Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/323830333a363134303a3a2f33322d3332203d3e20323634363239.roa
File:                     323830333a363134303a3a2f33322d3332203d3e20323634363239.roa (raw, json)
Hash identifier:          0GhaKW0frRmsT0cOO9t6L9GTRtu6/nFK0DHYjEWYrRA=
Subject key identifier:   9F:8D:55:5C:09:53:C1:56:55:CF:0D:80:12:FD:37:4D:25:DA:1B:40
Certificate issuer:       /CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
Certificate serial:       274933BAA326176CF9B98D66DD8E1F466137BF54
Authority key identifier: 08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/323830333a363134303a3a2f33322d3332203d3e20323634363239.roa
Signing time:             Tue 05 Mar 2024 17:55:22 +0000
ROA not before:           Tue 05 Mar 2024 17:50:22 +0000
ROA not after:            Tue 04 Mar 2025 17:55:22 +0000
asID:                     264629
IP address blocks:        2803:6140::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:49:33:ba:a3:26:17:6c:f9:b9:8d:66:dd:8e:1f:46:61:37:bf:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
        Validity
            Not Before: Mar  5 17:50:22 2024 GMT
            Not After : Mar  4 17:55:22 2025 GMT
        Subject: CN=9F8D555C0953C15655CF0D8012FD374D25DA1B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:9e:d0:4a:b5:4a:1a:83:c2:0d:a3:d9:92:
                    74:30:94:17:5b:0a:10:0f:6e:29:53:e3:f1:b8:fc:
                    30:d5:d0:6d:ea:25:39:42:b7:83:a7:ba:5a:9c:db:
                    61:5a:c7:0b:c3:08:51:18:d9:e9:01:04:18:55:91:
                    3f:b9:15:47:0e:8d:23:69:29:54:19:d6:21:30:4b:
                    28:24:cb:b0:59:30:c5:4e:e7:e3:c8:ae:78:96:cb:
                    96:a9:d2:de:74:ba:5a:19:a9:55:51:cf:fb:05:dc:
                    40:f4:25:61:c5:ba:1e:af:3b:57:7c:81:d4:8b:e3:
                    0b:0f:9a:c1:ab:8e:8e:b4:99:88:4b:bd:bb:a7:47:
                    21:0b:cf:fe:55:e5:58:ac:80:d9:a2:e2:36:c3:c3:
                    f6:92:ee:1d:a7:74:e4:9d:10:b9:62:4b:ba:67:0f:
                    3e:a4:df:31:f3:3a:0f:3e:a7:43:d6:36:68:03:f5:
                    4c:01:64:0f:37:72:d4:2b:0f:67:31:cd:3f:a7:e3:
                    9d:d8:7c:c2:f6:0b:70:3a:06:cb:a0:17:3d:63:31:
                    04:aa:aa:d0:14:9f:52:f3:07:32:a7:fb:b2:50:b8:
                    66:5d:d8:f6:33:05:53:7b:ba:32:66:cb:b5:a3:27:
                    78:b4:67:fe:94:3f:4c:07:de:20:0d:f5:38:cb:d7:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8D:55:5C:09:53:C1:56:55:CF:0D:80:12:FD:37:4D:25:DA:1B:40
            X509v3 Authority Key Identifier:
                keyid:08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/323830333a363134303a3a2f33322d3332203d3e20323634363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6140::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:8e:21:c4:69:f4:e4:06:9a:93:e0:c5:8b:59:3f:ec:f7:98:
         06:ab:52:57:52:c8:dd:3e:c0:ed:59:28:a0:42:52:99:aa:f4:
         35:21:d4:cf:d0:04:0d:c9:11:95:48:b9:96:3e:49:53:e0:a9:
         bd:48:28:8d:17:83:24:73:7d:bb:51:34:1a:65:04:46:07:04:
         a7:5d:5d:b5:44:5b:76:f6:99:88:fc:c9:0c:6d:cc:8e:3d:4d:
         51:64:42:c6:c5:59:65:02:bc:cd:07:3f:61:3d:70:e4:78:4e:
         9c:7b:bd:34:fc:1c:1a:e6:74:2d:4a:8d:0f:1d:44:91:83:5c:
         9a:08:7f:3e:12:6a:59:7d:d1:a7:dc:ae:ed:54:6e:d6:0d:8c:
         4e:83:e7:f6:1f:50:87:46:f8:ce:be:0c:3a:94:c9:cb:8c:ce:
         a1:71:89:1e:de:e5:7e:7d:18:f6:84:9c:e5:8b:36:0c:41:a6:
         63:08:8c:1c:ff:4c:a0:a5:f0:13:e9:53:e2:de:f3:f0:fc:d5:
         e5:68:59:9d:dc:bb:8b:81:ac:fc:b2:5c:70:f8:31:c3:20:ba:
         5c:e9:66:32:8f:e2:4e:2e:c3:1c:1b:aa:97:b8:44:43:d9:3e:
         9a:2a:5d:b2:a3:5e:e4:28:ad:10:f3:78:66:5a:53:f1:7a:34:
         26:69:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:17 2024 by rpki-client on console-fra.rpki-client.org