Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383032313a3a2f34382d3438203d3e20323639383632.roa
File:                     323830333a623065303a383032313a3a2f34382d3438203d3e20323639383632.roa (raw, json)
Hash identifier:          Q/IpvSE4rpkS9JHul27ahBu9G2V/RxplZ1Oywn55jJw=
Subject key identifier:   5B:8C:36:24:02:15:F5:26:75:5F:C4:44:F3:ED:7A:A1:D7:28:4F:9C
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       7EABAC001BF00C37299AE4E30BE0B18AA7D1B57C
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383032313a3a2f34382d3438203d3e20323639383632.roa
Signing time:             Tue 28 May 2024 21:00:00 +0000
ROA not before:           Tue 28 May 2024 20:55:00 +0000
ROA not after:            Tue 27 May 2025 21:00:00 +0000
asID:                     269862
IP address blocks:        2803:b0e0:8021::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ab:ac:00:1b:f0:0c:37:29:9a:e4:e3:0b:e0:b1:8a:a7:d1:b5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May 28 20:55:00 2024 GMT
            Not After : May 27 21:00:00 2025 GMT
        Subject: CN=5B8C36240215F526755FC444F3ED7AA1D7284F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:be:40:0d:1a:6b:6e:ca:70:e5:e5:43:a3:
                    f7:92:44:6a:99:1d:df:65:7e:bf:d1:06:9a:ef:e3:
                    cf:2d:14:5e:75:29:eb:ff:c1:87:bf:75:f8:97:8d:
                    eb:46:77:60:cc:d1:f0:9a:51:ce:ef:4d:56:f5:7e:
                    65:d2:10:08:1f:df:54:82:6d:c4:60:28:c6:89:97:
                    ca:32:13:74:cd:ea:b5:da:7d:e2:cc:05:0f:8f:d1:
                    94:df:fa:cf:dd:b6:30:d7:5b:dd:65:b8:07:0f:0c:
                    44:a7:bb:ef:61:ea:6e:59:fc:4c:17:0e:04:fb:2f:
                    72:9c:de:5a:55:1a:23:cf:5c:bc:8e:99:04:e3:3f:
                    99:49:10:c8:27:79:61:8d:8d:91:0a:ec:1f:0a:8c:
                    f6:1a:96:dd:1d:fe:75:e9:00:37:0a:8a:3f:7f:47:
                    ca:6e:64:be:9a:4e:8b:44:dd:12:30:16:20:46:8a:
                    05:14:25:62:25:2b:61:15:10:d7:d3:c8:57:5c:01:
                    69:66:47:f4:1c:00:8d:2b:dc:33:d0:42:60:33:bf:
                    cf:5e:ac:a4:99:79:aa:35:c5:88:b6:83:27:cb:76:
                    c3:a4:ed:ca:ec:91:d6:88:8c:b0:0b:b5:79:bf:9b:
                    6a:ed:26:49:38:4c:41:ed:01:70:fc:51:08:a7:e0:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8C:36:24:02:15:F5:26:75:5F:C4:44:F3:ED:7A:A1:D7:28:4F:9C
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383032313a3a2f34382d3438203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8021::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:e7:d7:bb:66:2b:be:b9:99:52:7d:78:21:80:36:f9:af:f8:
         cb:92:d7:65:ed:bd:99:ec:c6:39:29:e0:b2:73:9e:18:ac:7a:
         0b:b8:62:7a:6e:35:b0:52:e9:07:16:ab:ab:10:e0:c1:b8:b0:
         1c:5c:60:d0:03:ac:af:ae:e8:a2:bf:b3:89:75:79:54:f7:9a:
         eb:44:04:74:4a:17:eb:49:9a:5e:bb:99:1f:7d:e9:e1:d6:94:
         5b:1b:f0:0c:7b:0b:3a:aa:bf:87:37:eb:ca:24:6d:a8:c8:50:
         3d:cf:09:37:d1:ba:ca:30:1a:05:49:58:a0:ce:0a:20:1a:1b:
         b2:6a:fe:2b:11:ba:8f:1b:49:21:80:63:dd:8e:54:24:a0:d6:
         37:29:83:81:65:c4:12:bf:44:68:fe:08:dd:36:aa:27:c3:94:
         35:50:29:f1:88:7d:bc:f6:9b:15:43:a9:6c:cc:56:b0:cd:57:
         dc:c1:a1:ae:90:10:e7:aa:9f:0b:87:7f:01:c0:d1:e4:ba:fb:
         0a:97:49:11:26:59:6b:55:7d:c3:ae:f5:cd:01:37:f8:c5:6d:
         85:a1:ac:eb:c4:a2:f9:62:b7:fd:64:72:d6:28:32:49:20:f0:
         28:4c:a4:8f:7a:6e:6e:f5:e3:82:fc:62:2e:34:94:79:f0:52:
         f1:8a:33:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:51 2024 by rpki-client on console-ams.rpki-client.org