Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3463393a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a3463393a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          i+L88ssVInDmMU4C44kPh1Xqjea8NK2M7wgxzjP/Ce4=
Subject key identifier:   10:0E:51:2A:EF:C6:E1:09:BD:EE:C5:F3:E3:4A:95:2A:8F:50:3B:95
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       6B01ADED964C76CCEE5B0362134129EB5F35B8A9
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3463393a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:03 +0000
ROA not before:           Mon 11 Mar 2024 19:05:03 +0000
ROA not after:            Mon 10 Mar 2025 19:10:03 +0000
asID:                     262182
IP address blocks:        2803:f00:4c9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:01:ad:ed:96:4c:76:cc:ee:5b:03:62:13:41:29:eb:5f:35:b8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:03 2024 GMT
            Not After : Mar 10 19:10:03 2025 GMT
        Subject: CN=100E512AEFC6E109BDEEC5F3E34A952A8F503B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:91:09:98:24:2f:2c:ab:c4:9d:c1:80:cd:
                    69:0d:e8:3a:de:98:e5:4c:3f:fb:93:fd:8c:d5:7a:
                    de:fc:6f:29:d3:56:60:ad:35:1a:f5:4e:03:b2:df:
                    d0:e2:fd:9a:9a:d3:10:78:49:b9:dc:da:85:5b:50:
                    86:87:d1:a3:56:bb:99:73:45:57:bd:5b:84:12:62:
                    bd:34:ad:e6:df:2c:88:1a:b1:24:86:1c:26:7c:85:
                    a3:ff:4b:2c:b7:70:8d:07:35:53:6a:0f:aa:ba:3b:
                    ed:31:4c:f4:f5:3e:a8:3d:ca:92:b7:04:5a:3a:e7:
                    70:7f:9e:d6:e5:9b:30:f6:ce:0f:2e:8b:5d:9b:42:
                    d4:1b:f4:95:62:af:5f:d8:11:a0:24:3a:a1:48:a2:
                    5f:e6:b9:34:69:5b:aa:ce:52:39:31:04:9a:32:32:
                    56:e5:db:c2:56:85:0d:b2:95:f5:d2:21:01:37:09:
                    85:f5:f1:a3:78:d5:11:49:05:23:21:90:c4:65:83:
                    a7:88:b5:9d:1f:99:ca:7a:48:80:5c:f7:f8:3e:b1:
                    07:de:fb:77:c7:c7:c2:5d:f9:e8:ff:f1:6e:9e:08:
                    53:ec:04:8b:27:a7:58:a9:12:53:d7:6e:47:22:06:
                    2e:4d:c2:b8:5f:7a:7e:c5:56:0f:bb:69:6c:c4:43:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0E:51:2A:EF:C6:E1:09:BD:EE:C5:F3:E3:4A:95:2A:8F:50:3B:95
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3463393a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:4c9::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:49:84:ff:7d:67:93:18:87:fb:b8:fc:c4:f3:c4:73:2f:
         02:d6:3a:9b:0b:ba:94:bf:b9:7f:21:f3:c2:cd:bb:a9:8d:54:
         c0:28:7f:af:0e:59:cb:83:0e:12:bb:ce:ea:e6:93:5e:1b:c6:
         ff:55:b8:4a:91:a7:99:25:3b:de:af:be:26:7d:8a:8c:96:9b:
         2c:34:97:99:70:16:b0:fb:ec:57:79:38:49:ae:62:6c:73:ee:
         7e:86:42:a0:a9:ba:5c:2d:15:56:a7:3e:1b:70:4a:e4:e9:76:
         1e:26:b9:96:00:49:f7:c5:d9:81:da:be:fb:08:c3:12:5f:28:
         1d:c0:c5:36:85:ba:94:67:d6:9b:ac:62:5c:81:5e:96:49:1d:
         22:4a:47:81:1e:b4:7a:4e:4e:47:e3:ba:6f:db:46:84:87:2f:
         3f:8c:c9:0a:72:20:20:f1:40:81:33:dd:1b:86:a2:90:ba:76:
         ec:2c:71:8e:47:54:b6:92:49:7f:9e:90:8a:08:d1:54:db:cd:
         82:ec:68:97:ba:ca:a6:64:6f:a4:9a:82:7e:10:b6:1a:ad:0b:
         a5:47:22:d4:68:a6:46:1e:2c:f4:e5:44:aa:76:39:7f:60:bc:
         0f:3d:b8:38:f9:a1:36:94:c7:10:93:41:d4:6c:4f:f7:e5:8f:
         ec:5b:01:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:48 2024 by rpki-client on console-ams.rpki-client.org