Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/323830333a613136303a3a2f33322d3332203d3e20323637373938.roa
File:                     323830333a613136303a3a2f33322d3332203d3e20323637373938.roa (raw, json)
Hash identifier:          E990TqUf3wL7kUleIOwnVgIy6Qja5jROneVKWW9mECs=
Subject key identifier:   2B:A3:3F:DA:25:44:F0:62:DB:B3:A4:66:EC:D7:41:10:19:82:BF:29
Certificate issuer:       /CN=44B7D6626292744063A0029B3E214C905150E05D
Certificate serial:       495922E106C5CB1F310B78FC936348A1AEEBB868
Authority key identifier: 44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/323830333a613136303a3a2f33322d3332203d3e20323637373938.roa
Signing time:             Tue 05 Mar 2024 17:47:04 +0000
ROA not before:           Tue 05 Mar 2024 17:42:04 +0000
ROA not after:            Tue 04 Mar 2025 17:47:04 +0000
asID:                     267798
IP address blocks:        2803:a160::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:22:e1:06:c5:cb:1f:31:0b:78:fc:93:63:48:a1:ae:eb:b8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B7D6626292744063A0029B3E214C905150E05D
        Validity
            Not Before: Mar  5 17:42:04 2024 GMT
            Not After : Mar  4 17:47:04 2025 GMT
        Subject: CN=2BA33FDA2544F062DBB3A466ECD741101982BF29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:8e:88:11:32:39:cc:4a:58:85:25:a3:53:
                    d1:99:5c:d8:e5:d6:12:9b:f4:45:fb:8d:ce:aa:1c:
                    36:10:9c:9b:a8:82:71:33:25:cd:30:d1:6c:f7:9c:
                    b3:0e:e3:78:fd:ff:6c:87:80:45:15:1a:32:f5:2e:
                    3f:5e:e9:bd:43:07:5f:85:bf:3d:81:c5:55:51:34:
                    42:10:e4:60:5e:f1:57:b3:3f:4c:98:4f:09:ff:11:
                    4a:aa:fc:2c:78:9a:1e:3f:c9:ba:07:67:2a:a0:d1:
                    6a:00:3f:e4:fa:06:58:b3:1e:fe:c0:81:89:4c:4d:
                    79:c6:2a:4b:f6:6f:c3:03:e8:3d:4c:60:04:d4:3d:
                    e2:30:46:d3:e3:3a:5c:79:01:6c:d7:b9:98:e3:52:
                    16:39:8b:ea:b7:2d:83:5e:6c:70:81:70:9f:54:99:
                    8b:39:77:4d:41:c1:99:5e:82:f1:98:39:b9:fa:08:
                    2a:c5:cb:1d:90:9c:bf:78:1a:1e:a7:61:b2:65:03:
                    ff:e7:a4:75:44:df:78:f4:89:43:ed:87:14:23:5e:
                    0c:2d:fa:c3:bb:bb:ed:82:d5:37:2d:4b:b4:7e:8b:
                    b2:5b:bc:8e:7c:aa:b5:ad:6b:e4:80:12:49:49:40:
                    c9:99:c2:f0:cb:e3:39:08:46:52:40:41:e5:44:bd:
                    1a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A3:3F:DA:25:44:F0:62:DB:B3:A4:66:EC:D7:41:10:19:82:BF:29
            X509v3 Authority Key Identifier:
                keyid:44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/323830333a613136303a3a2f33322d3332203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a160::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:52:18:dd:44:fd:1e:bb:cb:6c:13:db:7d:1f:f7:a4:ac:76:
         ae:68:62:ce:a8:cd:0b:a4:22:67:69:c6:f5:82:53:91:31:2c:
         69:0b:5d:8a:9a:8a:73:c2:58:60:c3:16:56:87:c1:01:4b:2a:
         a0:f5:26:fd:43:6b:0b:2a:09:1d:34:47:d6:51:17:43:94:16:
         48:2d:9c:61:7b:69:f7:f7:56:a8:13:98:4f:07:73:e5:26:09:
         5e:6e:27:c1:92:d0:0f:c1:5a:4e:75:d1:c8:6f:f0:85:3f:ab:
         f9:02:1d:b3:a2:33:dd:80:ed:9a:28:5e:54:8a:9a:69:bc:7b:
         56:ee:c4:d2:12:0a:18:d3:4e:b1:af:93:82:bf:4a:fc:df:c6:
         43:ad:86:cc:4c:51:b7:2f:87:65:c6:f5:72:c3:94:96:5d:7e:
         a8:59:0b:36:fa:b0:3e:1d:63:c7:7d:21:60:34:3f:1f:2c:b3:
         14:a3:97:e2:53:9b:00:ef:40:6b:6d:28:ef:e0:83:6b:8b:f4:
         1c:60:69:58:d3:07:b3:a9:e3:e0:9a:af:63:4e:2a:7a:0c:13:
         80:e4:da:cd:41:9f:bb:35:f6:ec:db:3a:fe:e7:00:10:7f:ef:
         8d:b6:e6:c2:e4:17:bb:81:7c:c8:b4:5f:1e:ad:79:71:23:d2:
         e4:74:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:05 2024 by rpki-client on console-ams.rpki-client.org