Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f33322d3438203d3e20323635383535.roa
File:                     323830333a646132303a3a2f33322d3438203d3e20323635383535.roa (raw, json)
Hash identifier:          34QPfniSqHLE9iZFp/Aqblc+nKCyOrM4RDTaszh0/Eg=
Subject key identifier:   66:4D:5F:B4:CA:FA:61:95:74:4A:60:0D:65:C4:9E:DD:79:44:C0:BB
Certificate issuer:       /CN=F341739AE08457A031B734E9D432A5F3E22893FE
Certificate serial:       1F4D635B44749AF05C5A92E8FD47716FC8DC6E5F
Authority key identifier: F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f33322d3438203d3e20323635383535.roa
Signing time:             Tue 05 Mar 2024 17:54:55 +0000
ROA not before:           Tue 05 Mar 2024 17:49:55 +0000
ROA not after:            Tue 04 Mar 2025 17:54:55 +0000
asID:                     265855
IP address blocks:        2803:da20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4d:63:5b:44:74:9a:f0:5c:5a:92:e8:fd:47:71:6f:c8:dc:6e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F341739AE08457A031B734E9D432A5F3E22893FE
        Validity
            Not Before: Mar  5 17:49:55 2024 GMT
            Not After : Mar  4 17:54:55 2025 GMT
        Subject: CN=664D5FB4CAFA6195744A600D65C49EDD7944C0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:c3:75:fa:0a:80:15:36:03:48:77:a5:c5:
                    d5:1e:3e:8c:8d:e2:73:62:ba:ae:d0:73:b1:4d:f6:
                    84:2d:3d:a3:f2:c3:93:74:7f:ac:58:f4:4d:4b:f5:
                    1c:5a:8b:71:de:98:d2:71:40:76:dc:ae:21:db:22:
                    10:ed:5f:ff:c4:cd:6b:ae:70:f0:e4:6f:e0:b7:67:
                    96:46:f3:f9:e2:57:a2:70:31:ac:7a:d8:6c:2c:81:
                    8c:b9:77:5b:5e:8b:5b:1d:b3:39:18:f4:3c:bf:6b:
                    c9:06:8f:a3:6b:34:33:8f:f4:5b:0e:6e:91:ae:7e:
                    1f:7e:39:f7:e9:c3:0d:ca:61:15:4e:77:33:fd:07:
                    69:dd:84:2e:5d:03:59:87:8c:e2:0f:8c:7d:38:46:
                    e7:9a:da:dc:ca:26:9c:33:c0:3e:21:a8:68:b4:06:
                    ce:e8:c5:a8:fb:f5:94:d4:cb:8a:35:ca:7d:7e:5f:
                    cb:15:b0:77:08:9a:63:f5:69:29:b7:79:e5:99:62:
                    7c:3a:c5:0e:20:a7:98:d6:4e:e1:be:f4:3d:44:9c:
                    38:e4:c8:19:26:c1:98:66:4e:75:25:08:d3:b3:f6:
                    f4:b5:ea:18:e7:93:55:21:47:8d:46:1e:e0:40:4e:
                    23:2f:ea:32:2d:34:6c:71:12:46:b9:fd:1a:b7:49:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:5F:B4:CA:FA:61:95:74:4A:60:0D:65:C4:9E:DD:79:44:C0:BB
            X509v3 Authority Key Identifier:
                keyid:F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/323830333a646132303a3a2f33322d3438203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da20::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:c8:10:22:58:69:60:37:33:c4:a0:35:09:f9:16:2a:0c:65:
         b6:c6:aa:b4:8a:f0:cf:84:88:a6:35:49:9c:da:be:35:be:d8:
         f2:c4:54:39:7a:72:38:cf:d1:36:ea:e9:7d:60:ce:09:f5:5c:
         91:fe:9d:ef:35:95:62:36:8b:71:05:09:40:0d:b1:de:a5:32:
         19:32:f6:5e:8b:2d:d8:a3:08:60:3f:22:93:05:3a:16:68:f7:
         07:cb:eb:62:43:04:c5:3d:1d:9e:50:13:90:de:a3:94:17:1c:
         d3:b5:fa:a4:fa:45:07:3a:bc:49:03:6b:ff:a9:00:3e:4c:44:
         f1:84:50:8b:27:73:c9:85:d4:bf:0f:b3:10:82:2e:95:e7:3b:
         31:c2:9a:d4:26:83:b0:b5:94:ce:43:f8:91:dc:b7:02:19:8a:
         e5:bb:f0:ba:c0:3a:64:06:0e:cc:8c:4f:20:87:c5:7b:ec:89:
         62:c5:4d:7a:b7:d4:e6:be:79:94:81:b7:b5:88:91:d5:3f:7b:
         11:8f:6f:02:48:7e:40:10:c7:de:84:0c:37:f5:20:c1:4b:2a:
         c6:b5:56:7b:c2:3e:88:53:1b:ce:7f:ae:f0:5f:de:0a:a3:de:
         18:b0:12:7c:d0:9e:59:08:1e:c4:62:3a:aa:d4:43:c0:17:fe:
         87:50:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org