Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/323830333a636536303a3a2f33322d3634203d3e20323637393231.roa
File:                     323830333a636536303a3a2f33322d3634203d3e20323637393231.roa (raw, json)
Hash identifier:          +KjvEcmeVo+oVd1pDT2XU3TFzsHacw+F5qnBZRbOQcE=
Subject key identifier:   EB:1A:22:72:25:19:DC:4F:62:60:72:B5:01:71:7F:12:9E:A7:BE:9C
Certificate issuer:       /CN=D931FE44222442BBDEDD8D7CA42FDACF1AB78A94
Certificate serial:       219B06B0DD2D2456B8263863E821B51C0DE8B32D
Authority key identifier: D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/323830333a636536303a3a2f33322d3634203d3e20323637393231.roa
Signing time:             Tue 05 Mar 2024 18:03:28 +0000
ROA not before:           Tue 05 Mar 2024 17:58:28 +0000
ROA not after:            Tue 04 Mar 2025 18:03:28 +0000
asID:                     267921
IP address blocks:        2803:ce60::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9b:06:b0:dd:2d:24:56:b8:26:38:63:e8:21:b5:1c:0d:e8:b3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D931FE44222442BBDEDD8D7CA42FDACF1AB78A94
        Validity
            Not Before: Mar  5 17:58:28 2024 GMT
            Not After : Mar  4 18:03:28 2025 GMT
        Subject: CN=EB1A22722519DC4F626072B501717F129EA7BE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c4:56:14:c4:dd:94:cb:25:34:09:0a:c0:47:
                    c3:44:d3:da:88:57:90:52:23:33:8e:22:a5:83:d1:
                    10:c4:6c:74:38:5b:36:1f:40:e4:9a:e9:91:ad:c9:
                    ae:ed:33:8e:51:26:e1:42:e0:6a:f3:f5:4c:0a:ce:
                    23:8e:ed:68:03:2f:31:80:29:4d:a4:06:ee:06:cb:
                    33:7f:24:2b:7a:b1:89:ab:9a:66:39:9b:a5:c2:e8:
                    c4:3a:ae:55:b5:d2:5e:02:96:8c:69:4e:24:51:a7:
                    40:02:25:e6:bd:71:c4:e0:6f:b9:56:79:8a:74:80:
                    81:6a:2a:1b:62:b7:18:9a:87:38:39:9f:49:f0:3f:
                    95:24:14:26:46:6b:72:da:a3:90:2b:ab:42:a5:80:
                    b1:96:d4:f6:af:8b:5c:07:7f:72:7e:ef:09:99:eb:
                    6e:f5:09:55:fe:51:75:83:b1:74:01:ba:b3:ae:93:
                    75:95:8f:23:af:fb:a0:f2:75:4b:b2:ec:a1:33:cc:
                    fb:d7:53:db:07:0d:c5:20:1b:c4:41:ae:8c:e4:47:
                    fc:1d:9c:ff:8e:2a:25:51:69:be:f7:bb:3f:d1:7b:
                    f1:f1:10:f4:c8:b0:cb:9a:7a:06:fb:9c:1c:a3:9c:
                    ec:e8:71:ad:ee:66:54:b9:0d:a9:47:25:c4:8a:f4:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1A:22:72:25:19:DC:4F:62:60:72:B5:01:71:7F:12:9E:A7:BE:9C
            X509v3 Authority Key Identifier:
                keyid:D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/323830333a636536303a3a2f33322d3634203d3e20323637393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ce60::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:47:c6:dc:97:4a:5e:01:7f:7e:db:56:3d:58:57:dd:4f:
         a5:67:a5:00:bd:5d:0c:aa:63:9b:ab:be:b8:be:96:e0:2d:7d:
         53:32:65:a2:34:60:07:35:7f:aa:e5:7d:18:a4:40:67:03:3c:
         9a:83:da:1b:f6:9c:0e:cb:00:fd:df:ff:ef:6a:bd:7d:89:fe:
         91:9f:3e:bc:ed:85:6b:a5:fe:22:b8:e5:d6:f8:85:2d:5f:75:
         78:c6:da:0e:10:24:64:49:5b:e9:75:43:a4:e6:97:a9:18:2c:
         f9:90:e4:c8:36:1b:f7:c2:e8:19:40:b8:ec:ed:7d:fb:6f:de:
         81:aa:26:d4:bb:cc:3a:88:b1:1b:08:b9:2b:35:6b:c2:2c:41:
         38:cc:56:7b:cb:7c:1a:ad:f2:fd:6a:47:4f:6e:9a:cd:4f:c0:
         65:67:2d:4e:d9:66:6c:3b:0e:80:2e:d3:7d:c6:68:a8:34:f4:
         ab:26:04:a0:7f:f3:e7:37:b4:15:14:34:f6:4d:bf:4d:c3:e2:
         cc:b8:f6:9b:e2:c3:e9:aa:3a:5a:42:77:df:05:2a:18:97:0f:
         40:85:5c:48:2b:7a:de:2f:f2:ee:43:e2:d5:08:cd:a7:4f:c7:
         8d:20:ff:97:83:8e:d5:53:31:76:37:25:42:79:53:c6:fa:74:
         40:92:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org