Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f34382d3438203d3e20323636373734.roa
File:                     323830333a656632303a3a2f34382d3438203d3e20323636373734.roa (raw, json)
Hash identifier:          4oyVgWJzx6j/sXzMGJsGlA0+4kID9U1DTim9Hdz4U3c=
Subject key identifier:   A5:76:CA:38:0C:B2:EF:34:96:6C:30:0F:AA:12:CB:6E:0E:82:B7:13
Certificate issuer:       /CN=1E862F205E27A89B1343A4D62B69B564737D0432
Certificate serial:       619985AEE5B5A460F40D6F57C2E1D60F8294560E
Authority key identifier: 1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f34382d3438203d3e20323636373734.roa
Signing time:             Tue 05 Mar 2024 18:19:23 +0000
ROA not before:           Tue 05 Mar 2024 18:14:23 +0000
ROA not after:            Tue 04 Mar 2025 18:19:23 +0000
asID:                     266774
IP address blocks:        2803:ef20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:99:85:ae:e5:b5:a4:60:f4:0d:6f:57:c2:e1:d6:0f:82:94:56:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E862F205E27A89B1343A4D62B69B564737D0432
        Validity
            Not Before: Mar  5 18:14:23 2024 GMT
            Not After : Mar  4 18:19:23 2025 GMT
        Subject: CN=A576CA380CB2EF34966C300FAA12CB6E0E82B713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:50:ae:25:12:bf:7a:46:99:9d:30:11:f4:
                    9f:74:55:83:24:59:5c:0c:c5:52:04:4c:b9:c8:b9:
                    d3:8b:0d:20:8a:5e:12:2f:0b:93:25:f9:25:dc:d0:
                    f4:66:6f:10:73:ae:ab:5b:3b:f6:40:ab:ee:f3:ea:
                    ad:60:bd:ee:0d:17:e4:55:16:28:26:db:48:00:09:
                    b5:31:60:e5:af:89:8b:ee:d0:66:3d:52:27:7a:98:
                    ec:3a:62:45:d0:6b:09:06:dd:73:fb:3e:bd:6a:a8:
                    97:99:29:b0:b7:45:b2:68:1f:a1:c9:73:21:02:35:
                    3d:50:d1:85:35:3e:09:68:94:24:9e:77:46:c5:8c:
                    99:fc:eb:d4:40:4d:ea:85:1c:41:19:02:6c:86:b8:
                    87:0f:34:77:a0:84:cc:d3:25:e7:fc:d4:ca:e3:6b:
                    c6:09:f2:90:c1:da:15:f0:b8:6b:46:d0:b2:16:22:
                    01:20:5f:5f:b7:ac:e0:a0:6f:22:16:ad:5f:9a:87:
                    29:e4:91:7a:86:23:ab:de:1b:39:ff:79:38:d2:3a:
                    6a:cf:be:a1:1d:cb:e7:88:4b:89:d7:c9:d9:2e:2d:
                    ef:41:a8:b6:cc:d3:65:ae:a7:e8:3c:ec:94:43:75:
                    ed:95:de:18:03:b6:27:fa:17:08:e7:0b:ce:f8:88:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:76:CA:38:0C:B2:EF:34:96:6C:30:0F:AA:12:CB:6E:0E:82:B7:13
            X509v3 Authority Key Identifier:
                keyid:1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/323830333a656632303a3a2f34382d3438203d3e20323636373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ef20::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:a2:59:0d:2e:4e:08:ed:14:89:37:ec:23:47:1f:79:c0:4b:
         90:2d:64:5c:7a:2d:54:69:71:f6:54:01:6d:ab:ce:39:1e:5f:
         d8:e6:2c:bb:b4:5d:cb:0b:cd:7e:0d:ed:a1:ab:ba:0b:59:59:
         14:0f:fd:24:4c:9e:2b:cc:04:89:6a:f5:17:af:57:c2:4f:e5:
         3e:70:63:f6:b9:24:c7:fa:b2:b7:37:21:1b:fe:5c:b2:7f:2e:
         4e:6d:df:3c:e6:a5:cb:fa:2f:0d:61:b5:87:61:80:d4:49:cf:
         f0:a1:82:d2:f7:f2:48:a9:8e:8e:93:0c:9e:59:29:68:8b:79:
         20:af:03:d0:b5:8a:0a:4f:eb:83:c7:96:1c:26:05:ce:39:ee:
         1d:f1:73:e1:8c:f9:ec:ba:ce:fe:29:35:69:7f:45:66:53:7c:
         1e:bd:13:d9:3c:35:69:38:be:a8:29:db:05:07:a6:21:71:b9:
         3e:0b:b2:65:e2:49:77:1c:24:7c:d6:8f:35:50:19:dd:a7:9b:
         f7:09:6c:1f:e2:00:be:31:60:4b:ad:ef:92:0c:54:1b:d3:60:
         bd:46:69:8c:72:08:b6:1c:8f:cd:43:21:18:3a:bf:4a:67:5e:
         89:22:18:14:97:55:f2:45:7e:36:3a:03:3e:4f:c2:3f:c6:54:
         db:23:5f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org