Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa
File:                     323830333a326632303a3a2f33322d3634203d3e20323636373639.roa (raw, json)
Hash identifier:          DB3moEK/FZNneOplp4Hh3Yj7opAypcWLm7H3O+vzAhU=
Subject key identifier:   C2:A0:D2:FF:CA:75:4A:79:D2:BC:B8:12:4A:78:40:BB:5A:47:BC:05
Certificate issuer:       /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial:       1081A627AAD360E6A4FC51BE9C58F06FE094FFF2
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa
Signing time:             Tue 05 Mar 2024 18:18:33 +0000
ROA not before:           Tue 05 Mar 2024 18:13:33 +0000
ROA not after:            Tue 04 Mar 2025 18:18:33 +0000
asID:                     266769
IP address blocks:        2803:2f20::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:81:a6:27:aa:d3:60:e6:a4:fc:51:be:9c:58:f0:6f:e0:94:ff:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
        Validity
            Not Before: Mar  5 18:13:33 2024 GMT
            Not After : Mar  4 18:18:33 2025 GMT
        Subject: CN=C2A0D2FFCA754A79D2BCB8124A7840BB5A47BC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:d0:36:b6:f5:1a:ab:d0:c6:ba:f8:f4:6e:
                    5f:8c:72:50:23:b5:26:0e:29:5c:99:f5:e8:a9:67:
                    06:5d:d8:71:5a:e4:db:89:67:91:56:ae:ad:b9:f1:
                    59:35:8e:d3:77:5f:c2:f0:15:a3:82:44:2a:cb:29:
                    0c:53:cf:f5:4c:95:82:b4:8c:de:0b:bc:f9:4a:51:
                    5c:d1:bd:d8:50:e1:3a:22:27:75:30:fa:c4:c7:f5:
                    ec:47:12:cb:b0:b7:ec:a2:dd:29:9e:07:be:30:73:
                    e2:a9:fb:5d:78:be:54:eb:ab:43:53:c2:af:20:b2:
                    13:4d:db:5b:00:19:63:75:ee:50:d1:86:47:04:fe:
                    6b:5b:4a:65:22:16:d7:a9:7a:19:96:c2:95:b5:be:
                    1b:9d:9a:be:8c:c3:07:c8:a2:f2:31:db:ca:46:d0:
                    bd:eb:76:d2:20:3d:50:38:d1:14:c2:28:64:8a:d8:
                    6a:c3:89:c2:9a:70:06:46:5c:ba:5d:7b:18:53:23:
                    ac:26:9a:e6:a3:4b:c5:8e:7c:2c:2c:02:e2:06:5e:
                    f1:42:ec:4f:cc:cc:8d:c7:41:b7:3f:d3:ec:5e:d2:
                    71:48:b1:07:51:05:ff:55:1f:3a:1a:4b:9e:c2:b2:
                    6a:dd:8d:ee:08:9a:2f:29:14:b5:aa:c8:0f:fa:97:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:D2:FF:CA:75:4A:79:D2:BC:B8:12:4A:78:40:BB:5A:47:BC:05
            X509v3 Authority Key Identifier:
                keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/323830333a326632303a3a2f33322d3634203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:06:d3:8e:9e:07:34:00:02:a9:58:64:13:c9:75:8c:77:a2:
         41:c1:21:ce:09:35:85:3b:8e:fd:1a:9a:62:f3:86:d2:47:aa:
         71:da:b3:c0:c2:6c:96:3c:30:4c:7a:f2:dd:8a:a3:25:8e:15:
         48:36:86:ef:39:b1:64:49:70:09:18:d6:85:a7:1a:6c:d0:92:
         a6:f6:23:6d:d4:af:d5:bb:3a:4c:46:30:ae:c6:e2:23:38:3c:
         76:e4:1b:88:a1:66:c6:ef:0c:f7:d4:10:0f:fe:fd:c5:38:28:
         be:39:0d:1e:ac:eb:47:97:33:40:ad:8f:67:64:d2:3a:8e:1d:
         8e:83:1f:b6:f4:2e:5f:15:73:43:8d:b5:1e:e6:83:25:53:8d:
         35:a7:eb:ba:05:75:76:16:e3:13:10:2e:c7:57:58:28:a8:98:
         0f:11:b0:07:e1:08:f9:1a:fc:81:1e:05:d3:e8:77:d5:c5:61:
         96:5c:8a:ca:f1:27:3f:ea:4c:b2:32:13:e0:3a:51:1c:02:f3:
         d7:37:5a:d2:9a:2f:c8:00:55:2f:83:9a:8b:87:05:85:a3:39:
         d1:aa:b1:d5:10:90:b8:97:87:60:3f:b9:71:09:97:2d:bc:b0:
         26:4c:33:e2:0c:dd:89:ac:2a:f8:db:b3:f9:3f:d2:4b:15:03:
         11:1d:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:54 2024 by rpki-client on console-fra.rpki-client.org