Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D83806BD0C1B6471A5F692F7F38EB8FB7F9D3008953826DCE5AA6A992912ADA/0/323830333a333239303a3a2f33322d3332203d3e20323732383637.roa
File:                     323830333a333239303a3a2f33322d3332203d3e20323732383637.roa (raw, json)
Hash identifier:          CdTKwBVezW5zqcAi1+HbWzqiVCuCidEPTGSv2kQ4i+Y=
Subject key identifier:   89:4C:27:2F:57:F8:A4:1F:5E:0E:72:A1:24:B1:7A:EE:EB:D3:E0:05
Certificate issuer:       /CN=D1F1C092C1686A79D018B5632C4640D347B6BEBC
Certificate serial:       1ABE9160E7E18FDA966655E52493C74F21198919
Authority key identifier: D1:F1:C0:92:C1:68:6A:79:D0:18:B5:63:2C:46:40:D3:47:B6:BE:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1F1C092C1686A79D018B5632C4640D347B6BEBC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D83806BD0C1B6471A5F692F7F38EB8FB7F9D3008953826DCE5AA6A992912ADA/0/323830333a333239303a3a2f33322d3332203d3e20323732383637.roa
Signing time:             Tue 05 Mar 2024 17:51:42 +0000
ROA not before:           Tue 05 Mar 2024 17:46:42 +0000
ROA not after:            Tue 04 Mar 2025 17:51:42 +0000
asID:                     272867
IP address blocks:        2803:3290::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D83806BD0C1B6471A5F692F7F38EB8FB7F9D3008953826DCE5AA6A992912ADA/0/D1F1C092C1686A79D018B5632C4640D347B6BEBC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D83806BD0C1B6471A5F692F7F38EB8FB7F9D3008953826DCE5AA6A992912ADA/0/D1F1C092C1686A79D018B5632C4640D347B6BEBC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1F1C092C1686A79D018B5632C4640D347B6BEBC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:be:91:60:e7:e1:8f:da:96:66:55:e5:24:93:c7:4f:21:19:89:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F1C092C1686A79D018B5632C4640D347B6BEBC
        Validity
            Not Before: Mar  5 17:46:42 2024 GMT
            Not After : Mar  4 17:51:42 2025 GMT
        Subject: CN=894C272F57F8A41F5E0E72A124B17AEEEBD3E005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f7:97:ba:32:e4:38:85:cb:dd:63:dd:0f:6c:
                    28:2b:ae:a2:1b:a0:18:12:34:dc:88:dd:d1:f5:a4:
                    96:25:6d:f1:51:4f:97:60:06:89:80:16:51:a9:56:
                    25:9f:94:4f:73:63:31:d1:b9:cd:ed:63:5c:df:91:
                    0c:92:5e:df:cd:99:70:16:ed:40:70:2f:80:14:dc:
                    5d:4b:cc:52:ae:e5:2f:16:c4:d6:c0:88:2c:b9:a7:
                    59:40:18:4c:3b:f4:5f:d8:9c:71:2c:e4:ee:96:7a:
                    01:ee:5a:3c:b4:85:03:1b:1e:df:41:ef:6f:77:66:
                    27:f6:5b:89:de:4c:74:17:65:62:43:c9:c3:3f:c7:
                    dd:3f:da:d4:33:07:94:02:bb:fb:4b:1b:c2:01:dc:
                    a7:8a:52:57:2d:4a:aa:36:eb:5d:4c:f4:42:e9:50:
                    b9:d2:8b:69:8c:a2:bc:65:12:1c:14:84:5d:4a:a3:
                    70:dc:ac:95:83:7a:26:52:7e:75:eb:53:24:ae:93:
                    2c:bf:d3:87:09:3f:e0:2c:8f:c5:1a:16:a3:d9:33:
                    73:e7:85:fb:25:ad:7e:a1:19:1a:fb:0e:2a:a3:dc:
                    38:e3:cb:f6:db:9f:3c:61:b4:2d:f4:58:40:e8:dd:
                    4e:e6:ed:dd:ed:9f:c5:3c:a6:30:1b:64:0d:df:87:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4C:27:2F:57:F8:A4:1F:5E:0E:72:A1:24:B1:7A:EE:EB:D3:E0:05
            X509v3 Authority Key Identifier:
                keyid:D1:F1:C0:92:C1:68:6A:79:D0:18:B5:63:2C:46:40:D3:47:B6:BE:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D83806BD0C1B6471A5F692F7F38EB8FB7F9D3008953826DCE5AA6A992912ADA/0/D1F1C092C1686A79D018B5632C4640D347B6BEBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1F1C092C1686A79D018B5632C4640D347B6BEBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D83806BD0C1B6471A5F692F7F38EB8FB7F9D3008953826DCE5AA6A992912ADA/0/323830333a333239303a3a2f33322d3332203d3e20323732383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3290::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:20:b5:01:37:97:f9:1d:d3:09:45:9c:b3:a1:b4:29:d2:1f:
         55:f9:06:b7:e3:28:a1:7e:df:e1:62:f0:18:3a:a6:28:8e:ab:
         5e:25:ca:61:e5:03:66:d9:24:d2:cd:0d:ae:2b:b9:7d:28:91:
         e9:26:ec:c3:79:47:25:7d:9f:7b:61:ef:f7:4a:a9:85:56:47:
         21:8f:99:97:1c:2c:9d:79:fc:31:d1:03:0d:9d:b0:e3:54:1b:
         87:aa:97:4d:4b:1c:52:f2:dc:eb:ec:76:09:03:ca:16:24:87:
         4b:31:f4:d0:87:15:56:7c:57:f1:87:5a:34:20:c0:f1:4e:b2:
         e8:14:3f:c5:51:99:60:be:67:81:3c:72:16:12:0f:4f:48:09:
         f3:dd:63:11:a7:c3:64:9d:20:7b:63:ba:aa:6d:aa:30:1b:ed:
         47:ba:8c:49:74:08:7e:4b:d2:fb:1d:e0:ba:aa:28:90:3f:f7:
         2e:53:09:3b:3d:a0:4b:ce:34:de:f6:72:c8:1e:36:07:ea:d4:
         c0:64:83:41:7c:ff:44:b3:40:17:40:17:a5:49:3a:cc:df:2b:
         d4:50:a5:96:9a:36:d4:b4:e0:9a:7d:b0:cc:80:11:7e:fe:2d:
         10:b5:d2:5c:d7:f9:d8:ac:52:b1:76:ac:d9:d2:e4:dc:77:88:
         a9:87:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:51:44 2024 by rpki-client on console-ams.rpki-client.org