Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a323a3a2f36342d3634203d3e203133343839.roa
File:                     323830333a383761303a303a323a3a2f36342d3634203d3e203133343839.roa (raw, json)
Hash identifier:          Ugj1zq1sycGLSWzMOqlegtIvRTW3rzVYnxQMTs0CT+Q=
Subject key identifier:   D9:63:BA:CC:08:67:70:2F:43:7F:DF:86:92:1F:00:5A:49:2D:B5:17
Certificate issuer:       /CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
Certificate serial:       3DA243E2FF5E97E328E3ABE4AA18D7902AFF0A55
Authority key identifier: A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a323a3a2f36342d3634203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:09:35 +0000
ROA not before:           Tue 05 Mar 2024 18:04:35 +0000
ROA not after:            Tue 04 Mar 2025 18:09:35 +0000
asID:                     13489
IP address blocks:        2803:87a0:0:2::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a2:43:e2:ff:5e:97:e3:28:e3:ab:e4:aa:18:d7:90:2a:ff:0a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
        Validity
            Not Before: Mar  5 18:04:35 2024 GMT
            Not After : Mar  4 18:09:35 2025 GMT
        Subject: CN=D963BACC0867702F437FDF86921F005A492DB517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:5a:34:1f:09:5c:75:22:2a:21:54:63:78:
                    91:be:a5:07:e8:15:39:a8:a7:a2:b9:44:37:8d:d5:
                    a1:a7:50:4f:c5:59:a3:67:5e:8f:c0:dd:c2:a2:40:
                    ce:eb:d7:fc:4f:ed:43:14:8a:b1:97:d5:8f:f2:f7:
                    6b:41:5a:ee:d8:30:b3:fc:2b:fe:54:30:d1:ec:39:
                    2f:89:75:4d:c4:0b:01:41:88:40:62:85:cb:e3:14:
                    3c:31:c3:4a:33:e3:19:e7:72:b9:40:28:0f:f1:38:
                    5d:c8:ab:08:4a:e0:9c:f7:81:40:bd:6e:1d:e5:4f:
                    d3:04:ac:8e:17:e8:5f:00:cb:33:d5:89:40:19:a2:
                    71:8d:d9:1b:ea:ef:29:5c:30:44:69:92:6c:0d:41:
                    c1:83:aa:99:78:b7:d8:7c:a3:96:36:94:0a:a5:d7:
                    b1:26:75:05:9a:bd:f4:ff:a5:23:96:82:28:23:c2:
                    71:4d:d7:8c:dc:a1:73:ca:65:8e:25:42:95:42:dd:
                    32:78:94:fd:a1:13:be:b9:d0:c9:b5:a3:2b:a1:41:
                    ec:e1:05:76:da:8d:b0:18:66:2a:0d:4a:fe:29:be:
                    d0:23:a9:8a:a5:7d:ef:45:49:60:9a:8b:c3:62:44:
                    51:7f:23:a4:53:df:d9:cf:4b:5d:b6:40:5b:bf:4b:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:63:BA:CC:08:67:70:2F:43:7F:DF:86:92:1F:00:5A:49:2D:B5:17
            X509v3 Authority Key Identifier:
                keyid:A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/323830333a383761303a303a323a3a2f36342d3634203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87a0:0:2::/64

    Signature Algorithm: sha256WithRSAEncryption
         cb:30:3f:34:ea:d4:0f:be:2a:16:10:7c:14:c8:4c:3b:03:72:
         d7:c2:52:f1:f1:d7:e0:c5:4f:2c:df:0e:e4:f9:33:de:81:9e:
         b0:7a:e2:57:f5:50:f0:cc:e0:8b:9e:a0:e7:c1:28:b4:bf:80:
         86:ae:42:47:02:fe:fd:4a:17:7e:88:f8:d7:74:a0:94:78:32:
         b0:36:c3:c8:97:1c:7a:4c:a7:a2:11:05:2e:f5:9b:d4:06:57:
         50:89:7f:3e:36:11:cd:82:58:a6:69:a2:99:1f:e0:7c:31:de:
         97:31:30:82:b7:8c:03:ee:be:74:e5:55:31:d5:a2:1c:e2:9c:
         e0:e4:3a:0c:46:4a:a2:66:09:a9:3f:45:13:70:1f:13:8a:33:
         4a:6f:af:d0:e7:c3:90:d3:2b:e2:7d:dc:84:4a:4d:12:ab:6d:
         b9:a1:2e:c8:67:6a:81:1d:7a:98:6b:7a:a3:a1:1e:53:2d:dd:
         84:04:03:32:b6:66:b0:54:f5:77:01:fa:e8:ba:4f:ee:0a:ba:
         57:7b:6e:5a:7d:e1:27:b0:10:78:bf:22:7e:86:ef:da:b2:e7:
         1b:83:56:f2:a4:ea:b5:41:de:50:47:fc:ae:1c:99:7f:eb:3e:
         56:22:f1:e5:3b:2b:4f:25:79:a3:2c:59:9b:7b:d3:89:51:97:
         99:dc:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 23:27:45 2024 by rpki-client on console-ams.rpki-client.org