Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3730303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3730303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          6NYn1TZm6oCVtpDPip1LuYK2SJyJ2XxJ/iy+jXn5GHQ=
Subject key identifier:   77:02:DF:C1:36:55:BE:61:72:30:68:8A:7A:79:95:06:A1:FC:AE:04
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       71A8227F719686ED5D81A256A7612B50AA53E55C
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3730303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 05 Mar 2024 18:02:23 +0000
ROA not before:           Tue 05 Mar 2024 17:57:23 +0000
ROA not after:            Tue 04 Mar 2025 18:02:23 +0000
asID:                     266894
IP address blocks:        2803:56a0:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a8:22:7f:71:96:86:ed:5d:81:a2:56:a7:61:2b:50:aa:53:e5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Mar  5 17:57:23 2024 GMT
            Not After : Mar  4 18:02:23 2025 GMT
        Subject: CN=7702DFC13655BE617230688A7A799506A1FCAE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:be:8c:a5:73:70:f1:eb:82:c5:2c:cb:e7:
                    54:e4:db:d2:52:cb:63:0d:11:be:1a:0a:80:3d:11:
                    6c:4a:48:18:67:0d:df:b6:db:16:a7:c2:ae:89:c9:
                    61:05:0a:0a:a6:3d:35:da:b5:1f:38:1a:be:ef:58:
                    19:fe:83:10:d8:8f:01:15:24:21:d5:ab:3e:03:0c:
                    ab:17:23:92:0e:3a:5f:a0:0b:aa:47:a1:f0:f8:59:
                    d6:a9:55:d4:57:f4:37:e0:ab:92:bf:09:82:0d:74:
                    8a:54:7a:9e:fc:82:68:55:59:9a:34:f1:5d:5a:f7:
                    3e:81:18:35:09:82:8f:29:b2:2e:70:3b:7e:f0:83:
                    00:5f:e1:a0:7f:4e:72:1e:8b:7e:23:bc:b9:04:c5:
                    33:c4:59:de:80:f8:9c:50:a8:35:f8:05:25:44:df:
                    70:2a:ba:f5:31:af:ba:f6:ad:b4:22:ec:2d:c6:d7:
                    5b:cf:46:2f:38:19:cc:e4:f4:64:6e:3a:12:00:2b:
                    e4:25:be:c7:5e:20:95:a1:a5:0b:0e:25:8e:67:c3:
                    db:ff:9e:09:6b:66:61:c2:a4:c3:0c:07:50:04:96:
                    48:48:20:c9:94:96:26:7b:96:d5:8d:1d:50:78:db:
                    b9:15:ac:33:43:6d:a6:cd:8f:97:9f:ab:a0:e7:79:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:02:DF:C1:36:55:BE:61:72:30:68:8A:7A:79:95:06:A1:FC:AE:04
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3730303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:25:40:67:b5:92:1d:3a:b0:0b:39:3b:bf:5c:81:1f:62:59:
         48:2f:96:a1:2a:29:f1:e8:ec:b0:36:12:61:33:ed:d5:c9:64:
         e4:b3:5c:09:db:14:6b:1c:1d:9a:9a:c5:4e:65:26:7d:c5:2d:
         8b:38:95:88:15:f8:83:ac:07:78:a3:a6:89:48:42:84:7b:b9:
         67:af:d8:52:30:28:c7:21:1f:b2:1e:2e:cc:a2:d1:2f:61:88:
         ea:a9:89:26:78:97:0f:a2:55:e4:ec:ec:87:d1:83:e0:5b:44:
         13:53:dc:cd:94:ba:81:3d:d0:92:a8:05:03:e4:e4:b0:31:cd:
         a0:86:a0:cc:60:a2:78:52:b0:83:5f:ca:f0:df:ec:ff:f6:30:
         e1:cf:77:73:d3:f3:10:40:9f:60:68:3e:fb:46:d5:46:69:7c:
         15:bb:bd:64:ef:af:54:6f:10:98:a7:05:ea:ce:58:70:94:8a:
         9d:6c:ff:78:d8:03:a6:99:cb:f6:0b:a7:3c:8e:99:f8:84:51:
         8d:f3:78:3c:fe:19:b7:32:90:87:2f:af:76:73:ba:74:f4:fd:
         f3:6a:cf:f9:1c:25:2e:f4:e3:5d:a0:8c:6d:ba:dc:8e:19:27:
         5d:5e:1f:f3:56:58:85:fd:fa:09:39:98:99:1b:c1:6a:1c:1c:
         3f:f1:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org