                    ce:82:c7:c3:63:06:1d:57:99:fd:b7:06:08:a2:64:
                    55:64:e7:c6:d5:8f:1d:a8:eb:15:e9:68:95:92:ef:
                    aa:32:53:3c:e6:8e:ba:84:09:41:7c:e3:a6:1f:18:
                    4f:b5:53:04:33:4b:34:eb:5c:e1:3c:42:e3:d7:fa:
                    35:94:e6:26:02:f5:10:ec:7d:2f:3f:24:c1:1f:81:
                    65:2f:ce:ff:31:02:24:af:e7:fe:11:95:33:ef:30:
                    58:da:d3:d5:a4:51:a0:bc:8c:0b:ea:e0:cd:b3:15:
                    31:b4:2f:90:68:d1:08:35:50:3a:5d:b7:99:72:34:
                    f9:e2:95:b0:bc:59:24:24:f5:be:34:b5:d6:5c:a7:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:86:85:01:7D:D9:57:3E:8E:14:3C:60:E2:90:62:8D:FA:ED:70:42
            X509v3 Authority Key Identifier:
                keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3938303a3a2f34342d3434203d3e20323636363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c520:980::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:82:42:0e:7a:73:8d:c8:f3:17:a8:4c:2a:ae:f2:74:10:
         56:ec:6d:1f:5a:3e:3c:38:88:f7:d3:e4:eb:84:f5:06:ae:b0:
         b7:dd:e4:14:cc:2f:1c:da:f7:35:89:80:e4:9c:e4:3f:73:fe:
         2f:c6:d6:0e:cd:a4:4d:dc:d2:54:88:2a:8e:21:4d:84:4d:1c:
         e9:b3:a8:75:aa:09:d1:e3:b7:60:34:97:05:bd:f9:7a:b4:82:
         5d:7b:3b:9f:ac:1b:d2:8e:e2:51:f5:b6:2b:dd:31:5a:c4:a4:
         6a:30:0c:90:9a:a3:b9:77:15:60:79:d3:e9:c3:f0:4d:74:03:
         ef:bf:93:71:fb:f2:50:35:aa:49:30:e3:bc:69:87:3b:13:f4:
         d4:55:6e:2f:59:1a:d1:fd:12:c8:1b:60:22:1f:4a:13:a5:26:
         4b:1d:30:00:88:ab:a9:e2:6a:11:a0:53:8f:c2:6a:41:ba:06:
         19:6e:36:d9:32:5b:c7:25:e3:76:bb:b3:24:31:5a:f8:16:62:
         c5:8e:d2:b7:56:87:c8:21:29:d5:0c:63:cc:09:f3:c3:b5:09:
         06:27:cc:d6:f6:78:37:1d:8c:41:db:e8:e8:8e:15:de:cb:67:
         eb:fe:44:68:a0:e2:85:3a:ce:4b:58:04:00:71:c7:3d:01:42:
         b7:d1:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org