Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/323830333a666636303a3a2f33322d3438203d3e20323639383432.roa
File:                     323830333a666636303a3a2f33322d3438203d3e20323639383432.roa (raw, json)
Hash identifier:          kSjHjJ5bWlnVXt0aC8h4aRiAI4WEMKiUJ4Xr7lDSMJs=
Subject key identifier:   6F:46:B8:F9:43:2E:3C:B4:EB:DF:EB:42:64:CC:BB:58:C6:5F:14:0F
Certificate issuer:       /CN=4470F62467DDCEB1FB33F608BFE49A945C530595
Certificate serial:       3080898F3BDDECFA061A30F773650E717DFC0A98
Authority key identifier: 44:70:F6:24:67:DD:CE:B1:FB:33:F6:08:BF:E4:9A:94:5C:53:05:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/323830333a666636303a3a2f33322d3438203d3e20323639383432.roa
Signing time:             Tue 05 Mar 2024 17:59:59 +0000
ROA not before:           Tue 05 Mar 2024 17:54:59 +0000
ROA not after:            Tue 04 Mar 2025 17:59:59 +0000
asID:                     269842
IP address blocks:        2803:ff60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:80:89:8f:3b:dd:ec:fa:06:1a:30:f7:73:65:0e:71:7d:fc:0a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4470F62467DDCEB1FB33F608BFE49A945C530595
        Validity
            Not Before: Mar  5 17:54:59 2024 GMT
            Not After : Mar  4 17:59:59 2025 GMT
        Subject: CN=6F46B8F9432E3CB4EBDFEB4264CCBB58C65F140F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:ef:2c:5c:5b:a9:ea:74:39:87:3b:1f:21:
                    50:0e:40:64:f5:c2:16:b3:9a:76:60:d2:71:4a:22:
                    68:f3:46:d0:ca:d5:f1:6c:dc:2e:b5:01:4a:40:8a:
                    1b:a6:ce:3e:8e:33:9e:d6:77:39:27:5f:d3:af:79:
                    97:60:97:99:4e:fe:4c:34:8c:75:67:21:12:08:f4:
                    b9:f7:ee:0b:08:ea:1c:a3:e9:5a:66:8d:3c:4d:2d:
                    22:38:72:6c:13:34:81:5e:fb:f5:ef:e6:f8:d1:5e:
                    9e:d8:d1:7b:91:d6:b5:3e:25:2c:52:63:af:3e:16:
                    65:f4:65:e1:f0:b5:5b:20:92:7e:d2:f5:b5:f9:55:
                    3d:70:27:6a:79:09:d8:f4:bc:8b:cd:e3:6e:1e:f3:
                    86:01:40:f4:17:37:8f:7b:02:a6:5e:59:c2:6a:e2:
                    63:d5:e8:9c:99:2a:58:74:dd:f4:88:cf:c8:9a:22:
                    f6:16:40:22:44:43:41:79:ce:b1:7c:bf:ab:71:d4:
                    66:55:30:e8:d2:3e:70:2a:e0:ba:bb:cb:ac:35:20:
                    40:dd:e5:0d:4b:4c:b9:f7:24:db:c0:24:25:22:9d:
                    46:d1:f3:16:71:1b:59:82:c9:de:c7:53:dd:72:27:
                    a7:7c:d7:0a:16:96:2b:66:d5:ed:93:19:fa:22:5e:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:B8:F9:43:2E:3C:B4:EB:DF:EB:42:64:CC:BB:58:C6:5F:14:0F
            X509v3 Authority Key Identifier:
                keyid:44:70:F6:24:67:DD:CE:B1:FB:33:F6:08:BF:E4:9A:94:5C:53:05:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/323830333a666636303a3a2f33322d3438203d3e20323639383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:b4:52:47:44:44:bf:3d:ff:9e:ec:9b:af:d2:5d:3a:1a:
         f6:b3:c4:c0:59:34:e0:68:c7:06:c8:95:ec:5e:cf:17:bb:32:
         f7:7b:e7:3a:83:bc:70:b9:db:d3:9f:3a:aa:70:f5:2f:52:06:
         25:ea:a7:b9:bb:da:3a:d7:61:90:ba:ca:f2:90:e0:e1:ec:b0:
         88:6a:bf:d5:e6:c4:9a:6d:e3:75:cf:45:0e:b1:61:6d:5d:11:
         e2:e3:4e:e1:c5:67:b7:1f:63:48:5b:e8:f0:78:97:5b:6d:bc:
         d1:90:db:68:fb:d6:89:95:4d:eb:42:c8:84:ac:90:b8:2e:72:
         c4:c2:78:d3:d6:d3:f0:88:86:fc:60:10:d0:96:d2:35:46:38:
         9b:25:8b:d5:3c:bf:f7:cd:3f:98:ef:10:81:a7:03:62:95:41:
         4c:00:e7:7f:6c:46:27:78:23:58:7e:d5:4c:27:02:38:eb:91:
         c1:6a:d8:a3:92:f0:c9:43:54:39:c8:c6:f5:33:84:c9:49:5f:
         10:e4:f7:c8:98:f7:d8:a3:16:4d:95:70:d0:21:87:9e:0f:68:
         71:8d:ce:6e:8a:6a:3b:08:c7:02:a9:bc:49:43:06:80:8a:19:
         d0:db:93:c5:fa:f9:0d:67:ab:02:23:be:43:2b:2c:1a:76:b5:
         e1:02:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org