Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/323830333a613130303a3a2f33322d3335203d3e20323632323133.roa
File:                     323830333a613130303a3a2f33322d3335203d3e20323632323133.roa (raw, json)
Hash identifier:          KlBFSvuhcMz8rcVr/uPW29y5GDZsGTDIkrw1adsLL78=
Subject key identifier:   53:74:41:8D:7A:33:DD:50:A2:10:2A:7D:0C:F7:20:01:8F:26:F2:3D
Certificate issuer:       /CN=D7EDF5B751B151464FD315A68BF0C47236A0E241
Certificate serial:       09869F8C039F328202CA028634B4A8104E190D66
Authority key identifier: D7:ED:F5:B7:51:B1:51:46:4F:D3:15:A6:8B:F0:C4:72:36:A0:E2:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/323830333a613130303a3a2f33322d3335203d3e20323632323133.roa
Signing time:             Tue 05 Mar 2024 17:44:53 +0000
ROA not before:           Tue 05 Mar 2024 17:39:53 +0000
ROA not after:            Tue 04 Mar 2025 17:44:53 +0000
asID:                     262213
IP address blocks:        2803:a100::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:86:9f:8c:03:9f:32:82:02:ca:02:86:34:b4:a8:10:4e:19:0d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EDF5B751B151464FD315A68BF0C47236A0E241
        Validity
            Not Before: Mar  5 17:39:53 2024 GMT
            Not After : Mar  4 17:44:53 2025 GMT
        Subject: CN=5374418D7A33DD50A2102A7D0CF720018F26F23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:0f:a3:0f:13:22:96:12:02:b6:50:e0:8c:
                    e1:90:e6:18:76:05:ae:76:4b:17:7c:0e:d2:08:18:
                    f2:3d:40:68:b5:05:a6:8b:d9:f1:8a:cd:a0:2f:d6:
                    ff:1b:c6:92:25:67:a2:27:67:60:51:95:33:f7:c7:
                    a4:8f:52:69:db:fa:a2:fa:69:2b:e0:ac:de:69:50:
                    c0:ad:b7:f9:3b:5c:50:51:73:96:98:16:31:03:dd:
                    fa:89:e5:15:be:c4:cc:84:21:fe:68:8f:cf:99:b0:
                    c5:fa:bd:73:ad:2e:ad:37:ba:4f:bd:8a:63:91:19:
                    f2:e4:da:d9:0e:13:de:9d:54:79:cc:4c:e1:88:14:
                    12:57:64:74:ac:74:42:b5:ec:bd:03:ea:5e:2b:c4:
                    c6:b9:ea:39:a3:ee:78:b2:57:bb:36:fd:62:b1:2a:
                    05:bf:3e:4f:cf:0f:17:44:dd:27:71:2c:f7:31:ee:
                    b9:d0:16:90:f3:e2:ff:df:9d:1d:ab:1b:bf:e1:06:
                    e7:71:fb:97:82:e6:1a:a7:36:a3:8c:ac:b6:b1:cc:
                    c5:8f:5a:8f:10:3b:75:29:c9:8c:25:14:38:43:78:
                    71:87:ba:bc:fa:1b:af:0c:f6:ce:ba:60:f0:16:7a:
                    ef:4c:c0:07:e7:68:5f:41:82:20:90:18:f7:a0:92:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:74:41:8D:7A:33:DD:50:A2:10:2A:7D:0C:F7:20:01:8F:26:F2:3D
            X509v3 Authority Key Identifier:
                keyid:D7:ED:F5:B7:51:B1:51:46:4F:D3:15:A6:8B:F0:C4:72:36:A0:E2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/323830333a613130303a3a2f33322d3335203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a100::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:25:e0:2f:87:b7:52:be:ef:ea:55:ce:31:64:91:a6:67:b3:
         c3:1b:4e:dd:9c:11:f7:10:ab:b7:bf:49:26:d9:62:14:a0:1d:
         ef:26:2b:9f:af:83:8f:c9:2c:3a:15:ca:3d:41:66:5f:ac:01:
         d7:fa:a9:c2:92:a7:9d:36:a6:a6:12:a4:5d:15:23:6d:e0:94:
         9e:ec:b1:c8:d7:22:34:ec:95:b9:a7:92:be:4d:19:68:83:2f:
         08:63:95:3d:a0:fe:68:d0:23:d2:7d:b5:34:69:c4:2b:fb:8b:
         a4:db:26:45:46:eb:6b:00:6f:3c:dd:41:a8:a6:ac:22:c4:05:
         16:77:e4:0c:56:7b:6f:79:4d:26:79:e7:bb:54:c9:01:46:57:
         fa:0b:1e:ca:0c:f8:2d:2c:d2:68:25:33:3e:b1:65:4f:45:ed:
         26:b2:09:72:c4:39:63:7c:b5:98:90:1e:70:33:2b:fe:0e:fd:
         a3:3d:1b:2b:dc:54:83:96:05:77:83:7a:b5:ae:91:10:08:86:
         8e:7d:3c:70:13:a1:43:18:f9:a0:16:fa:14:69:6b:56:48:7d:
         a6:ad:9b:10:7d:ae:4a:be:06:5c:e9:bd:9a:58:0a:bf:57:d3:
         94:c3:32:57:1b:df:b7:f7:5c:81:3d:c0:19:6e:df:f7:05:be:
         4c:7c:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org