Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa
File:                     323830333a353838303a3a2f33322d3634203d3e203532343933.roa (raw, json)
Hash identifier:          buTFNtw+sbjyI0LoE+WjUdLpfWjHMOosFr6qSUasj/Q=
Subject key identifier:   1D:B2:74:D1:09:53:DB:1D:EF:C2:D9:CE:DE:8C:CB:4E:0F:6B:CD:DC
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       728EBD00E5C643FFBEE41CD0AFAD241B59AE6513
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa
Signing time:             Tue 05 Mar 2024 17:41:34 +0000
ROA not before:           Tue 05 Mar 2024 17:36:34 +0000
ROA not after:            Tue 04 Mar 2025 17:41:34 +0000
asID:                     52493
IP address blocks:        2803:5880::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8e:bd:00:e5:c6:43:ff:be:e4:1c:d0:af:ad:24:1b:59:ae:65:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Mar  5 17:36:34 2024 GMT
            Not After : Mar  4 17:41:34 2025 GMT
        Subject: CN=1DB274D10953DB1DEFC2D9CEDE8CCB4E0F6BCDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:94:22:f4:22:4b:49:82:67:60:e7:f5:c0:
                    c1:fd:15:9e:ce:c6:60:14:3a:cb:8b:d2:f0:9a:b1:
                    61:0a:34:ce:7c:5d:45:26:c9:f8:ce:a8:c8:8b:fb:
                    71:02:43:72:83:8b:55:fa:b9:08:08:5b:59:4f:53:
                    68:42:d9:3a:f5:93:ca:c6:55:38:b4:d4:1a:f6:31:
                    b5:10:df:e0:0a:28:8f:9f:12:9d:15:ae:82:fd:48:
                    ec:cf:eb:0d:86:60:31:5f:73:0a:bb:e1:82:59:7d:
                    15:f2:4e:b4:21:04:f3:fa:e9:82:1e:34:13:3b:00:
                    e8:49:38:25:51:41:ea:60:0d:6c:df:13:9c:c8:b3:
                    5f:03:18:ff:cd:91:d9:55:4a:4c:22:aa:2f:b4:bb:
                    5b:93:a9:ef:de:e7:57:8a:d2:1a:c2:1c:28:a9:3a:
                    82:ba:39:09:12:ef:0c:7e:36:e9:5f:9d:54:01:c4:
                    d6:37:9f:b6:f9:76:92:b5:2e:3f:ea:df:2d:07:91:
                    56:45:6b:c8:c7:f8:64:ab:5e:3a:ef:a5:41:fa:ae:
                    7a:b9:6d:a0:e9:b5:a8:6f:e1:b8:aa:22:b2:2e:e4:
                    7b:e7:19:07:31:f0:1d:12:4a:d5:3c:62:1f:c2:43:
                    38:fe:c1:e5:a4:e7:40:03:53:88:cf:f5:ff:d6:9a:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:74:D1:09:53:DB:1D:EF:C2:D9:CE:DE:8C:CB:4E:0F:6B:CD:DC
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/323830333a353838303a3a2f33322d3634203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5880::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:e9:d1:cf:e7:df:ff:0a:1c:6d:e7:38:8d:67:af:d3:4d:0a:
         a0:79:d8:e0:08:be:d0:bc:5d:6c:6c:c7:45:7c:22:d2:3f:4e:
         87:f0:6a:dc:75:be:dd:73:71:7d:34:55:f6:ba:ff:14:67:bf:
         50:45:df:c5:7b:2f:e3:03:31:44:5f:49:89:37:3e:3d:4a:ae:
         b8:88:5b:95:3d:df:33:74:1c:b5:13:ae:70:0d:fb:84:10:ab:
         53:bc:0b:fe:19:24:aa:2e:9c:27:b0:a9:e5:c7:07:62:1d:fe:
         03:4a:42:03:49:88:bc:0e:f2:e5:0f:c4:35:e7:ff:9d:21:02:
         ed:58:40:45:f3:11:39:7f:39:d6:73:1b:bb:15:9e:28:aa:4c:
         f1:bf:8a:c6:6a:ab:19:f2:24:a6:a5:f1:64:d8:c6:68:22:59:
         84:29:4d:53:76:76:81:a8:09:2c:58:17:12:57:f0:c1:0c:b1:
         ab:c0:77:8f:78:d5:49:c7:c4:39:ea:1c:53:86:78:c6:34:62:
         bb:22:27:00:9f:a0:c0:1f:2e:c9:7f:61:8d:ec:f6:82:42:a5:
         0d:9a:1b:ab:29:d8:4b:c8:7b:9e:34:c6:bd:b3:45:3a:02:cf:
         8d:84:2e:c4:b1:24:5e:29:f2:f0:e7:5e:f0:f7:64:58:50:06:
         d3:23:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org