Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/323830333a613238303a3a2f33322d3438203d3e20323633323132.roa
File:                     323830333a613238303a3a2f33322d3438203d3e20323633323132.roa (raw, json)
Hash identifier:          hjBejtBGQtpwlUWzrxRiyRB/WTpT1f9t2Hi+8Tu99lk=
Subject key identifier:   BD:BD:8B:1F:33:7B:F1:AD:D6:36:4F:90:C1:DD:0A:D2:1C:29:0B:EE
Certificate issuer:       /CN=AFBD0215C0EE827E1DDF72219656649845EB2918
Certificate serial:       3686B86687D4B2FDD60D49CCAD2E38F1AA5C20B4
Authority key identifier: AF:BD:02:15:C0:EE:82:7E:1D:DF:72:21:96:56:64:98:45:EB:29:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/323830333a613238303a3a2f33322d3438203d3e20323633323132.roa
Signing time:             Tue 05 Mar 2024 18:12:17 +0000
ROA not before:           Tue 05 Mar 2024 18:07:17 +0000
ROA not after:            Tue 04 Mar 2025 18:12:17 +0000
asID:                     263212
IP address blocks:        2803:a280::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:86:b8:66:87:d4:b2:fd:d6:0d:49:cc:ad:2e:38:f1:aa:5c:20:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBD0215C0EE827E1DDF72219656649845EB2918
        Validity
            Not Before: Mar  5 18:07:17 2024 GMT
            Not After : Mar  4 18:12:17 2025 GMT
        Subject: CN=BDBD8B1F337BF1ADD6364F90C1DD0AD21C290BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:56:d8:9f:b4:a0:4c:a0:39:7e:22:dd:57:ed:
                    83:7a:60:0f:84:c3:eb:25:65:66:42:88:d8:dd:26:
                    6a:d8:2a:df:f6:47:ac:e9:83:26:20:76:b2:58:d4:
                    ed:d3:79:58:94:19:e3:0c:1e:d0:11:8b:cb:3d:f8:
                    6e:06:57:6e:38:e1:20:13:79:3f:25:da:91:96:46:
                    f0:a9:f7:31:7d:da:1c:af:be:16:b2:b5:4f:83:fa:
                    9d:89:22:bf:f4:57:af:ed:fd:04:8e:cc:20:09:62:
                    2d:0d:a0:c4:82:41:05:c8:58:f7:b1:ec:fe:21:90:
                    6a:88:88:b2:21:26:e8:c8:27:23:02:2f:04:99:a3:
                    62:2e:c9:fe:b8:c7:95:70:04:3e:87:e7:41:3e:c9:
                    44:a8:98:f2:1d:75:ef:58:9e:ba:40:27:3f:c8:c9:
                    4b:02:12:e7:db:ae:17:c5:5f:d2:87:45:c0:3c:8b:
                    0a:fc:9a:02:d9:f4:95:08:03:67:6c:ec:2d:10:71:
                    1d:db:8b:92:81:ab:84:af:19:14:2c:95:d5:5e:83:
                    19:6a:4a:26:e0:ae:45:d5:d1:0d:0b:16:b9:23:2d:
                    4b:70:eb:43:48:8a:3e:0c:5f:2a:3a:c7:09:f0:b3:
                    64:ab:1c:6b:88:04:89:c6:ee:40:51:98:b3:1a:15:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:8B:1F:33:7B:F1:AD:D6:36:4F:90:C1:DD:0A:D2:1C:29:0B:EE
            X509v3 Authority Key Identifier:
                keyid:AF:BD:02:15:C0:EE:82:7E:1D:DF:72:21:96:56:64:98:45:EB:29:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/AFBD0215C0EE827E1DDF72219656649845EB2918.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFBD0215C0EE827E1DDF72219656649845EB2918.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242AEDB377C5F1D98258FE4094FBF43D38725E4C14FBA584E1FDA9AAD5564B6/0/323830333a613238303a3a2f33322d3438203d3e20323633323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a280::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:56:90:0a:6f:c9:c6:1a:09:79:60:2e:7b:66:45:95:fc:ae:
         95:e6:ec:f4:72:7c:88:f4:6d:d7:8f:03:8d:a9:b5:5b:f6:18:
         0d:6f:55:82:55:18:3d:89:f7:d9:fa:6d:ae:a2:03:a8:4c:02:
         81:a9:ef:93:c1:98:45:30:1b:16:53:86:35:d5:d4:48:23:19:
         bd:41:a3:26:b3:d4:26:5d:54:c2:2d:56:52:f7:63:09:f3:70:
         24:96:3f:22:f2:ff:74:cb:24:3d:7d:55:e8:8d:56:35:1f:47:
         b4:e9:3e:db:f5:e4:a1:68:46:0f:f3:b6:87:23:dc:0f:66:e3:
         bc:c4:60:c2:d2:01:eb:c3:e5:36:7d:6d:b2:d5:04:4c:ae:53:
         01:88:c5:8e:4e:77:b2:b5:1a:6e:0f:34:de:03:b3:42:cd:26:
         ba:92:3b:32:f5:b3:05:70:84:78:a9:13:32:13:cb:af:c9:f0:
         ca:b6:66:f3:dd:e3:d5:7f:b8:c3:5a:da:97:d5:f7:8a:fb:d8:
         05:d0:13:e1:4b:50:bb:ef:3e:45:2c:fd:39:73:38:f7:be:26:
         9d:f6:2e:04:87:af:26:c8:17:c9:69:c1:62:c7:02:9d:a8:0e:
         d2:13:9e:46:b2:57:f2:c7:a6:28:a0:ad:9c:b8:48:50:0c:4a:
         5a:ea:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org