Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/323830333a363661303a3a2f33322d3438203d3e20323636383931.roa
File:                     323830333a363661303a3a2f33322d3438203d3e20323636383931.roa (raw, json)
Hash identifier:          MIXGErY+axR9oipaULZ3C9avYqGxYVOcoTDEwq24wrM=
Subject key identifier:   13:F0:B8:59:0A:B5:3E:04:35:17:80:FE:B0:03:7E:F4:6E:E3:69:3B
Certificate issuer:       /CN=C556AA3CC16346423FD48947E61ED84B443C6BD6
Certificate serial:       2C9AB40B64E9D78FE00462AEEB609C727EBF9397
Authority key identifier: C5:56:AA:3C:C1:63:46:42:3F:D4:89:47:E6:1E:D8:4B:44:3C:6B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/323830333a363661303a3a2f33322d3438203d3e20323636383931.roa
Signing time:             Tue 05 Mar 2024 17:41:00 +0000
ROA not before:           Tue 05 Mar 2024 17:36:00 +0000
ROA not after:            Tue 04 Mar 2025 17:41:00 +0000
asID:                     266891
IP address blocks:        2803:66a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9a:b4:0b:64:e9:d7:8f:e0:04:62:ae:eb:60:9c:72:7e:bf:93:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556AA3CC16346423FD48947E61ED84B443C6BD6
        Validity
            Not Before: Mar  5 17:36:00 2024 GMT
            Not After : Mar  4 17:41:00 2025 GMT
        Subject: CN=13F0B8590AB53E04351780FEB0037EF46EE3693B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:3b:66:b1:b5:46:a0:0d:36:e7:7c:a9:b8:
                    89:96:f1:89:37:c1:de:ae:53:31:8b:f8:b3:36:da:
                    3e:5f:59:ac:30:59:45:ca:0a:88:a6:bd:11:16:73:
                    c6:a7:05:a6:6f:de:fb:9e:56:d4:1f:55:04:e0:db:
                    2d:f9:8a:56:42:ae:8c:6e:66:f4:a0:40:e7:bb:b6:
                    05:f7:5a:c3:5e:27:a1:14:7a:18:ba:32:fe:b0:13:
                    44:05:a0:9b:d4:41:74:45:c8:65:62:8b:9d:2b:19:
                    08:9b:7a:05:ae:e1:46:dd:a6:4b:b7:59:73:81:39:
                    71:ab:80:38:a6:20:5b:14:ce:74:0e:c3:c0:49:eb:
                    ef:61:71:db:6b:a7:48:06:b4:9e:f3:e5:e3:bf:be:
                    5f:ed:71:20:a0:ec:5d:1d:84:7b:7f:1d:31:f1:ec:
                    16:16:8f:23:3e:00:8e:a2:0f:27:4a:1a:09:9c:71:
                    50:0f:cc:61:3c:43:ad:5b:45:50:31:54:dd:5e:e4:
                    46:bf:3b:01:93:bd:e7:25:fe:5e:1f:9d:45:ec:63:
                    d1:1f:b3:e8:47:bb:3a:a5:64:0c:a0:15:0a:37:4d:
                    fe:49:35:c4:c8:5c:5a:2a:f8:03:d1:65:79:47:eb:
                    04:f0:44:c7:04:21:0a:b1:5c:c0:58:c2:90:f7:dd:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:B8:59:0A:B5:3E:04:35:17:80:FE:B0:03:7E:F4:6E:E3:69:3B
            X509v3 Authority Key Identifier:
                keyid:C5:56:AA:3C:C1:63:46:42:3F:D4:89:47:E6:1E:D8:4B:44:3C:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/323830333a363661303a3a2f33322d3438203d3e20323636383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:66a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:c8:1d:04:5a:49:ac:b1:9d:83:29:db:78:33:7b:a5:21:69:
         cc:3b:19:0a:02:99:5b:99:ac:a3:10:71:94:52:45:8d:30:14:
         0c:2d:aa:59:84:f5:1c:7c:43:5e:0d:78:89:00:a9:c4:b2:2c:
         13:8d:32:ba:21:63:4b:b4:b7:7c:bf:22:34:3a:62:ab:15:71:
         a6:04:d3:63:54:8f:ea:7b:71:63:30:ba:9b:5b:e4:d9:ae:f7:
         2d:6a:54:4e:43:c6:69:31:a5:fb:f7:95:e0:fa:94:3b:47:2c:
         c4:85:50:13:3c:7b:85:9e:9f:91:c4:44:12:c5:1b:5a:e9:e2:
         eb:0b:69:38:f8:0f:b5:ff:2a:81:bf:f3:f2:90:7c:da:c4:3b:
         d3:e6:f5:12:66:53:01:ac:e8:52:17:bc:94:f8:a8:e6:9a:2e:
         d5:fe:10:34:98:85:b7:f2:4a:5e:43:01:1d:17:2a:95:16:88:
         1b:2a:63:21:70:af:3f:69:11:df:f1:36:79:69:fa:91:47:74:
         de:ea:f4:53:fd:31:b8:91:8a:f1:ab:0a:41:d9:39:20:17:1d:
         d9:84:ae:35:89:54:c3:a7:ae:0b:4d:5e:4d:4a:36:d1:de:16:
         fb:3f:11:94:15:b9:5d:ee:16:af:3e:d0:ab:43:a3:7c:45:b1:
         9b:81:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:12 2024 by rpki-client on console-ams.rpki-client.org