Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031353a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a383031353a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          zjjPY4vYVor/vHp9t1fA1VMTChPYNMktVDkUlpeXG/w=
Subject key identifier:   94:DF:FC:F9:2C:3C:47:07:BA:81:BA:1D:1E:FE:C8:2E:99:D4:EB:B6
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       1DBA2369730DCE7BFE8D2BC9DD888F6585C1D759
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031353a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Mon 27 May 2024 20:55:00 +0000
ROA not before:           Mon 27 May 2024 20:50:00 +0000
ROA not after:            Mon 26 May 2025 20:55:00 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8015::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ba:23:69:73:0d:ce:7b:fe:8d:2b:c9:dd:88:8f:65:85:c1:d7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May 27 20:50:00 2024 GMT
            Not After : May 26 20:55:00 2025 GMT
        Subject: CN=94DFFCF92C3C4707BA81BA1D1EFEC82E99D4EBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:d6:f6:ac:01:f9:15:a7:5a:81:d4:5c:20:
                    e4:8c:af:15:fa:49:eb:08:2e:74:eb:98:6f:c0:2d:
                    a5:23:9e:63:de:a4:58:ac:b8:cb:0d:bf:07:91:4f:
                    d5:14:c7:78:d7:b9:56:b1:dc:6c:a5:a8:a0:d1:85:
                    23:a8:be:74:38:e2:96:1c:da:8c:3e:c5:a1:ea:45:
                    20:f2:20:25:38:2e:e3:27:8a:b0:12:99:df:db:b0:
                    9b:3e:90:74:df:3e:cd:9b:36:c8:cb:2b:19:34:c0:
                    60:95:b9:59:63:3d:25:3d:b1:7f:ec:a1:45:f7:de:
                    2e:26:b8:67:d1:46:bf:8d:4d:ca:e9:45:42:7c:3e:
                    17:8e:9f:e8:2e:97:e0:91:a2:c2:74:06:5d:65:7e:
                    3f:88:08:51:6a:70:c1:d9:87:81:d5:16:6c:5e:00:
                    79:6b:7a:62:01:04:b1:2c:4b:8c:e1:22:85:2c:79:
                    c0:6f:63:4d:9a:ab:2e:c3:44:c2:b4:b1:52:91:1f:
                    ad:91:5d:db:34:11:5c:23:db:58:3b:0c:88:92:ae:
                    ae:c4:12:a2:51:91:e4:eb:71:85:73:9c:ec:cf:57:
                    db:b7:51:b7:b8:c6:9b:7c:09:25:4d:d7:b9:48:e7:
                    b0:ee:75:0c:c3:82:42:0d:f5:44:fe:15:cf:e8:26:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DF:FC:F9:2C:3C:47:07:BA:81:BA:1D:1E:FE:C8:2E:99:D4:EB:B6
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031353a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8015::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:44:13:67:a5:71:26:96:2d:fe:cc:77:b4:55:2a:3e:c8:
         d2:09:b0:bb:17:a5:15:b1:bd:e6:5d:24:a8:13:ff:7d:a8:ad:
         ef:54:2b:21:a3:f6:f6:ce:de:94:3d:cc:d1:18:e7:33:bd:a8:
         3a:28:d5:16:43:b7:9e:a8:00:29:90:bf:17:fa:f1:b8:15:ba:
         7b:f2:5b:1f:a3:3b:2e:58:68:96:34:24:87:c9:91:66:fa:77:
         b9:60:15:6b:b5:78:58:9c:e1:0c:c5:0d:b0:39:be:fd:0b:e5:
         db:bb:5a:0a:2f:e0:9b:08:c3:8b:e9:91:53:75:ca:7c:56:3d:
         d8:ca:ae:d0:cf:00:c9:fa:51:0f:ea:e0:65:1d:47:95:fc:a3:
         c7:16:40:fd:32:47:84:87:75:15:60:23:df:d5:44:cc:92:f3:
         30:24:36:52:6d:2f:13:e1:18:fc:60:97:e7:4a:b7:90:93:45:
         08:f8:d7:03:39:89:1b:e5:c5:b6:69:06:7c:c3:fe:a4:17:a9:
         ee:21:c0:3a:6e:0d:57:87:26:0b:ad:21:5b:59:ab:24:0c:65:
         30:05:79:7e:42:ad:d4:75:af:c2:7e:0f:71:8d:d0:ad:6b:c6:
         9f:42:3a:c6:55:d3:8a:f6:af:d2:b7:2a:32:02:cd:b3:73:5a:
         24:a8:b6:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org