Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa
File:                     323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa (raw, json)
Hash identifier:          V73K17tG/KVZ5r7Ly4p8Z8Lp1BQBDoVOFO854kt2Cj4=
Subject key identifier:   36:7E:80:96:3A:D9:AE:A6:84:9D:D2:8B:57:1C:B7:C5:F7:76:2A:16
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       049368F0370DCDAD33EF050FC093D9C1AE372D11
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa
Signing time:             Tue 05 Mar 2024 18:05:37 +0000
ROA not before:           Tue 05 Mar 2024 18:00:37 +0000
ROA not after:            Tue 04 Mar 2025 18:05:37 +0000
asID:                     269746
IP address blocks:        2803:3960:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:93:68:f0:37:0d:cd:ad:33:ef:05:0f:c0:93:d9:c1:ae:37:2d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Mar  5 18:00:37 2024 GMT
            Not After : Mar  4 18:05:37 2025 GMT
        Subject: CN=367E80963AD9AEA6849DD28B571CB7C5F7762A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:60:cf:5b:16:84:59:d9:a8:50:8b:1f:8b:
                    12:a6:d0:c6:80:41:d0:48:16:91:51:71:c4:0a:36:
                    38:32:b1:20:9f:c2:e7:02:f3:b7:a5:a2:b0:1a:55:
                    d8:a9:54:4f:51:bb:4c:e4:4b:65:9f:60:46:46:51:
                    24:4b:92:80:cc:c4:71:61:fe:92:e4:b3:14:19:9d:
                    1d:01:89:ee:d3:a5:6c:18:bd:28:10:5e:ce:54:98:
                    57:66:ea:5d:dd:a4:9a:ec:91:b9:e5:b9:ca:fe:25:
                    f8:2b:ad:55:e6:eb:17:71:bf:ea:30:60:89:55:55:
                    03:d8:9f:08:5b:82:bd:4c:13:61:7c:e8:5e:5b:ea:
                    00:d2:85:3d:fc:28:33:62:c7:6e:c6:d1:b3:d6:b2:
                    b0:22:b9:4d:6e:77:f4:a3:43:06:2b:5f:b9:b1:a9:
                    c0:82:a2:df:ae:49:b8:f3:4e:61:b7:fc:23:53:29:
                    67:29:e2:ab:6d:42:29:98:69:1b:59:45:88:29:b5:
                    d2:be:56:20:62:a1:d5:8f:91:4c:f9:e0:95:15:5a:
                    d3:e0:9d:c8:55:ed:5e:0b:a8:fb:a0:b9:4b:95:05:
                    b2:e5:f4:66:2a:dd:e4:06:3a:e0:64:4f:a8:a3:e3:
                    63:c1:e7:0e:bf:9c:2d:12:d5:56:2f:6d:7e:4c:65:
                    65:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7E:80:96:3A:D9:AE:A6:84:9D:D2:8B:57:1C:B7:C5:F7:76:2A:16
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:24:a5:cd:57:d9:76:46:79:21:ba:f9:e3:be:d8:65:45:83:
         bb:4a:3e:a8:ad:83:54:93:19:7f:75:b9:0e:5f:cf:02:c1:7b:
         f6:9c:a9:0c:ff:ec:af:33:d4:40:a9:8f:a5:72:0f:e3:05:2e:
         e3:9d:27:ba:8a:0e:bf:5e:d8:2a:e0:1a:6f:ef:ec:4a:4a:3e:
         5a:e9:82:ab:82:f2:bc:b3:95:a6:32:40:6c:48:4d:84:b5:48:
         6f:27:8a:5f:3a:2a:b4:5b:81:11:9c:cd:50:a0:94:9c:30:16:
         87:b0:95:aa:8a:2e:c6:23:5c:dc:94:15:6d:e8:ac:c3:7e:93:
         09:01:de:ac:c1:2e:96:8e:49:73:cf:b1:ae:25:83:94:1f:09:
         fd:92:3d:22:56:12:3e:5f:11:5a:27:f8:22:7c:eb:f3:af:7f:
         71:5a:33:ce:ef:a2:63:45:57:bf:96:86:c4:0d:a5:17:47:01:
         df:f3:93:27:91:4f:ac:c3:2c:d0:f7:c4:15:db:63:43:02:0d:
         27:e9:45:aa:7b:24:ac:4b:f1:be:3a:a2:60:3a:8c:6a:9b:3b:
         e0:31:f3:e5:dc:dd:16:8e:77:7b:37:58:69:09:b9:17:92:7e:
         a0:ee:24:df:94:88:1b:20:08:a9:6c:1b:94:08:14:01:ce:fe:
         51:ee:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org