Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6430303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a6430303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          xD8LV6F7SMkw28hBBUfZMqT1UDtBzITc3hrVbw0GRIQ=
Subject key identifier:   75:22:9F:F4:C8:B8:B1:26:A1:83:CA:4D:5F:30:55:4F:BD:C0:F0:48
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       14F7D07BCE85194AB65A34145DC5532609249E9D
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6430303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:02 +0000
ROA not before:           Tue 30 Apr 2024 04:50:02 +0000
ROA not after:            Tue 29 Apr 2025 04:55:02 +0000
asID:                     273192
IP address blocks:        2803:650:d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f7:d0:7b:ce:85:19:4a:b6:5a:34:14:5d:c5:53:26:09:24:9e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:02 2024 GMT
            Not After : Apr 29 04:55:02 2025 GMT
        Subject: CN=75229FF4C8B8B126A183CA4D5F30554FBDC0F048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:e8:cb:75:07:4b:76:b6:21:e3:78:e7:5d:
                    d4:f9:25:92:f7:0f:36:68:1d:88:62:19:fc:4b:35:
                    1c:54:5c:66:f0:ab:8c:d8:f8:fa:af:0c:4a:ee:d6:
                    88:fe:a9:45:53:6b:fe:d8:11:b3:5d:62:76:4e:ec:
                    2c:46:f8:87:d7:02:55:5b:90:07:ea:9d:a9:82:39:
                    2d:4c:52:d6:6d:fe:4a:86:4f:d4:88:26:37:8b:6a:
                    3e:f5:96:8c:7c:7e:41:b3:29:69:af:83:98:75:f4:
                    60:86:3d:3d:f0:87:47:2e:59:54:53:5c:c0:7d:d4:
                    c5:e3:41:bb:82:66:41:4e:0f:06:b6:ac:00:7a:f4:
                    85:27:c2:7c:ae:9f:6d:26:e3:09:29:ff:4f:32:ed:
                    df:8d:1b:6a:4f:dc:61:27:a0:86:d7:58:10:ee:b6:
                    da:61:ee:5d:f7:43:3f:5e:be:1c:fb:7b:20:92:4f:
                    68:7f:d7:aa:43:fa:50:e4:de:2e:70:ac:fe:46:a6:
                    e8:49:2e:6d:e5:9b:a1:03:03:0d:c0:03:47:34:30:
                    b8:ee:f4:b7:fa:2e:cc:7f:12:b3:f4:62:4b:1d:12:
                    78:0a:65:d4:07:60:5c:a3:58:39:f7:a3:9a:5a:5d:
                    7c:5b:c6:56:78:1c:4a:a5:96:7a:cd:d2:2b:bb:52:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:9F:F4:C8:B8:B1:26:A1:83:CA:4D:5F:30:55:4F:BD:C0:F0:48
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6430303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:45:fc:80:2e:9e:b2:3b:29:28:28:dd:42:b2:8f:75:65:
         46:49:82:a8:95:42:ec:94:c4:4e:fd:e0:a6:1d:c1:e5:57:79:
         b4:60:6a:b8:b0:b3:3c:86:28:85:c7:25:80:f8:14:f9:ef:7e:
         a6:ed:05:22:e5:a0:1b:39:bf:56:e5:dc:0e:92:09:aa:e5:ec:
         e6:65:1e:6a:f6:67:7f:e3:48:9e:de:70:93:91:1f:05:9d:36:
         f8:9f:a4:71:9f:04:22:ce:fb:d8:92:a3:7a:c8:f8:6e:78:70:
         81:66:27:37:89:63:28:2b:52:76:bc:98:8d:60:9e:4d:e4:f5:
         28:2a:b2:e0:e1:64:89:b9:3d:77:12:bd:6c:de:73:bf:c5:f6:
         27:62:9b:d3:1c:f9:a9:cf:81:f7:f5:af:ae:24:76:88:6d:e3:
         54:a2:53:9a:f1:ba:fb:73:46:f6:00:4b:dc:48:2e:b0:98:d4:
         8f:e7:14:5a:ef:90:2b:f5:1f:64:43:3e:f7:fc:cd:87:24:91:
         7e:62:69:64:59:a8:3e:40:6d:b0:34:3b:37:75:e1:a2:75:6d:
         d9:1f:74:fa:5f:2b:f2:c7:a7:b3:cb:e3:f3:fd:b7:09:eb:6b:
         c9:a0:08:22:41:72:6f:98:a8:f7:7f:2d:c9:3b:ac:fe:65:ce:
         1e:68:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org