Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/323830333a363332303a3a2f33322d3438203d3e20323634383235.roa
File:                     323830333a363332303a3a2f33322d3438203d3e20323634383235.roa (raw, json)
Hash identifier:          DQjVuFfui9O2LLu5T8ICYWw7Vp10rwcjbP22lhOMw38=
Subject key identifier:   38:94:84:0C:93:13:14:BC:6B:ED:C7:30:71:E2:77:0A:1A:7F:C4:16
Certificate issuer:       /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial:       3D99F61692F3150957905A89AC5A7151EE200B35
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/323830333a363332303a3a2f33322d3438203d3e20323634383235.roa
Signing time:             Tue 05 Mar 2024 18:13:39 +0000
ROA not before:           Tue 05 Mar 2024 18:08:39 +0000
ROA not after:            Tue 04 Mar 2025 18:13:39 +0000
asID:                     264825
IP address blocks:        2803:6320::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:99:f6:16:92:f3:15:09:57:90:5a:89:ac:5a:71:51:ee:20:0b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
        Validity
            Not Before: Mar  5 18:08:39 2024 GMT
            Not After : Mar  4 18:13:39 2025 GMT
        Subject: CN=3894840C931314BC6BEDC73071E2770A1A7FC416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:63:af:f4:39:cd:d1:a3:31:36:64:ee:5d:
                    23:d5:c0:58:93:da:34:cd:36:d9:52:7a:25:84:0d:
                    6a:02:68:32:c4:18:79:01:d9:68:6b:80:a3:17:01:
                    c5:9a:86:81:87:6d:96:9f:8a:b6:3b:b4:dc:95:76:
                    3c:f7:fd:a8:15:41:2a:1d:51:c5:25:87:08:ac:51:
                    3d:7e:65:dd:15:e6:58:4b:28:68:39:61:b0:6b:34:
                    45:7f:75:05:44:53:5c:7f:ff:50:3a:33:5f:c4:3a:
                    d5:12:de:98:bb:74:95:02:80:6f:b9:a0:c4:59:fb:
                    78:67:99:32:d2:ef:00:79:e0:43:db:21:ae:fb:fd:
                    18:2e:01:3d:38:50:91:23:e6:66:ef:c9:45:b6:c8:
                    a1:43:ac:c1:92:dc:ee:9d:60:fe:79:83:7b:ce:dc:
                    bf:9a:64:23:15:57:9b:ad:5b:81:7c:7d:c4:c7:79:
                    bc:e9:b4:f3:27:84:b6:ba:1c:2f:c4:f3:53:fd:d9:
                    a2:7e:1e:a8:9c:f1:0e:e4:12:fe:23:ab:7d:77:1d:
                    cd:14:32:56:01:d7:2f:80:04:52:4a:b1:30:02:07:
                    40:fe:b8:73:e5:3d:aa:51:25:35:f8:45:41:f7:0d:
                    bc:70:a4:02:91:1a:c5:65:4a:45:66:4e:ad:1d:95:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:94:84:0C:93:13:14:BC:6B:ED:C7:30:71:E2:77:0A:1A:7F:C4:16
            X509v3 Authority Key Identifier:
                keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/323830333a363332303a3a2f33322d3438203d3e20323634383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6320::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:62:44:1d:d5:9d:bc:3b:4e:e5:51:b0:b5:c9:36:6c:e6:
         49:9e:22:c9:a8:c4:c6:69:57:9e:45:1c:aa:eb:70:39:1b:2f:
         42:20:93:f7:6a:81:b9:0c:9b:3a:0e:ce:bf:d9:82:1f:9f:b5:
         6c:e7:a3:b5:a6:6f:d8:11:38:55:c0:44:a6:9b:bc:92:8a:25:
         31:2b:76:37:cf:89:7f:ea:f8:68:ca:23:a3:d1:d5:b6:21:2d:
         b4:d1:4a:ba:62:36:d9:c7:b9:5e:a5:c0:be:5f:b3:48:c1:ba:
         a8:6d:25:19:3d:91:f7:16:9f:4a:0b:e6:f5:27:66:89:53:fe:
         03:35:c9:67:8f:6a:b4:b1:2f:cd:bc:c2:05:5d:41:79:6a:6c:
         a4:80:02:22:29:7a:d7:5e:b9:26:5f:4e:64:7c:ab:8b:97:54:
         60:93:65:a1:95:c1:c9:50:48:5c:a6:48:59:d4:3a:e2:42:0b:
         6c:d0:67:0e:b5:ed:5d:c1:29:87:2b:cd:34:d4:00:ea:7e:7d:
         6d:e2:c7:71:c2:6a:4a:29:a4:e9:6d:ab:99:d4:c6:50:2a:8f:
         99:43:87:44:46:9d:47:fc:5b:8f:18:0c:89:ab:f8:61:f1:3a:
         0b:70:a8:b6:f1:a0:58:ca:6b:3e:ed:56:34:f0:a7:a0:a7:34:
         e2:7a:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org