Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a3a2f33322d3332203d3e20323733303038.roa
File:                     323830333a623539303a3a2f33322d3332203d3e20323733303038.roa (raw, json)
Hash identifier:          7lHYVBPjvdAt1awJCS2r6lHltv9nwQk5tTu1OiHzUNA=
Subject key identifier:   FE:B7:21:06:C5:3B:FE:27:50:8B:D8:5D:5C:0E:8D:1B:23:35:EA:BD
Certificate issuer:       /CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
Certificate serial:       5369D212E7EE202D9BF2A7C26145B1DC20711F04
Authority key identifier: D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a3a2f33322d3332203d3e20323733303038.roa
Signing time:             Tue 05 Mar 2024 17:46:44 +0000
ROA not before:           Tue 05 Mar 2024 17:41:44 +0000
ROA not after:            Tue 04 Mar 2025 17:46:44 +0000
asID:                     273008
IP address blocks:        2803:b590::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:69:d2:12:e7:ee:20:2d:9b:f2:a7:c2:61:45:b1:dc:20:71:1f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
        Validity
            Not Before: Mar  5 17:41:44 2024 GMT
            Not After : Mar  4 17:46:44 2025 GMT
        Subject: CN=FEB72106C53BFE27508BD85D5C0E8D1B2335EABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:bf:03:63:2c:d1:9f:e6:e0:f6:10:32:8c:
                    93:ce:ad:80:57:b2:a9:39:eb:2e:20:93:17:e1:90:
                    22:05:68:40:2d:47:5a:a7:e3:29:34:21:fc:54:9a:
                    09:59:13:a4:c0:b2:c3:33:93:09:cf:61:fc:4c:b5:
                    b1:47:59:c4:4d:6d:ba:51:16:ce:31:19:8e:33:fc:
                    3b:2c:92:c6:05:43:1c:16:9a:8d:08:f3:fa:b9:33:
                    86:bf:5e:b9:83:43:06:a4:f7:a6:24:62:d7:a5:8d:
                    1e:73:40:38:d4:02:0a:dc:1f:a8:80:d0:4e:bf:77:
                    8e:4a:0a:df:8d:11:c0:50:d4:a3:80:04:e7:37:49:
                    c3:88:c5:2c:bb:f4:92:ce:37:2f:73:72:88:65:33:
                    31:8d:eb:da:23:1e:da:72:67:a3:8e:15:47:d7:0e:
                    e1:88:24:0b:00:eb:cc:42:f0:de:ce:d0:a3:7e:90:
                    a9:2d:bc:4d:ea:50:17:d4:c1:92:97:eb:27:dd:98:
                    f3:7f:3a:d9:c1:21:ba:50:04:b0:17:a5:bd:b8:d9:
                    d7:08:83:d2:79:74:1e:39:49:e7:34:1f:26:91:ec:
                    0d:75:1c:31:17:1e:21:a4:b5:14:47:bb:69:8c:f5:
                    19:2f:e4:94:48:e5:7a:90:f0:42:64:41:70:af:53:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B7:21:06:C5:3B:FE:27:50:8B:D8:5D:5C:0E:8D:1B:23:35:EA:BD
            X509v3 Authority Key Identifier:
                keyid:D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a3a2f33322d3332203d3e20323733303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:86:4f:c8:06:74:46:ec:52:21:a3:94:bf:a9:41:3e:7d:79:
         7b:89:0a:59:90:74:a3:ca:d1:56:11:27:aa:b6:32:d2:92:a2:
         34:5f:2f:06:64:1e:5e:74:f6:1c:70:e0:df:7f:47:18:bc:29:
         de:0b:06:df:de:81:f7:66:8d:59:5b:90:6b:1c:fc:b9:06:2b:
         13:92:ae:83:17:c2:74:83:73:d5:14:06:62:52:6a:10:80:7b:
         76:42:21:d9:09:3c:2a:f2:28:e8:5f:97:da:17:9d:6e:87:b2:
         c8:a2:52:a7:2d:e8:94:b6:5c:04:60:51:ea:88:0f:93:3e:60:
         60:98:f3:6a:7a:5e:9c:06:d4:7c:94:c0:ac:58:3b:5e:ee:dc:
         87:94:20:bc:f7:64:83:bd:54:ae:e5:81:eb:da:65:5e:5b:5a:
         2a:11:2e:9c:e1:a2:b3:f7:5c:5b:33:3e:91:2b:35:28:bf:43:
         97:b7:71:85:28:dd:02:d2:f7:f8:aa:e1:82:07:20:39:7b:02:
         37:da:fa:f9:ab:8c:ba:71:f3:57:d0:c5:33:1a:58:5c:d2:0a:
         7c:57:3a:e1:d7:02:3e:f6:b2:00:32:4d:07:4c:bc:dd:89:63:
         dd:7d:40:69:16:cd:73:5d:91:1b:57:73:ea:b5:35:cf:a7:ee:
         2f:81:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:01 2024 by rpki-client on console-ams.rpki-client.org