Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          e3awggiwnAelSsRkehVLJK3tX1cOIioBnWao9uxtRCY=
Subject key identifier:   19:F0:A0:99:58:C4:60:2D:9B:D3:D7:46:62:9E:2D:F8:BF:8C:C9:DF
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       53869619D16C7133DDD5F11924F37C995FB17932
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:16 +0000
ROA not before:           Tue 05 Mar 2024 18:12:16 +0000
ROA not after:            Tue 04 Mar 2025 18:17:16 +0000
asID:                     27818
IP address blocks:        2803:3380:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:86:96:19:d1:6c:71:33:dd:d5:f1:19:24:f3:7c:99:5f:b1:79:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:16 2024 GMT
            Not After : Mar  4 18:17:16 2025 GMT
        Subject: CN=19F0A09958C4602D9BD3D746629E2DF8BF8CC9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:6e:26:be:d3:ab:c9:a1:19:df:d1:6c:7f:
                    dc:48:ca:60:8c:53:e4:1a:a1:9d:2f:d7:6e:9d:9c:
                    fa:c7:f6:b9:0c:e3:5d:b0:f2:12:f7:5f:3e:be:e7:
                    dc:8d:9b:e3:4d:d5:97:20:e3:30:bc:3c:87:84:18:
                    db:a6:18:de:ac:ac:ed:e3:a7:20:44:db:bd:4f:92:
                    ef:e2:58:a8:fa:5c:b8:7a:45:db:9e:10:9c:db:f8:
                    ad:fd:56:ae:f9:51:96:3c:db:ce:40:49:fe:ce:aa:
                    f0:1c:05:72:ab:97:03:f0:9c:8d:fd:e3:ba:8a:bb:
                    26:ae:fc:01:72:c4:66:e8:07:ca:f7:64:54:13:58:
                    bc:63:f1:60:38:db:e1:79:e2:c4:23:f8:e5:71:4f:
                    32:b0:92:a4:25:ee:33:db:50:57:55:3a:21:75:ee:
                    16:d2:a5:fe:3f:c5:f7:dc:3d:b7:77:16:a6:6a:88:
                    a6:16:58:b6:84:a8:16:30:75:0d:9b:1f:1b:f8:70:
                    05:cb:3e:d7:11:b3:1e:ee:a6:68:47:d3:02:ad:72:
                    dc:ef:20:7d:ea:11:17:74:a7:6d:93:3e:de:fb:b0:
                    5a:72:87:25:ff:96:45:be:5d:41:76:54:4d:86:21:
                    42:44:9b:29:73:2a:20:aa:84:0b:7d:3c:77:41:9b:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F0:A0:99:58:C4:60:2D:9B:D3:D7:46:62:9E:2D:F8:BF:8C:C9:DF
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:cb:dc:90:c2:5d:2d:99:27:85:0e:43:6d:49:6d:94:99:
         bf:ec:54:33:cd:78:9c:d0:20:e9:7e:fc:be:24:9d:84:5c:a0:
         bf:ff:2d:25:62:4e:26:cf:e3:89:66:3e:cf:fa:dc:bd:db:b6:
         ad:8f:2a:c3:0c:dc:64:96:2b:da:a0:8a:6a:e3:30:5f:e5:77:
         71:ac:d6:d9:22:93:fd:47:91:56:d1:31:03:da:fe:11:47:64:
         c0:43:98:56:79:04:13:d9:03:7f:c1:93:26:a7:2b:f4:84:75:
         33:85:5a:23:b1:d7:bd:15:d9:1b:9d:4c:3b:3d:10:bb:72:96:
         d9:4e:14:29:a5:04:9e:5d:7d:d6:a1:a7:02:40:cd:87:d2:82:
         11:c5:5d:8f:35:d3:81:ba:e3:c3:92:96:dd:14:6e:de:e6:60:
         93:df:05:37:1e:81:bc:3c:1c:4b:64:b3:3a:e8:31:98:3f:e2:
         2a:7c:f6:fa:bd:3b:0b:b2:0e:e8:5f:33:bb:e7:38:79:26:89:
         ad:df:8d:14:cd:91:b3:b6:9f:c1:58:df:b3:b9:38:8e:32:ec:
         5c:8b:da:ba:4f:37:87:7d:ce:c9:50:9d:08:98:53:01:28:32:
         f1:d6:ca:0c:92:29:1e:b7:bc:62:0b:13:c6:40:61:f7:31:18:
         36:44:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 05:56:58 2024 by rpki-client on console-ams.rpki-client.org