Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa
File:                     323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa (raw, json)
Hash identifier:          B38PCAFxkcf+RyEh3YCtXmhDqgR9Nvf6ILjFDn+Q68s=
Subject key identifier:   91:6D:9C:0D:09:9C:EE:38:0E:88:76:3D:34:91:92:F0:23:37:49:F5
Certificate issuer:       /CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595
Certificate serial:       05791E2086D381B5790BA6869E921728AC17DB20
Authority key identifier: C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa
Signing time:             Fri 24 May 2024 04:00:00 +0000
ROA not before:           Fri 24 May 2024 03:55:00 +0000
ROA not after:            Fri 23 May 2025 04:00:00 +0000
asID:                     272946
IP address blocks:        2803:4990:1300::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:79:1e:20:86:d3:81:b5:79:0b:a6:86:9e:92:17:28:ac:17:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595
        Validity
            Not Before: May 24 03:55:00 2024 GMT
            Not After : May 23 04:00:00 2025 GMT
        Subject: CN=916D9C0D099CEE380E88763D349192F0233749F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:b9:6a:56:a0:f2:86:5c:09:c1:05:e7:6b:
                    7d:01:ab:e3:60:f2:0b:4e:6d:ed:c7:9a:bb:09:71:
                    31:06:5e:ca:ce:70:19:51:4d:a5:d0:2d:ad:83:09:
                    6b:3a:73:cc:d4:33:8f:5c:61:12:a5:ea:60:d9:d6:
                    b7:f4:0d:d5:f7:b4:ab:6d:2a:73:6f:53:32:e7:df:
                    1b:43:c6:a0:36:e2:84:7e:58:b3:15:71:53:b8:8b:
                    e6:a3:70:98:ab:7a:8d:95:45:21:28:3d:9c:c8:a4:
                    58:4a:93:80:92:1f:8b:ed:ac:50:19:20:c6:3b:69:
                    fc:3a:b8:f3:a3:93:dd:d3:11:6a:e9:0f:9f:5c:b6:
                    b1:fb:5e:06:f5:ac:a8:83:7e:57:f4:e6:f9:8e:21:
                    31:57:8c:f8:48:88:eb:c0:30:1b:80:9e:26:38:88:
                    27:70:b3:a2:ce:2c:d3:a3:92:ef:5b:cf:b7:3a:60:
                    ec:78:c8:95:7f:28:80:66:c7:3e:bc:ff:95:41:19:
                    73:c9:64:c5:d2:57:6e:c1:27:e8:d1:4d:3c:30:64:
                    0e:73:2f:05:56:7a:45:0f:d2:45:52:32:9f:37:bc:
                    bc:6a:01:88:fa:78:79:c2:65:48:59:48:f4:d0:42:
                    3d:71:0b:b0:95:de:b0:02:10:ef:83:7c:ea:22:aa:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6D:9C:0D:09:9C:EE:38:0E:88:76:3D:34:91:92:F0:23:37:49:F5
            X509v3 Authority Key Identifier:
                keyid:C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4990:1300::/41

    Signature Algorithm: sha256WithRSAEncryption
         9c:c2:95:b3:16:e6:a1:16:ae:95:77:cd:4d:4e:4c:9d:10:86:
         38:2e:4e:24:a2:b3:dc:ae:b7:25:50:a1:79:3a:03:87:50:68:
         ad:9b:9f:68:72:04:d1:26:03:6a:2b:3d:52:39:79:da:c6:a7:
         fc:93:ac:e4:b4:81:1a:0c:8b:53:3c:ee:d6:eb:07:9c:28:d0:
         3f:85:e3:8e:d5:eb:1c:83:0d:72:8c:36:db:54:c7:6e:73:9b:
         2e:c4:31:5c:1a:a5:50:c8:b0:6b:18:31:be:91:5a:9d:1d:fb:
         6a:60:3b:ea:96:28:d0:02:f5:bb:12:9b:dd:8b:45:38:fa:4c:
         97:64:20:92:80:26:27:52:8d:e8:a3:ff:89:b3:40:e4:16:92:
         69:03:f4:ee:8e:ba:83:5d:80:65:b4:35:57:0c:80:10:b1:bf:
         8b:ef:46:fb:4c:f9:9e:33:6e:52:0c:0a:81:04:70:b1:2f:3d:
         64:db:b1:d6:e8:f3:51:cb:99:64:28:7a:9e:91:12:9a:34:3d:
         b5:ea:70:1d:95:04:37:a9:cc:19:4c:c1:46:62:41:5c:f4:2c:
         47:6c:dd:88:6c:b6:75:be:7f:0e:f0:97:57:81:a5:12:69:54:
         19:81:a7:d1:6d:e1:7a:63:03:ef:69:f0:06:ad:ed:df:eb:f8:
         6f:85:fc:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 16 23:45:46 2024 by rpki-client on console-ams.rpki-client.org