Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/323830333a313765303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a313765303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          mBgzo5mnq3lZ4iknAUbKZv4EOPbDddoloRWfQ4L4wyg=
Subject key identifier:   55:68:56:A3:E5:7A:C6:E4:C5:F0:2A:E4:30:93:2D:3F:11:44:C9:76
Certificate issuer:       /CN=A8BD34F2B469A2D97364857900B9F36A1297D50E
Certificate serial:       6A3C69A7443A6515DC9B9DF7BA6E04B46DC64DE1
Authority key identifier: A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/323830333a313765303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:47:22 +0000
ROA not before:           Tue 05 Mar 2024 17:42:22 +0000
ROA not after:            Tue 04 Mar 2025 17:47:22 +0000
asID:                     52468
IP address blocks:        2803:17e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3c:69:a7:44:3a:65:15:dc:9b:9d:f7:ba:6e:04:b4:6d:c6:4d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BD34F2B469A2D97364857900B9F36A1297D50E
        Validity
            Not Before: Mar  5 17:42:22 2024 GMT
            Not After : Mar  4 17:47:22 2025 GMT
        Subject: CN=556856A3E57AC6E4C5F02AE430932D3F1144C976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:f8:f8:ad:66:4e:08:1d:fc:0a:09:01:8c:
                    94:72:df:71:06:1d:bb:db:13:ed:3d:01:a8:fc:6c:
                    f7:2b:f4:66:3a:c3:91:62:8e:90:47:75:20:39:66:
                    9a:6e:37:47:39:1a:82:aa:09:76:21:f6:91:29:44:
                    ca:2a:2a:01:9d:37:49:5e:88:99:b7:fa:0c:3e:9f:
                    ad:5c:4d:fc:c9:f0:f3:1b:5f:71:fc:85:6d:97:59:
                    9c:3c:f6:37:be:4e:b7:eb:19:ee:9a:dd:06:f9:dd:
                    57:22:37:b4:55:54:24:0f:fb:38:55:b2:4f:7a:28:
                    ee:77:be:e1:90:5b:7c:be:d0:c4:88:79:78:90:fb:
                    f1:65:4b:2f:a6:2b:1b:e1:ac:d2:23:7e:6c:3a:34:
                    5c:22:f8:fe:b0:ae:c3:51:50:26:f1:42:a0:57:eb:
                    bd:91:84:b4:ae:e5:53:27:9d:b4:e5:a9:60:c8:1f:
                    49:0d:89:2b:24:25:24:0a:07:aa:ad:cd:ff:3e:d6:
                    52:6e:e1:a9:2b:45:81:6a:5a:70:f6:4c:3b:1f:4f:
                    83:13:59:f7:a8:19:01:4d:3a:f4:8e:c3:14:7c:93:
                    cb:48:70:cb:d7:38:b1:66:b6:5f:39:00:00:ce:15:
                    7b:e3:3c:3b:d2:98:5a:7e:df:3c:ef:12:03:77:5e:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:68:56:A3:E5:7A:C6:E4:C5:F0:2A:E4:30:93:2D:3F:11:44:C9:76
            X509v3 Authority Key Identifier:
                keyid:A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/323830333a313765303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:fb:f4:d5:f8:f6:3d:45:78:bf:9e:e6:f6:c6:57:c7:66:
         63:d9:20:5f:3e:1d:28:36:b3:e6:a4:32:94:fb:3f:18:0d:84:
         d5:b0:ee:0b:ea:cb:dd:bf:a4:38:85:82:eb:9e:14:e9:26:89:
         df:84:f2:b6:13:51:e7:fe:eb:f8:d1:86:dc:b7:b8:79:fb:d1:
         eb:64:74:c6:14:0f:15:57:1a:24:71:52:ab:a3:ab:4d:54:2b:
         5b:03:1d:8c:13:bf:74:cd:42:05:8a:ba:77:0a:6b:c0:a6:0c:
         2f:94:4e:51:dc:ac:d2:77:b5:29:bb:d3:44:f1:9f:d2:b6:fb:
         4e:0a:e5:29:ad:60:6c:a1:58:8a:b9:8f:fc:b7:2a:c4:b6:54:
         cd:e4:b2:14:09:96:4d:f1:a3:c6:dc:58:47:29:c8:e9:6c:59:
         f9:a5:42:6a:04:fb:5f:21:cf:9c:17:1c:26:5e:63:ed:76:48:
         e6:0a:7d:75:c0:54:86:4b:4f:e1:3a:bb:40:94:d2:17:98:19:
         5c:14:8c:23:c3:07:20:e0:6e:dd:06:82:3d:7f:56:6f:c2:73:
         68:fa:1b:73:78:8b:35:15:63:4a:5d:2f:c6:70:98:d0:c5:84:
         f9:ca:a9:05:09:79:e7:96:c9:08:b6:c0:e5:d4:92:67:94:f5:
         a0:f2:c5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:44 2024 by rpki-client on console-fra.rpki-client.org