Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/323830333a346430303a3a2f33322d3438203d3e20323639393933.roa
File:                     323830333a346430303a3a2f33322d3438203d3e20323639393933.roa (raw, json)
Hash identifier:          fQ/+waAImBuQsqUmUU3ifSeRradyT8z/Iq4MK1wBzKA=
Subject key identifier:   D6:85:18:23:CB:52:9E:BF:E9:92:1E:BA:AE:4D:78:A7:94:2C:38:D0
Certificate issuer:       /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Certificate serial:       34E74D628DE1FBA2753739F2C4B51DE3624DE99B
Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/323830333a346430303a3a2f33322d3438203d3e20323639393933.roa
Signing time:             Tue 05 Mar 2024 18:09:26 +0000
ROA not before:           Tue 05 Mar 2024 18:04:26 +0000
ROA not after:            Tue 04 Mar 2025 18:09:26 +0000
asID:                     269993
IP address blocks:        2803:4d00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:4d:62:8d:e1:fb:a2:75:37:39:f2:c4:b5:1d:e3:62:4d:e9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
        Validity
            Not Before: Mar  5 18:04:26 2024 GMT
            Not After : Mar  4 18:09:26 2025 GMT
        Subject: CN=D6851823CB529EBFE9921EBAAE4D78A7942C38D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:de:ba:6e:5e:dd:06:7f:92:79:64:65:c8:
                    64:08:87:2f:52:d6:b5:8a:af:4b:40:c8:fe:ff:d1:
                    e4:f0:d7:c9:d7:2f:8f:80:e2:f6:82:2d:ce:87:73:
                    de:84:09:d9:63:7c:b0:d2:ec:fd:2c:14:31:7b:5d:
                    81:b5:99:bf:40:ae:94:9a:41:65:1d:0e:15:05:ee:
                    68:0c:eb:50:78:3b:70:63:e9:76:9d:9d:34:f3:f3:
                    b7:2e:01:b0:06:e2:00:49:eb:63:ba:5e:c8:75:cb:
                    d6:b5:97:fc:04:f9:50:16:a8:eb:5f:a5:3b:37:57:
                    fb:af:72:b4:63:c0:6a:43:cc:08:e7:19:f7:b9:c7:
                    85:5c:67:a7:b6:1e:c8:fd:8e:d7:0c:84:33:e5:3d:
                    b4:7c:5a:48:5e:34:14:4d:7c:62:bf:7b:4b:fc:8e:
                    53:0a:b5:39:aa:96:7b:47:59:65:c5:f6:e8:ea:41:
                    96:9c:78:78:18:27:0e:93:d1:3c:db:be:38:60:b0:
                    af:86:bb:16:fd:6f:1b:4a:3b:6a:40:13:e4:c9:e1:
                    8e:06:1f:32:a6:9f:79:01:46:9b:54:7f:59:89:ab:
                    ca:d0:f1:f5:96:fa:c8:2e:fa:63:b6:d8:96:1d:bc:
                    6f:d5:7b:f7:0d:fa:b6:3f:22:56:ba:7a:b2:83:14:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:85:18:23:CB:52:9E:BF:E9:92:1E:BA:AE:4D:78:A7:94:2C:38:D0
            X509v3 Authority Key Identifier:
                keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/323830333a346430303a3a2f33322d3438203d3e20323639393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:f7:89:d8:6e:08:9d:3d:a8:0a:5e:3e:fb:55:c5:ac:3b:
         a1:a5:95:db:47:16:dc:95:b0:00:a3:4b:3f:bc:4e:13:c8:f4:
         b6:9d:d1:64:5a:db:51:c7:e6:82:aa:d5:4a:2b:0c:a9:15:f3:
         c2:bc:e0:cb:6c:1d:61:5c:9d:0c:4b:81:4c:26:94:5e:7f:5b:
         e0:fd:38:ae:d2:2a:75:c6:03:7d:c1:69:ff:c2:b9:7c:ae:2a:
         2b:92:c6:d4:c0:fd:5e:de:fd:0b:86:0b:a2:a3:18:f1:4c:ac:
         d8:ab:b3:04:ae:d9:02:74:2e:aa:91:26:39:89:df:0e:95:d9:
         b9:8d:16:2c:36:5f:62:99:a4:7d:66:0e:be:5c:b5:c8:bd:d8:
         ad:15:b4:85:e5:af:55:3e:43:02:8f:60:51:b0:12:82:2b:33:
         63:53:83:91:c2:28:04:7f:2a:64:64:ad:27:ec:c5:21:d3:04:
         be:fd:52:08:da:e1:59:12:18:a9:f7:ce:82:af:ad:14:11:e3:
         3b:05:7b:ad:5c:07:b7:9e:f0:35:f2:13:4d:41:84:68:89:2d:
         05:08:5c:58:9b:6f:97:78:bc:e3:eb:86:95:ab:e4:e0:11:d7:
         f9:57:03:9c:3e:da:71:65:ad:83:f5:58:88:04:48:fe:63:ab:
         a5:a3:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org