Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/323830333a633230303a3a2f33322d3438203d3e203232343131.roa
File:                     323830333a633230303a3a2f33322d3438203d3e203232343131.roa (raw, json)
Hash identifier:          WB1vhTEn6tAYs+IrYbY6No2iahq7TU4hGVaAqDw3q3Q=
Subject key identifier:   85:A5:EA:76:06:E2:C7:FB:7F:5A:2D:65:77:23:BA:CC:1E:9A:97:11
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       6F82C46F4047873548E1EA1CA09FA36AF11BC7F4
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/323830333a633230303a3a2f33322d3438203d3e203232343131.roa
Signing time:             Tue 05 Mar 2024 17:53:12 +0000
ROA not before:           Tue 05 Mar 2024 17:48:12 +0000
ROA not after:            Tue 04 Mar 2025 17:53:12 +0000
asID:                     22411
IP address blocks:        2803:c200::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:82:c4:6f:40:47:87:35:48:e1:ea:1c:a0:9f:a3:6a:f1:1b:c7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Mar  5 17:48:12 2024 GMT
            Not After : Mar  4 17:53:12 2025 GMT
        Subject: CN=85A5EA7606E2C7FB7F5A2D657723BACC1E9A9711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:9b:19:41:79:fb:4a:e3:0b:00:b3:f4:d7:
                    60:1e:6b:17:07:6c:3d:4f:a5:0c:1f:9a:c5:49:b6:
                    fa:9a:fc:95:cb:74:2a:13:a8:c5:1c:a5:26:70:18:
                    af:4c:f7:6f:11:c0:56:3f:2c:60:47:5a:49:8f:df:
                    7d:6e:3b:51:ed:01:f8:a2:72:9a:f2:fc:c5:8e:af:
                    3e:1f:7b:62:5e:ef:fd:6d:36:85:de:17:73:f9:27:
                    d7:49:d5:d3:10:77:d6:04:c7:49:17:69:df:d0:05:
                    e9:d2:35:41:cd:04:7c:c2:1e:14:e2:ad:45:36:c9:
                    b6:51:5c:d8:e2:88:86:83:72:26:d9:76:10:14:64:
                    a9:8c:b1:21:6b:1a:c9:ce:94:8c:f3:85:4e:9f:7d:
                    9d:db:7a:39:10:cc:5c:6e:ac:56:c1:22:b3:3d:3a:
                    63:ad:5a:0e:f4:29:a1:ef:cb:5d:99:f5:04:8f:c5:
                    f4:11:a6:44:13:86:c0:4d:e0:9f:52:53:39:5d:c2:
                    03:8b:20:6f:2b:3f:f3:f9:6e:30:17:b2:61:a1:48:
                    a9:96:f3:a6:8c:79:37:21:b0:7c:7f:50:09:bf:f7:
                    eb:e2:0b:d8:44:e8:57:14:1a:d7:26:f2:4f:f1:b6:
                    df:a0:09:c1:3f:ee:a4:97:75:70:a5:1d:5b:06:df:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A5:EA:76:06:E2:C7:FB:7F:5A:2D:65:77:23:BA:CC:1E:9A:97:11
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/323830333a633230303a3a2f33322d3438203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c200::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:6d:8a:2a:ed:75:b9:b5:3c:96:95:62:dc:85:f8:1e:3d:
         3d:5d:38:81:d8:a9:f3:07:d0:5a:78:8a:7a:34:a1:91:ca:39:
         56:0c:d4:65:ff:07:1e:70:d5:25:d7:ec:6d:be:27:f4:1f:8a:
         3b:3b:e6:d2:c6:21:ce:2b:6c:7d:15:9d:8c:84:3f:fb:2a:dd:
         97:e0:9b:9a:f8:43:ed:61:ce:67:7f:60:7a:a5:4f:99:4e:cd:
         39:c5:f6:21:52:b9:28:d7:5a:09:2b:6e:21:64:f0:df:07:52:
         dc:2a:74:8e:5c:e8:71:90:3e:aa:bd:92:d6:ff:2a:ee:1e:9b:
         de:91:a9:a1:f5:d5:15:a0:91:0f:7a:ee:06:96:08:41:cc:2d:
         63:b0:57:18:d4:3f:0e:81:ba:96:74:87:14:70:b9:f6:5e:45:
         0d:9a:f5:38:e9:52:aa:ce:53:74:18:f6:07:6c:2d:ac:56:df:
         cd:33:de:b9:24:42:59:f7:09:64:bb:1c:8a:a3:55:c0:62:53:
         a1:b0:31:9e:5d:60:00:77:87:d3:c1:9d:66:7e:45:c5:10:02:
         f8:0f:22:b5:15:ed:71:bc:20:d9:fb:80:90:a4:0b:c2:db:93:
         7e:fd:46:db:ec:4a:de:e9:ac:56:23:d4:2e:7d:e4:db:b4:0c:
         53:26:2c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org