Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/630FEAD5E386E2CEC28103B722E9EFA87B56AEA4DE834158C91B60EAAF7F89FD/0/323830333a383635303a3a2f33322d3332203d3e20323733313933.roa
File:                     323830333a383635303a3a2f33322d3332203d3e20323733313933.roa (raw, json)
Hash identifier:          V3Lp5Fw//cCAUHLE1g2LNrquL5YjrB38qUgmiqhMCcU=
Subject key identifier:   F7:0D:6A:1C:FE:17:8B:C5:98:17:BA:E6:9D:3F:43:AD:A4:AF:4E:5F
Certificate issuer:       /CN=D863929E48F130AB859767369FA3A790D92C2C7D
Certificate serial:       20D160F7AFA046ADBED672F59FEDF6E5930F0BFB
Authority key identifier: D8:63:92:9E:48:F1:30:AB:85:97:67:36:9F:A3:A7:90:D9:2C:2C:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D863929E48F130AB859767369FA3A790D92C2C7D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/630FEAD5E386E2CEC28103B722E9EFA87B56AEA4DE834158C91B60EAAF7F89FD/0/323830333a383635303a3a2f33322d3332203d3e20323733313933.roa
Signing time:             Fri 19 Jul 2024 18:40:00 +0000
ROA not before:           Fri 19 Jul 2024 18:35:00 +0000
ROA not after:            Fri 18 Jul 2025 18:40:00 +0000
asID:                     273193
IP address blocks:        2803:8650::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/630FEAD5E386E2CEC28103B722E9EFA87B56AEA4DE834158C91B60EAAF7F89FD/0/D863929E48F130AB859767369FA3A790D92C2C7D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/630FEAD5E386E2CEC28103B722E9EFA87B56AEA4DE834158C91B60EAAF7F89FD/0/D863929E48F130AB859767369FA3A790D92C2C7D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D863929E48F130AB859767369FA3A790D92C2C7D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d1:60:f7:af:a0:46:ad:be:d6:72:f5:9f:ed:f6:e5:93:0f:0b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D863929E48F130AB859767369FA3A790D92C2C7D
        Validity
            Not Before: Jul 19 18:35:00 2024 GMT
            Not After : Jul 18 18:40:00 2025 GMT
        Subject: CN=F70D6A1CFE178BC59817BAE69D3F43ADA4AF4E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:41:27:04:ac:1c:64:79:a6:b1:88:55:95:
                    72:db:d0:50:86:5b:0e:9b:f9:ba:a8:f8:9a:1c:50:
                    b8:6e:b2:d8:c8:d2:36:8c:0f:6f:8f:87:36:4c:a0:
                    75:fc:cd:5a:d6:ae:78:08:4a:fc:f7:07:0f:26:e6:
                    3a:e6:9e:b5:85:34:55:60:bb:aa:8c:3b:79:26:db:
                    44:75:b5:10:d4:35:49:bd:d8:76:6e:62:07:bb:a3:
                    22:c8:71:9e:c8:ba:b1:7b:a5:82:35:9d:6b:26:43:
                    8d:7d:8b:02:75:82:1f:a7:e0:61:51:7c:6e:52:67:
                    ec:43:fe:41:86:41:af:f5:e9:01:7c:d6:a1:c5:7a:
                    52:3f:d3:bd:15:26:44:c7:98:43:c8:ad:9c:b0:6a:
                    43:44:05:5e:55:0b:09:c3:fb:b7:0c:3f:26:3f:18:
                    77:af:ab:16:a1:0b:8a:a1:12:6e:bd:13:cc:25:f3:
                    aa:ee:25:fe:55:37:fc:06:d4:09:4e:55:4f:96:b7:
                    f9:75:44:b7:31:2a:f2:8f:15:29:aa:5f:90:35:57:
                    9c:a6:05:0b:fb:fd:ca:bc:eb:72:d2:c9:fb:fe:c9:
                    cf:3d:21:2a:24:bb:b6:3c:8d:9a:95:93:3d:ba:98:
                    61:85:1d:d4:7e:e6:3f:b1:fa:31:61:9b:2f:b6:4c:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:6A:1C:FE:17:8B:C5:98:17:BA:E6:9D:3F:43:AD:A4:AF:4E:5F
            X509v3 Authority Key Identifier:
                keyid:D8:63:92:9E:48:F1:30:AB:85:97:67:36:9F:A3:A7:90:D9:2C:2C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/630FEAD5E386E2CEC28103B722E9EFA87B56AEA4DE834158C91B60EAAF7F89FD/0/D863929E48F130AB859767369FA3A790D92C2C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D863929E48F130AB859767369FA3A790D92C2C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/630FEAD5E386E2CEC28103B722E9EFA87B56AEA4DE834158C91B60EAAF7F89FD/0/323830333a383635303a3a2f33322d3332203d3e20323733313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8650::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:32:81:b5:32:50:e9:1d:78:59:be:b8:f2:93:20:53:42:d6:
         d7:2e:91:61:b5:56:03:b8:11:0b:eb:15:54:2d:d9:f4:45:22:
         2f:e9:e2:bc:ed:96:d8:7d:2d:0a:7f:4f:ea:d2:24:79:0c:37:
         67:67:29:ac:90:1f:90:cb:c3:f6:d1:c9:b4:df:8a:ad:93:26:
         37:87:f2:38:ca:15:34:cd:17:59:31:4a:d6:18:fe:64:81:cc:
         ba:7d:d0:ff:ef:0e:31:58:d9:41:95:01:0d:86:c1:36:d1:02:
         3f:89:58:64:82:b5:01:5f:bb:6b:db:b6:e8:c4:bb:46:7d:cd:
         71:8a:86:f4:f9:09:ee:9d:28:23:81:d4:08:d9:3a:38:d7:e6:
         ba:b1:dc:7e:f6:3e:8a:be:f0:76:1f:d9:11:21:df:2f:90:e2:
         e4:7b:85:77:52:c3:6b:07:37:a7:02:66:1a:24:75:8f:7c:b6:
         13:24:b9:ed:ed:f2:a6:01:56:12:a4:22:17:ff:58:1f:3f:28:
         fa:97:e5:4b:a9:a8:6b:08:00:49:32:74:77:fc:9c:23:46:c6:
         85:e4:82:53:70:9d:6b:de:66:5d:90:58:8c:94:62:be:1b:79:
         c5:3f:43:42:de:37:d9:42:07:d0:da:25:74:85:94:b8:16:24:
         fd:0c:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:27 2024 by rpki-client on console-fra.rpki-client.org