Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa
File:                     323830333a323461303a3a2f33322d3438203d3e20323636383233.roa (raw, json)
Hash identifier:          9qJrWtbUa5hvG3txu4TuJDbQQwxfytpqHgEM0pdEc54=
Subject key identifier:   26:21:55:04:5A:97:7E:54:AF:21:04:67:C0:93:BA:24:0F:23:A8:3C
Certificate issuer:       /CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2
Certificate serial:       3D4AD0013F9D66550B09D0B8126B15109B963814
Authority key identifier: BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa
Signing time:             Tue 05 Mar 2024 18:04:42 +0000
ROA not before:           Tue 05 Mar 2024 17:59:42 +0000
ROA not after:            Tue 04 Mar 2025 18:04:42 +0000
asID:                     266823
IP address blocks:        2803:24a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4a:d0:01:3f:9d:66:55:0b:09:d0:b8:12:6b:15:10:9b:96:38:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2
        Validity
            Not Before: Mar  5 17:59:42 2024 GMT
            Not After : Mar  4 18:04:42 2025 GMT
        Subject: CN=262155045A977E54AF210467C093BA240F23A83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:6d:17:a7:e8:cb:ac:2f:b0:30:1a:84:35:
                    b2:94:cc:35:44:2b:3e:3a:9b:f0:b7:39:b1:52:87:
                    44:a1:29:74:22:b4:64:c9:fc:52:4d:b1:7f:e5:b3:
                    e7:6f:34:c0:34:23:84:08:84:fd:5d:ec:f2:0f:98:
                    45:c4:53:80:6e:af:4c:7a:da:60:ef:38:8b:b6:51:
                    71:46:94:e5:d8:4d:54:8e:3f:99:21:ae:5e:59:f1:
                    e4:25:90:bc:14:2e:27:fb:79:2d:7d:36:cc:a0:13:
                    a0:d7:2f:3e:e7:8f:c9:68:92:be:69:9a:2f:29:75:
                    aa:fd:5b:a1:fa:30:08:78:7c:98:6e:a0:c4:cb:e0:
                    26:bd:06:22:c0:c5:ec:9f:27:31:a7:3b:e5:30:47:
                    11:b8:73:8b:5a:8f:cf:30:bf:e1:a5:0a:d7:22:9a:
                    31:c2:70:5e:ff:49:80:d4:e1:06:af:bd:7a:f1:e6:
                    61:81:a8:d5:1a:4f:a7:b4:01:c8:87:bb:78:97:12:
                    79:46:bb:c0:09:53:bc:a7:9b:ff:7b:85:b3:3c:a6:
                    3f:d2:88:ee:f2:7b:03:fb:e6:74:83:8e:57:d0:b4:
                    3f:cf:8d:f1:13:32:39:c3:3c:d9:df:9d:6b:2d:1d:
                    c8:88:3d:4d:35:61:84:5d:2c:e8:c7:1b:83:78:a9:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:55:04:5A:97:7E:54:AF:21:04:67:C0:93:BA:24:0F:23:A8:3C
            X509v3 Authority Key Identifier:
                keyid:BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:82:85:dc:93:a1:70:ef:f4:69:3e:c0:18:97:75:43:a5:72:
         7d:bd:f5:2e:09:20:e5:d1:0b:19:1d:f2:b5:50:1b:ee:45:5e:
         0d:0d:54:de:d8:e5:87:28:e9:c5:7d:df:df:0a:4e:e8:d4:22:
         6d:ec:8c:8e:6d:7f:93:62:e7:1c:8f:cc:15:0a:09:d7:e9:91:
         cf:23:cf:72:82:46:1c:39:90:da:77:b8:19:5a:28:3f:a0:d1:
         85:cc:49:0e:cb:27:a4:bf:c8:86:c5:4b:de:94:85:6d:06:12:
         54:0e:3a:f0:7b:6f:d8:25:50:4f:6b:e1:01:99:62:ac:a5:87:
         b6:bd:37:36:cf:c0:c1:8c:f8:49:cf:07:6d:e3:cb:8c:5f:73:
         31:59:d8:f4:08:99:1c:34:e3:01:53:dd:fd:d5:16:0f:a0:c1:
         77:9f:b7:cd:36:a5:a4:50:14:e8:6f:aa:12:2e:1c:b0:bf:19:
         6b:76:28:e6:fd:41:ad:f6:40:7c:3a:e1:41:46:33:4d:ef:e2:
         d2:f0:f0:f9:49:12:cf:aa:6b:e3:c1:d5:fd:00:a1:89:79:f1:
         62:c7:75:1a:aa:26:34:d3:0c:75:54:c1:c9:b0:45:9b:46:a4:
         b1:5b:51:dd:da:25:09:c7:c0:fe:be:d7:88:df:0d:2b:a3:65:
         db:ce:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:18 2024 by rpki-client on console-fra.rpki-client.org