Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939313a3a2f34382d3438203d3e20333939333832.roa
File:                     323830333a623065303a393939313a3a2f34382d3438203d3e20333939333832.roa (raw, json)
Hash identifier:          NyGKFb+bKgeqg2yNeSDWA8tmNepyvMjP2IIYe8PW3gs=
Subject key identifier:   AF:07:EC:16:BA:BF:A1:7C:98:EA:0E:AE:D0:6C:06:29:3A:16:13:D4
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       1DDE2E8D80A9A72F37EAC88026055256BC50C6CE
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939313a3a2f34382d3438203d3e20333939333832.roa
Signing time:             Tue 05 Mar 2024 18:03:46 +0000
ROA not before:           Tue 05 Mar 2024 17:58:46 +0000
ROA not after:            Tue 04 Mar 2025 18:03:46 +0000
asID:                     399382
IP address blocks:        2803:b0e0:9991::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:2e:8d:80:a9:a7:2f:37:ea:c8:80:26:05:52:56:bc:50:c6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Mar  5 17:58:46 2024 GMT
            Not After : Mar  4 18:03:46 2025 GMT
        Subject: CN=AF07EC16BABFA17C98EA0EAED06C06293A1613D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:0c:7e:93:a1:83:9f:04:93:81:fd:f1:9b:
                    79:d5:6f:60:e7:7e:d8:7b:af:d7:71:4c:ca:8f:65:
                    85:82:14:7d:cb:db:45:76:ac:b0:dd:d1:c9:a9:e1:
                    f0:1e:31:87:50:e5:a5:90:cf:71:95:0a:c4:0b:9a:
                    3b:39:4c:59:22:09:09:2b:3c:f3:63:de:77:84:75:
                    34:df:e7:69:57:4c:3d:8f:31:86:a8:86:0d:0c:e7:
                    fd:db:6e:da:3b:f1:c1:dc:39:ad:65:41:81:82:10:
                    3d:e6:d6:da:e3:f2:19:8b:c7:75:91:a7:2b:97:ca:
                    25:fb:20:81:b4:f0:a8:4b:ea:c9:53:ca:ad:b6:8c:
                    be:4a:c3:ea:43:cc:2c:36:e8:10:f3:f2:58:90:99:
                    1f:8c:96:c2:17:0a:9d:0e:7c:69:a5:02:b8:31:27:
                    a5:97:fc:0f:a0:e5:3f:df:18:5d:06:c5:86:72:38:
                    1b:35:e2:79:09:a3:e3:5e:55:96:90:98:29:20:41:
                    59:48:53:a2:ed:b1:90:ab:cd:c1:bb:01:ae:19:d7:
                    a9:4a:f7:58:79:66:40:02:3c:46:b7:be:c8:2a:cd:
                    bd:7d:0a:1b:cb:b0:89:4f:b2:20:ac:c9:7e:09:a3:
                    f0:3d:aa:c6:c3:9d:8f:53:c6:1d:89:17:68:e3:7a:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:07:EC:16:BA:BF:A1:7C:98:EA:0E:AE:D0:6C:06:29:3A:16:13:D4
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393939313a3a2f34382d3438203d3e20333939333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9991::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:75:05:f2:bc:00:f8:5b:7f:3b:44:74:7c:29:ac:1e:a2:
         78:58:92:20:3a:b2:22:7c:2b:b0:46:ea:22:45:e5:a8:a8:db:
         1f:63:77:6a:bb:90:68:5d:6b:83:9c:a6:59:db:86:be:86:40:
         0f:e8:73:63:95:73:b9:2f:83:4b:88:ca:5d:a1:c0:17:aa:2d:
         f6:05:ba:40:4d:06:b3:4b:ce:26:a1:5f:60:75:e9:9d:1c:d1:
         a8:c7:e7:fe:5e:21:71:b9:f0:55:52:00:b2:b5:99:a0:67:ac:
         1a:3f:5e:e9:1a:a5:60:ae:d6:9f:f5:4b:45:34:7e:ee:7b:8b:
         02:10:b8:bc:03:3d:c3:13:bd:7c:73:6e:70:14:12:e1:70:56:
         00:c3:84:b2:31:06:ca:92:a9:e9:de:59:21:33:03:33:ec:8d:
         1f:23:a9:6f:22:67:d0:d6:42:31:b1:9e:eb:d1:ff:42:71:cb:
         6b:82:3e:bc:fe:d5:24:b1:b5:48:ff:1c:94:9d:e9:54:09:12:
         f6:03:24:58:07:24:29:33:5e:23:f3:c1:85:c6:07:69:60:38:
         91:ee:bd:18:93:9b:f5:8f:c3:19:b3:99:98:b0:55:d5:e2:18:
         8d:d2:c6:bb:73:51:5b:69:fc:98:e7:d2:e0:ef:ea:17:87:d4:
         e4:25:73:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 4 17:44:06 2024 by rpki-client on console-ams.rpki-client.org