Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a363a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a363a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          jt/fkaIJ65KMhmANMUEKspD6JU7lzi8yDsFmJ7SSSGg=
Subject key identifier:   24:FB:2F:72:51:71:60:57:7A:2B:15:08:B1:A4:55:DE:14:67:87:F5
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       1881BA172456396571B85B8A5BA3FC816DF5E7BE
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a363a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 05 Mar 2024 18:09:14 +0000
ROA not before:           Tue 05 Mar 2024 18:04:14 +0000
ROA not after:            Tue 04 Mar 2025 18:09:14 +0000
asID:                     273113
IP address blocks:        2803:6850:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:81:ba:17:24:56:39:65:71:b8:5b:8a:5b:a3:fc:81:6d:f5:e7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Mar  5 18:04:14 2024 GMT
            Not After : Mar  4 18:09:14 2025 GMT
        Subject: CN=24FB2F72517160577A2B1508B1A455DE146787F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:de:4e:01:6e:5e:01:44:c4:36:94:bc:75:
                    af:e6:38:7c:a7:ab:e1:8b:67:4f:9c:2c:f8:e1:f0:
                    14:66:32:56:51:c1:e7:fb:03:d0:c2:69:0c:39:49:
                    6f:5f:8c:7a:4b:e6:7c:52:d3:73:c8:e6:ad:cb:4d:
                    a1:df:03:8d:7a:39:f1:c0:8b:9c:6e:30:42:cc:f7:
                    99:d5:13:4c:d2:3f:8a:39:88:ae:e7:6d:06:21:fe:
                    6f:f0:44:ec:65:40:fd:d8:19:ba:11:cd:b5:01:c5:
                    3a:26:6c:d4:58:e9:3c:ef:38:24:0e:e3:7b:10:4c:
                    23:4c:9b:97:16:94:33:38:a6:8c:5f:74:20:c8:80:
                    98:dc:e4:db:c7:d5:c6:d6:05:cd:f3:63:9d:9b:27:
                    d4:93:23:10:41:83:56:ae:b7:94:3f:da:b7:67:fb:
                    f9:e2:87:26:c3:0a:9f:42:00:a6:e9:52:36:c4:55:
                    55:88:a3:02:66:6e:5b:31:dc:4e:39:b7:aa:94:6e:
                    9c:36:79:2a:9e:e6:20:ab:12:39:7f:a1:d2:07:6e:
                    29:99:13:c8:dc:fd:4e:72:d4:45:4c:26:49:57:fa:
                    f4:c9:71:ef:96:e7:ab:31:db:32:2f:4c:28:f2:4f:
                    14:3c:47:68:f0:a0:bb:c7:fd:b6:4d:28:bc:73:dc:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FB:2F:72:51:71:60:57:7A:2B:15:08:B1:A4:55:DE:14:67:87:F5
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a363a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:df:36:c6:ee:3f:a6:bc:02:93:cf:fd:71:0a:01:88:00:
         5b:d8:d5:29:a7:ab:00:87:ef:dd:df:75:99:a6:33:0d:15:ca:
         91:e6:ee:bc:ac:e5:6f:6d:9e:d5:53:0a:bb:49:a5:5d:e3:0c:
         40:33:3e:a1:b1:1a:32:fd:44:cb:46:d2:bb:56:33:1f:cf:3c:
         87:52:34:59:9d:9e:50:1a:50:1f:ff:71:4c:ba:f3:6b:18:e3:
         2f:76:4a:2a:50:d6:85:38:17:59:4c:26:38:5a:ff:dd:77:41:
         67:e0:91:23:90:6a:74:56:36:71:78:8c:96:b4:97:9f:4f:be:
         6c:9a:25:4c:d4:0f:de:b1:a5:75:26:d4:3e:f2:1c:c8:25:68:
         6e:70:0d:2f:ff:6e:eb:61:f3:eb:79:f8:6f:f5:08:aa:42:9d:
         be:78:00:27:33:58:22:04:f7:d6:ef:e9:04:12:35:6f:f5:5f:
         f9:1c:d8:6f:67:60:ab:bc:df:ae:a7:59:25:32:27:08:aa:25:
         0b:37:da:ae:d6:d0:f3:6c:92:5d:d0:6c:5b:9c:6c:4c:8f:88:
         71:3d:06:cc:53:80:bb:8f:a5:63:13:b3:f4:e1:ab:45:ff:d4:
         fa:6e:d6:fc:cb:46:db:2f:eb:15:49:6b:60:9f:fe:59:0b:23:
         75:db:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org