Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33322d3335203d3e203237383635.roa
File:                     323830333a346138303a3a2f33322d3335203d3e203237383635.roa (raw, json)
Hash identifier:          8TdU5/s7/6boRf58pPGPU4jczcso7KMC30u6/TziAXk=
Subject key identifier:   59:69:0D:35:02:CB:69:5E:26:D8:CE:7E:01:87:B4:A1:71:33:01:EF
Certificate issuer:       /CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
Certificate serial:       58CFB837CD6408C081A4B05CDCB6BA0B63E0CB8E
Authority key identifier: A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33322d3335203d3e203237383635.roa
Signing time:             Tue 05 Mar 2024 18:21:29 +0000
ROA not before:           Tue 05 Mar 2024 18:16:29 +0000
ROA not after:            Tue 04 Mar 2025 18:21:29 +0000
asID:                     27865
IP address blocks:        2803:4a80::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cf:b8:37:cd:64:08:c0:81:a4:b0:5c:dc:b6:ba:0b:63:e0:cb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
        Validity
            Not Before: Mar  5 18:16:29 2024 GMT
            Not After : Mar  4 18:21:29 2025 GMT
        Subject: CN=59690D3502CB695E26D8CE7E0187B4A1713301EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:1a:07:39:f8:cb:b6:4c:37:d4:c2:11:a6:
                    3c:9d:02:67:b5:16:ea:a4:70:fe:da:f4:3f:76:9b:
                    d5:63:fc:67:d5:b8:41:3d:6d:7b:17:6f:65:f6:5d:
                    fb:28:b0:52:e4:66:4c:f0:6d:40:13:5a:23:75:67:
                    e4:0f:d4:2f:69:98:ed:d3:12:3b:2c:57:01:17:f3:
                    90:ce:69:25:ae:df:16:21:3c:1e:ad:50:88:83:94:
                    b6:06:ca:0b:c6:18:cc:62:90:31:fb:d9:08:95:34:
                    96:3b:ca:cb:0c:d8:7d:93:f8:6d:59:c7:82:24:4f:
                    19:38:7d:e1:8b:35:92:66:96:fc:2f:6d:38:6c:12:
                    96:99:6c:9e:8d:c1:29:37:a1:43:69:c2:a3:a4:9a:
                    36:6a:44:97:cc:c4:86:8b:84:84:8b:8f:44:41:42:
                    88:f6:5e:db:7e:2f:74:f3:b2:83:4c:8f:32:a5:0d:
                    2f:24:7b:aa:04:51:98:6d:03:df:04:78:20:2b:23:
                    92:4d:f2:3e:c3:be:e8:95:39:90:b1:0a:b0:9e:63:
                    f0:27:45:7b:14:cd:9a:ce:9c:b9:d3:c1:c0:8c:ab:
                    00:85:ee:11:45:14:48:b5:d4:f6:47:2f:bb:99:10:
                    76:ce:66:46:de:f0:9a:1b:aa:65:c2:77:8e:94:14:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:69:0D:35:02:CB:69:5E:26:D8:CE:7E:01:87:B4:A1:71:33:01:EF
            X509v3 Authority Key Identifier:
                keyid:A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33322d3335203d3e203237383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:37:a0:50:bc:86:28:bf:48:76:e5:ec:1f:1e:b0:c1:32:e8:
         ae:4b:c7:53:2e:78:ec:c1:c1:65:c2:3d:cb:82:9a:fe:4c:1f:
         8b:5c:0a:7c:34:96:7f:fa:d3:c3:13:e4:a5:0f:68:30:84:b8:
         dc:9a:0d:1e:35:53:91:14:c4:ca:3a:fd:2f:5d:6e:ac:c3:cb:
         7d:41:04:2c:7e:51:6f:96:cd:67:1c:c4:d7:d1:a9:cf:08:eb:
         6d:52:d4:3e:49:25:bb:94:5e:02:2a:bf:1b:ff:1c:64:6b:32:
         ea:4d:5c:26:7e:51:ab:ae:c1:29:e3:c3:85:48:23:7a:0f:d3:
         fe:2c:19:bf:7c:ce:59:65:8e:bd:06:56:e3:3e:24:9f:22:5d:
         36:9f:73:f1:f2:ec:c8:b8:b7:d1:43:12:22:4f:fb:f2:d2:97:
         4e:c2:cc:75:a4:e1:55:55:46:2e:5e:72:50:0c:0a:69:aa:22:
         16:57:8d:30:b0:64:70:f8:55:ea:33:78:e3:59:fe:01:8d:06:
         ea:01:f1:18:1b:5a:50:b7:13:6b:02:d4:8d:96:65:34:7e:85:
         19:70:eb:88:c1:46:90:8f:73:0a:55:87:3b:4a:05:ac:f1:d4:
         65:bd:28:8e:4d:e5:de:d2:e8:9e:00:1a:c0:87:eb:d8:cd:08:
         24:fc:64:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 23:52:01 2024 by rpki-client on console-fra.rpki-client.org