Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030333a3a2f34382d3438203d3e20323733313732.roa
File:                     323830333a623065303a373030333a3a2f34382d3438203d3e20323733313732.roa (raw, json)
Hash identifier:          IP3DTIEvzpM75BF9KokMB3M3C2oR+lnIvxfPUGFzSs0=
Subject key identifier:   B8:E9:1F:13:0D:02:7C:35:F1:55:47:C9:B6:6C:80:5B:38:ED:98:2A
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       0BFE60F34D1132A37B47E204DF9066B2EAE7C04B
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030333a3a2f34382d3438203d3e20323733313732.roa
Signing time:             Fri 05 Apr 2024 17:40:00 +0000
ROA not before:           Fri 05 Apr 2024 17:35:00 +0000
ROA not after:            Fri 04 Apr 2025 17:40:00 +0000
asID:                     273172
IP address blocks:        2803:b0e0:7003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fe:60:f3:4d:11:32:a3:7b:47:e2:04:df:90:66:b2:ea:e7:c0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Apr  5 17:35:00 2024 GMT
            Not After : Apr  4 17:40:00 2025 GMT
        Subject: CN=B8E91F130D027C35F15547C9B66C805B38ED982A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:52:55:d7:e2:5c:58:d1:64:e1:21:d3:82:
                    12:d4:d4:92:26:ab:8e:33:cc:46:6e:55:36:8b:c6:
                    ce:c6:cc:10:a3:b3:3f:ab:f7:2f:92:30:34:fc:f3:
                    25:c4:df:50:1b:f1:34:7a:bf:7e:4e:cc:0d:d3:42:
                    0c:a4:86:e5:a3:6d:89:9a:b1:3b:fe:c8:c2:32:cb:
                    c6:6d:0b:31:ce:3c:fb:b4:da:88:b2:45:c9:84:d3:
                    05:d8:ea:5d:fb:db:bd:4f:55:ab:a2:7f:57:d6:07:
                    4d:ee:3a:63:02:3f:24:53:ee:a4:b2:c1:ee:ad:1f:
                    8c:a7:99:a2:6d:c1:0a:56:36:71:a1:14:0f:68:b0:
                    53:a9:9c:1a:37:ad:1e:f3:80:cd:0c:b1:7c:6a:20:
                    a8:99:8b:78:85:5c:f4:aa:cc:9f:4e:f8:42:63:5b:
                    4a:d4:a9:29:ea:49:54:8d:33:5c:4e:cb:3c:9d:73:
                    1f:76:dd:ac:80:8f:8e:5f:f1:90:0a:a2:75:3f:8d:
                    75:a0:e9:54:55:53:8f:9f:8d:54:05:57:d5:d7:7d:
                    5d:8d:97:fe:68:51:4f:df:34:e5:03:fd:f8:9f:2d:
                    26:a4:73:d9:f1:94:88:e5:14:b3:a8:ce:90:1c:37:
                    ad:6a:c4:e3:6a:ed:e7:72:22:9e:46:a6:85:8d:ae:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E9:1F:13:0D:02:7C:35:F1:55:47:C9:B6:6C:80:5B:38:ED:98:2A
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030333a3a2f34382d3438203d3e20323733313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:c7:82:98:b3:f7:1f:cc:4c:80:a1:9e:c2:0c:c5:71:41:
         57:e2:43:0b:b8:25:62:28:ec:70:26:f8:21:19:b4:b1:a8:f7:
         62:28:7e:93:31:ac:ff:30:ae:15:b1:e2:10:91:c2:05:5a:c4:
         f0:e8:87:45:93:03:7e:ab:85:78:e1:60:db:12:24:b9:94:2a:
         d3:e6:af:ba:bf:11:97:ea:07:d4:21:b8:8d:ea:94:e8:75:14:
         dc:6f:bd:dc:20:28:ec:b2:4a:76:93:0e:bb:0f:28:b0:cd:81:
         96:52:f9:ca:d3:a4:ca:93:71:14:ab:7e:3d:e5:8e:5e:e7:5e:
         a0:4d:a7:e9:60:2a:0d:0c:07:bb:0e:af:ee:f3:40:2e:34:93:
         81:1d:e7:d4:b6:1b:a3:c7:8b:10:52:2e:eb:b7:51:df:0e:88:
         74:76:3a:99:6b:61:97:19:2b:12:66:ef:a2:69:80:79:17:9d:
         2c:be:f5:4f:de:2b:13:79:64:c8:41:b7:a3:a0:f7:4f:75:96:
         9c:46:47:ac:e5:01:fd:40:de:7c:96:d5:35:2f:25:4d:27:74:
         c9:2a:26:2e:30:06:6f:5e:55:af:26:29:4c:f6:26:3a:4e:04:
         45:ec:2a:1d:30:80:1d:77:93:95:6e:a4:90:a9:05:f1:3f:c7:
         43:ee:95:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org