Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f33322d3332203d3e20323032343030.roa
File:                     323830333a323931303a3a2f33322d3332203d3e20323032343030.roa (raw, json)
Hash identifier:          zsmXF4oj/WkfwEq1NOS+cBGbJSfGNFBbndVrqtRlu6Y=
Subject key identifier:   96:51:4E:35:98:F6:E2:24:2D:8F:25:47:F1:BE:C3:BD:16:58:1F:13
Certificate issuer:       /CN=57A629CEA654B6DF75A8F8D31C9F9809008350C8
Certificate serial:       1B194C4BCC2360E6B55DBEC74AFFE832312A6216
Authority key identifier: 57:A6:29:CE:A6:54:B6:DF:75:A8:F8:D3:1C:9F:98:09:00:83:50:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f33322d3332203d3e20323032343030.roa
Signing time:             Tue 05 Mar 2024 17:51:14 +0000
ROA not before:           Tue 05 Mar 2024 17:46:14 +0000
ROA not after:            Tue 04 Mar 2025 17:51:14 +0000
asID:                     202400
IP address blocks:        2803:2910::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:19:4c:4b:cc:23:60:e6:b5:5d:be:c7:4a:ff:e8:32:31:2a:62:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A629CEA654B6DF75A8F8D31C9F9809008350C8
        Validity
            Not Before: Mar  5 17:46:14 2024 GMT
            Not After : Mar  4 17:51:14 2025 GMT
        Subject: CN=96514E3598F6E2242D8F2547F1BEC3BD16581F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:c8:cb:06:36:c3:ba:33:81:dd:fd:91:46:
                    b1:88:ab:ef:f7:58:dd:05:be:81:87:40:24:2b:e8:
                    75:a3:88:96:59:e1:78:c4:76:ee:61:ee:58:f5:93:
                    67:35:1e:43:0f:fb:c7:bb:ad:c9:f9:4a:c1:94:eb:
                    56:23:77:35:01:e7:ff:b7:e5:c5:30:19:c9:db:3c:
                    04:c6:52:f6:b7:19:17:83:86:da:80:82:0b:f4:bc:
                    96:ab:8b:e6:96:cd:b2:bf:0b:c4:03:8a:e5:6c:c4:
                    77:dd:da:3e:59:bf:54:42:62:e5:aa:c1:5e:4e:5d:
                    ce:5d:4a:bb:e9:a7:1e:67:96:b6:ea:9c:19:97:c6:
                    d8:f1:7f:40:b9:94:a5:34:e6:b7:95:f1:a6:d8:b4:
                    47:36:66:95:08:cb:3d:0a:ca:d4:39:8f:6b:ad:5a:
                    44:d4:66:b7:6a:6d:b0:07:aa:0c:5d:87:7b:f4:4e:
                    15:f5:f3:2b:f5:0b:91:32:63:75:8b:d5:42:42:74:
                    8d:d9:85:ff:d7:1f:0d:ea:5e:42:2f:9e:c3:8f:0d:
                    c6:0b:01:4e:b1:ba:e0:fc:d4:bd:c6:0f:68:dc:95:
                    b5:30:e1:24:06:e8:18:3a:42:20:91:09:0b:5c:23:
                    02:65:e9:a7:20:b7:a8:ae:89:83:c9:60:c6:24:33:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:51:4E:35:98:F6:E2:24:2D:8F:25:47:F1:BE:C3:BD:16:58:1F:13
            X509v3 Authority Key Identifier:
                keyid:57:A6:29:CE:A6:54:B6:DF:75:A8:F8:D3:1C:9F:98:09:00:83:50:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f33322d3332203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2910::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:45:a1:b7:30:88:68:6e:0f:a1:82:88:ed:12:7a:83:17:
         80:82:34:9c:50:56:52:78:13:8f:9a:d5:9c:8c:fb:2a:49:7c:
         34:b8:db:ae:3c:84:b0:06:bc:ce:a9:23:83:8e:b9:3b:e2:fd:
         57:16:a5:9f:20:1f:d8:35:31:3c:f4:5b:e6:fb:14:c0:90:2b:
         b9:6b:14:57:a6:7f:3a:7f:50:fa:c2:c2:97:27:62:8e:54:86:
         42:d6:29:2b:52:53:c2:a4:fb:2f:72:f8:53:98:a4:e4:bc:d9:
         56:f0:16:1b:0e:68:68:df:15:81:1c:99:31:bf:e2:48:4d:a2:
         5d:f4:09:53:c9:6e:76:96:54:d5:d0:52:0f:dc:6e:6d:30:be:
         0a:a5:89:ae:62:48:17:cb:96:2f:7b:14:14:54:de:3a:db:a7:
         8d:44:9a:00:58:87:b2:4d:35:0e:12:e6:64:f1:73:e8:4f:a2:
         1f:8e:ef:64:94:66:a0:6b:8f:00:d3:00:96:41:32:dd:12:48:
         90:af:fd:1b:c5:c9:a5:9b:c5:90:52:c4:84:bd:fe:88:ea:df:
         90:4d:93:1b:11:cd:36:30:15:0c:d8:cf:1b:5a:f9:b5:5c:b2:
         0b:e6:8c:dd:48:55:43:34:46:3a:bc:a9:ca:f6:78:6e:3c:2f:
         46:74:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:42:04 2024 by rpki-client on console-fra.rpki-client.org