Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313130303a3a2f34302d3430203d3e203237383138.roa
File:                     323830333a333338303a313130303a3a2f34302d3430203d3e203237383138.roa (raw, json)
Hash identifier:          T0QRyG2YT8Z4z0pAVmlypVyflKWgQ074iM2+B2ZNeRA=
Subject key identifier:   25:2A:AF:77:31:88:D1:5F:C8:EA:01:C4:C2:B4:94:9C:B8:6C:FC:6F
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       78AEBCF2310AEEAEA677A56A7FA65AC9025343EF
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313130303a3a2f34302d3430203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:14 +0000
ROA not before:           Tue 05 Mar 2024 18:12:14 +0000
ROA not after:            Tue 04 Mar 2025 18:17:14 +0000
asID:                     27818
IP address blocks:        2803:3380:1100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ae:bc:f2:31:0a:ee:ae:a6:77:a5:6a:7f:a6:5a:c9:02:53:43:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:14 2024 GMT
            Not After : Mar  4 18:17:14 2025 GMT
        Subject: CN=252AAF773188D15FC8EA01C4C2B4949CB86CFC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:a0:0b:63:55:b1:31:10:33:6b:d2:50:e8:
                    06:c9:b8:4b:ff:08:e7:aa:90:3c:ce:4b:f8:37:4b:
                    2a:74:18:32:b3:16:d6:dd:0e:fc:ca:e4:c8:0b:a4:
                    af:77:b2:96:74:32:c1:a9:68:c0:92:20:6f:bf:80:
                    64:43:3a:a6:50:5a:20:23:ea:83:49:d6:12:50:9f:
                    c2:bc:22:f3:00:a7:91:5c:13:a6:d1:94:8b:ce:8c:
                    48:af:6a:75:7b:89:05:8a:e7:06:6a:d7:b6:7f:ad:
                    d9:a1:1e:d0:96:62:f2:1a:70:49:dc:79:ae:cd:33:
                    09:06:45:87:dd:bd:2d:77:0a:61:31:1f:03:f9:74:
                    04:a0:49:22:a1:61:66:44:b9:ff:07:b0:15:d3:7d:
                    4c:06:14:51:fd:01:d0:e9:8d:40:bf:21:a8:00:74:
                    b2:a9:64:43:60:3a:aa:46:ab:4a:76:49:79:bd:fb:
                    5b:b3:41:27:38:b5:8a:ad:a5:9e:19:75:b6:b3:ff:
                    67:45:d9:20:e1:6f:9e:2c:65:e3:08:ce:02:ac:16:
                    fe:04:61:ef:75:a6:e4:98:b9:85:3c:3a:90:43:a6:
                    2d:0e:de:24:28:6d:02:0d:dd:45:81:b3:29:d1:32:
                    8b:66:f0:ed:b1:72:bf:95:d3:d8:fd:c4:a3:f8:ea:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2A:AF:77:31:88:D1:5F:C8:EA:01:C4:C2:B4:94:9C:B8:6C:FC:6F
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313130303a3a2f34302d3430203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:73:38:40:f5:01:e9:35:48:7f:33:f3:35:2f:94:36:e2:07:
         5c:7a:8a:63:0a:e5:58:25:a8:0c:04:e1:6b:91:d8:f2:cb:2e:
         d1:ba:b0:48:0f:ef:5e:8d:c3:cf:85:70:95:37:d0:cc:d7:b1:
         07:ac:be:12:e9:9a:2a:cb:38:17:d8:60:27:c6:6d:92:0a:c2:
         8e:b3:a3:3a:ae:7e:7f:28:9b:d3:d2:9b:88:c2:c4:ca:46:0d:
         7c:74:84:23:c3:64:d4:66:86:56:60:f5:65:b4:be:4d:c4:c7:
         26:79:cf:7d:2e:b7:bc:95:dd:b5:36:b3:da:8c:09:2c:02:0a:
         b6:65:8e:78:35:e6:b6:ec:31:14:da:20:2e:f8:5f:8f:43:e9:
         35:af:65:6b:c0:4e:70:62:1e:ca:fd:11:bf:f7:a7:ce:8b:3b:
         44:91:2a:c8:05:29:f3:da:da:84:eb:13:4b:03:86:bf:15:8c:
         c4:d3:78:5e:90:75:1a:12:b8:6d:ab:30:5e:3d:19:ea:fd:65:
         24:51:a1:e5:8c:bd:aa:ed:47:ba:f9:78:14:fb:10:95:21:11:
         a8:16:fb:79:ce:fa:72:9a:17:56:c1:0d:bf:3e:55:8b:e9:f9:
         07:ba:eb:2d:7e:0f:50:fb:e8:fd:d1:3c:59:e9:16:63:01:3f:
         1b:94:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org