Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a6330303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a6330303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          J9gqT9IfzSgiKb0kj3G9HqyphbcTTN5wuAADvcyObeI=
Subject key identifier:   8C:22:71:C7:00:C1:59:0C:78:10:AE:A4:C4:76:F9:E5:44:88:F7:57
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       52A1A4A0D4822B82A2A3B5FC1AF418F92A179E92
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a6330303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 05 Mar 2024 18:02:22 +0000
ROA not before:           Tue 05 Mar 2024 17:57:22 +0000
ROA not after:            Tue 04 Mar 2025 18:02:22 +0000
asID:                     266894
IP address blocks:        2803:56a0:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a1:a4:a0:d4:82:2b:82:a2:a3:b5:fc:1a:f4:18:f9:2a:17:9e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Mar  5 17:57:22 2024 GMT
            Not After : Mar  4 18:02:22 2025 GMT
        Subject: CN=8C2271C700C1590C7810AEA4C476F9E54488F757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:30:4f:c2:6b:b5:ed:77:3e:a5:7e:f2:4c:
                    98:1d:b6:bb:55:b1:8c:94:4d:ef:07:aa:cd:0b:7d:
                    09:86:74:b6:e2:a3:f0:89:72:b5:ea:e2:ae:0f:30:
                    23:b3:1f:8e:24:6c:da:a8:4d:52:b5:52:ca:e1:ce:
                    f2:bf:bc:1c:7d:9c:fe:a1:78:7c:69:00:8f:34:83:
                    f2:a7:af:7c:b0:e4:2b:32:3b:c6:d9:0f:e3:bb:32:
                    78:85:2a:32:a2:93:2c:9a:5f:9e:8d:9b:d8:e5:28:
                    b9:ce:2b:c5:6f:97:c4:53:5a:47:7a:4b:4e:1b:fc:
                    1d:b6:98:b3:63:7c:31:a2:58:a9:e4:5e:55:19:59:
                    fa:9b:a6:ca:8f:53:a2:cd:ce:61:a0:1d:94:c6:75:
                    81:77:42:9c:b1:86:22:2e:e0:17:2e:87:55:ee:f5:
                    02:fa:99:36:2f:24:6a:ea:99:03:58:a6:ee:4d:2b:
                    f5:00:b2:db:4b:56:13:37:91:65:2a:04:5f:cd:5b:
                    b0:39:42:d3:66:5f:7e:73:f2:34:fc:a3:4c:7c:f5:
                    fd:ba:1b:a3:b0:e3:0c:01:73:ce:97:59:d2:0b:78:
                    dd:70:1f:78:00:1f:1a:f7:09:b5:de:33:bb:0c:0a:
                    97:53:9c:2f:d9:38:9d:2e:41:92:85:7e:4e:08:3c:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:22:71:C7:00:C1:59:0C:78:10:AE:A4:C4:76:F9:E5:44:88:F7:57
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a6330303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:54:d9:9e:97:03:3b:ed:07:f2:b2:a0:35:30:df:bc:5e:
         20:15:1d:e0:83:95:92:33:99:00:50:9e:ad:df:e3:77:c9:be:
         bf:b0:63:4f:6b:72:03:85:81:46:0e:53:24:74:b1:a7:d1:91:
         2b:5d:d9:1f:4a:d7:01:6e:31:de:5f:91:87:fe:da:8c:05:e9:
         0c:39:11:54:a6:34:83:b2:69:4b:0e:33:a3:7a:49:89:4d:21:
         3c:09:3d:e6:a9:80:f1:c7:d3:07:b1:98:96:dd:40:d8:fe:3f:
         f5:24:6d:dd:1a:18:42:09:5f:2e:cd:1e:e4:1e:04:5e:73:d4:
         18:a5:f4:64:88:2c:da:ca:52:80:21:c9:d2:92:40:12:60:e3:
         e4:fb:c0:8f:f0:fc:b9:9a:6d:ef:39:03:33:ed:82:fa:3c:b3:
         92:53:04:eb:36:02:f6:b4:fc:b2:04:30:a9:44:94:f4:44:e1:
         0c:6f:19:f5:bc:46:bc:76:ee:11:66:00:3b:34:a0:d9:d1:f0:
         e5:9a:60:d4:60:1f:d1:f4:86:35:a6:52:f3:52:fb:32:47:2e:
         25:e1:7a:29:c4:2a:7c:a1:8c:6b:f8:e5:b7:55:fe:36:27:93:
         1d:c1:33:e1:a4:98:5c:9d:54:60:80:7a:ca:45:1f:61:50:1d:
         dd:e7:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org