Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313330303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313330303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          Wkw/p01p+Qrwp9thCmvKl0d3u2Zpfr7NO2zWC/9Wr0A=
Subject key identifier:   83:57:0D:C3:01:A8:74:65:E1:C5:35:8E:3F:45:28:A0:66:87:42:7E
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       0A597202D34D890D3CDDEC718DC93475E6A71F31
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313330303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:04 +0000
ROA not before:           Thu 25 Jul 2024 23:45:04 +0000
ROA not after:            Thu 24 Jul 2025 23:50:04 +0000
asID:                     273123
IP address blocks:        2803:450:1300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:59:72:02:d3:4d:89:0d:3c:dd:ec:71:8d:c9:34:75:e6:a7:1f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:04 2024 GMT
            Not After : Jul 24 23:50:04 2025 GMT
        Subject: CN=83570DC301A87465E1C5358E3F4528A06687427E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:4c:9e:95:47:9e:ce:d7:f9:46:38:eb:10:
                    b2:56:d4:39:f2:49:7a:37:0f:49:45:6c:66:09:1e:
                    4f:53:a1:05:6c:4f:c7:56:da:1d:21:ba:5c:9f:b7:
                    a8:a0:2e:8f:d6:a8:8c:3a:3d:9a:a7:59:d9:f9:8c:
                    cb:70:7f:75:0a:7a:40:34:17:8c:90:0f:71:8f:e6:
                    96:74:5d:d6:23:b6:7f:5b:9f:ba:92:53:b2:b6:a8:
                    9b:f1:e7:3a:e6:bb:8e:65:32:0a:c3:df:6c:7a:ef:
                    51:28:ef:90:d4:32:25:c8:5c:67:ae:95:b2:9e:de:
                    42:30:b6:01:45:8f:9a:33:5d:79:6c:90:7a:a5:21:
                    32:97:68:f5:5e:a8:f7:d0:ed:77:41:c9:c6:a5:2d:
                    6c:3d:00:ff:b2:c1:4d:fb:ec:7d:00:4b:ad:c4:86:
                    f8:a3:d8:c3:8f:8d:d7:38:05:b9:e6:42:7d:11:d2:
                    9c:2c:a9:4d:e9:85:e2:b2:72:ad:69:f7:c2:93:eb:
                    07:bf:c5:c2:2b:72:a4:d4:74:77:00:08:73:1d:a5:
                    c8:58:8e:5d:86:ac:8f:f4:b0:fc:52:98:57:8a:3d:
                    b1:a7:32:96:77:d6:d9:76:96:50:07:68:0a:8e:52:
                    ce:6f:63:ac:b7:eb:6d:c4:d7:e5:f6:9d:56:b9:50:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:57:0D:C3:01:A8:74:65:E1:C5:35:8E:3F:45:28:A0:66:87:42:7E
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313330303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:27:21:15:6c:16:64:77:64:ed:a4:24:42:f3:38:63:72:
         69:10:89:11:24:59:52:50:c2:46:0b:56:63:de:b1:7a:26:00:
         8b:f5:ef:48:c5:8b:07:05:1c:b2:5c:7b:1f:1e:42:38:f2:dd:
         fd:a0:c4:e0:3b:5c:9f:ce:e3:d4:8f:71:d2:24:0e:2c:25:18:
         70:09:35:a8:2c:ed:9f:7a:8a:ac:46:6b:32:fa:e6:a2:be:60:
         ad:0e:41:c1:ba:aa:9d:f2:66:62:6b:3b:70:f7:d5:e5:f4:51:
         a7:ba:aa:ea:68:ce:05:b0:d8:38:c2:2d:07:83:60:fc:d2:a8:
         a5:5c:e8:18:80:46:60:f5:a4:54:5f:ac:f0:ba:5c:bd:62:89:
         cd:da:b9:23:80:05:c0:1b:83:60:d7:5d:58:8b:6e:23:14:a2:
         18:01:7b:0d:c1:6f:44:44:12:f4:60:7b:c6:83:a3:77:51:d8:
         ef:f2:e8:26:aa:c2:e6:8b:4b:bb:81:5e:9a:c4:06:28:f9:4c:
         8b:55:da:33:cd:21:c6:78:ab:b8:ae:c2:2b:13:ff:42:b8:b6:
         f2:f5:36:53:38:4f:bf:fb:54:3a:15:71:0e:59:c8:a4:3b:08:
         3e:67:42:59:f4:db:f9:9b:a2:ac:9c:5c:04:bb:5e:c4:8c:e1:
         c9:63:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org