Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa
File:                     323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa (raw, json)
Hash identifier:          oKQFkm2898LvOh7Bxejdl+x0Lwt5WdKosPDA2dDm+pQ=
Subject key identifier:   46:3E:A1:85:BF:29:C6:66:D7:AF:DB:1E:D9:07:D4:2E:37:BC:13:E6
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       457B5E2ABAE52B08FA629BC4E444994FC0F201B0
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa
Signing time:             Wed 28 Aug 2024 20:30:00 +0000
ROA not before:           Wed 28 Aug 2024 20:25:00 +0000
ROA not after:            Wed 27 Aug 2025 20:30:00 +0000
asID:                     267914
IP address blocks:        2803:8e60:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7b:5e:2a:ba:e5:2b:08:fa:62:9b:c4:e4:44:99:4f:c0:f2:01:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Aug 28 20:25:00 2024 GMT
            Not After : Aug 27 20:30:00 2025 GMT
        Subject: CN=463EA185BF29C666D7AFDB1ED907D42E37BC13E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:cc:b2:92:f2:8c:35:2f:20:d4:30:41:a2:
                    91:f9:d1:59:13:21:16:be:73:98:01:80:38:48:79:
                    6c:4b:0c:94:0b:4a:28:11:25:2c:b6:48:b4:98:e0:
                    52:f9:af:b4:22:64:b5:53:ec:d8:38:ba:93:f0:29:
                    33:d8:db:cd:66:c1:fb:7f:5b:8a:60:cf:07:3d:30:
                    ce:fd:21:a5:fb:b4:3c:02:91:1d:5b:d6:e4:77:27:
                    be:c6:71:32:ae:0c:09:f2:49:ba:f0:9d:6b:61:c5:
                    0b:ba:04:ca:6c:a8:fd:08:4e:34:0d:b1:91:4d:a6:
                    70:8f:09:31:27:86:59:8a:a7:57:ef:90:1a:4e:67:
                    a4:f6:0d:15:a4:4a:22:03:b5:6c:33:f7:98:04:2f:
                    8c:0e:0c:61:0c:33:11:41:f5:8b:2a:5a:e7:6f:ac:
                    0e:c2:d7:61:fe:f2:13:e0:c1:ea:e3:86:8c:a2:56:
                    e0:bd:01:86:3f:ad:60:6b:3b:47:77:b1:e4:29:ed:
                    10:78:c6:fe:86:ae:e1:36:33:76:c0:7f:1e:70:3f:
                    9f:47:21:12:8c:c5:c7:31:e9:90:49:4b:3f:9c:74:
                    7a:61:d4:bd:c9:3c:c8:bd:07:c1:f4:ff:77:ff:9c:
                    e7:3d:4d:44:c7:58:07:69:07:5a:1c:2a:e7:a3:5a:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3E:A1:85:BF:29:C6:66:D7:AF:DB:1E:D9:07:D4:2E:37:BC:13:E6
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/323830333a386536303a383030303a3a2f33332d3333203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e60:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:f3:5f:05:1c:8c:d3:9f:c4:84:a9:f0:c4:dc:66:e6:70:f9:
         ef:dd:a6:3c:f7:b7:ae:e0:71:26:34:8e:7d:7b:0a:d2:3d:f1:
         b3:f2:1f:08:88:ad:aa:9f:ab:2d:b5:9c:68:fd:01:4c:23:db:
         d1:a3:ed:ed:72:6b:5d:21:ef:dd:f7:0c:ba:d4:ab:b1:0d:fb:
         27:1a:47:a4:94:82:33:ee:c9:4c:43:71:93:ef:16:5d:51:ca:
         fb:3b:36:5a:d4:c2:82:5a:66:a1:fd:6a:16:b6:16:92:b7:62:
         c2:b5:cc:66:3b:95:78:ad:04:0d:30:66:c5:4c:92:51:0e:66:
         01:8d:12:fe:97:b7:8e:5f:a2:30:5f:10:af:11:59:69:27:a0:
         79:0c:85:17:d3:97:c7:df:38:6d:fd:49:31:73:5b:b3:b9:26:
         ef:6a:78:9d:2d:c1:e0:e5:6e:40:d8:5b:92:ee:ab:39:00:0f:
         11:1f:95:58:22:97:2a:44:1d:6a:fc:c3:cc:6f:30:e0:73:5a:
         15:14:4d:63:2c:9a:f3:f3:1c:cb:fa:5f:ab:8d:a2:ce:8a:a1:
         82:69:80:1b:d8:20:38:f3:6d:42:4b:9f:de:45:4e:c6:09:b7:
         a8:4b:26:20:fa:5b:ad:29:8f:9c:30:a3:3f:59:11:07:17:28:
         20:2f:e3:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org