Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e20333934363834.roa
File:                     323830333a626438303a3a2f33322d3438203d3e20333934363834.roa (raw, json)
Hash identifier:          cpGsL80s6HHDGoZSCiTtZ2xb3Shus/+PqmHY6onDzCM=
Subject key identifier:   BA:D3:9F:68:16:8F:10:FD:B1:A4:BD:A1:8A:D2:6B:8D:1F:0B:14:26
Certificate issuer:       /CN=DC17BDE9178A893A0E44505700003A43E9C81665
Certificate serial:       3F1A5A9F65B269CF479F50737800199A58734237
Authority key identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 17:59:55 +0000
ROA not before:           Tue 05 Mar 2024 17:54:55 +0000
ROA not after:            Tue 04 Mar 2025 17:59:55 +0000
asID:                     394684
IP address blocks:        2803:bd80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1a:5a:9f:65:b2:69:cf:47:9f:50:73:78:00:19:9a:58:73:42:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC17BDE9178A893A0E44505700003A43E9C81665
        Validity
            Not Before: Mar  5 17:54:55 2024 GMT
            Not After : Mar  4 17:59:55 2025 GMT
        Subject: CN=BAD39F68168F10FDB1A4BDA18AD26B8D1F0B1426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:9c:6d:74:6c:ed:71:d7:69:1f:41:88:69:
                    06:4e:1c:f2:4c:63:4a:81:71:f0:38:9a:e2:f1:3e:
                    ce:0d:55:fb:21:81:eb:76:8f:c8:22:23:5d:9a:46:
                    a5:69:42:c4:ff:80:ee:54:46:ab:5b:c3:2e:ae:22:
                    ec:7a:c9:cf:7e:ef:38:57:95:c3:27:f2:47:0e:d5:
                    6d:bd:ff:5b:67:e3:50:96:98:86:09:11:74:8d:3e:
                    3e:e6:48:6c:b6:32:95:5f:2e:2f:9f:83:b2:df:96:
                    19:96:0e:7e:97:43:20:23:16:f4:cf:d2:a7:02:20:
                    ae:4d:df:e6:b7:09:47:e1:ed:dc:d7:af:bb:f8:be:
                    14:c7:16:d4:d2:a6:d7:11:6a:e8:3f:99:ef:fd:30:
                    2e:9e:d9:11:6a:a1:25:60:1a:ab:fe:5e:f0:72:76:
                    ef:dc:17:f5:39:b8:f3:0b:7a:0c:84:1f:eb:fc:9e:
                    93:ba:79:fb:1c:81:0f:f1:d3:f9:b5:0e:c6:e0:95:
                    61:0e:51:57:29:a0:1e:1c:f2:00:84:41:f2:d6:01:
                    1b:c7:90:14:6e:ed:50:28:ae:b9:0f:29:a9:a1:04:
                    99:11:6b:c9:0d:3b:20:b0:52:d4:8d:bd:15:5c:56:
                    97:f9:42:21:12:7b:af:ab:fb:b9:9d:c2:d0:c2:f0:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D3:9F:68:16:8F:10:FD:B1:A4:BD:A1:8A:D2:6B:8D:1F:0B:14:26
            X509v3 Authority Key Identifier:
                keyid:DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/323830333a626438303a3a2f33322d3438203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:af:41:e2:81:1b:07:3b:5f:86:17:f1:86:43:1c:c4:45:3b:
         84:2f:8b:10:61:dd:6d:0c:de:8e:32:bf:11:52:40:a4:ce:76:
         73:98:d6:44:28:11:54:5a:81:7f:6d:87:3e:da:64:8d:94:ae:
         4c:8b:e9:1d:2e:3c:87:6f:6a:2a:c5:d9:90:71:7a:ec:9e:e9:
         21:33:67:07:ba:76:65:41:6d:58:ed:6a:c8:a8:32:f0:b4:19:
         2f:ac:42:a7:b9:a7:a6:79:f8:3c:74:e7:8e:bc:9c:e8:b0:f1:
         85:24:a4:34:7e:bf:cd:68:87:6c:30:64:3d:33:22:e9:3c:2c:
         fa:32:2a:65:1b:b6:07:9c:84:92:84:e1:ef:26:01:46:7b:da:
         98:17:69:dc:6d:c9:e8:b6:29:d2:db:f6:14:9b:1f:92:48:c9:
         9a:aa:2f:31:cb:47:c7:be:a8:d1:1e:5b:06:85:4c:5f:8d:6e:
         06:bc:a4:f0:8f:de:6d:77:e1:4a:2e:f2:d3:44:a7:dd:08:06:
         58:f9:a1:06:f0:fa:85:90:8c:b0:27:c5:68:2b:11:35:e8:89:
         83:18:8a:20:52:53:c1:b3:a4:08:5c:a4:d9:df:a2:a3:0d:22:
         e6:28:e5:72:ef:36:fc:e7:be:8a:31:0f:11:99:3b:5b:49:02:
         8d:fc:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:03:12 2024 by rpki-client on console-fra.rpki-client.org