Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/323830333a656263303a3a2f33322d3332203d3e20323635373533.roa
File:                     323830333a656263303a3a2f33322d3332203d3e20323635373533.roa (raw, json)
Hash identifier:          dgk9DKyngvF/ulth3aqs/FNGVAqluCbyBdZD4TmPlxc=
Subject key identifier:   31:79:4C:4B:43:22:30:AB:B2:D2:16:59:05:F1:F4:D7:43:E1:92:E8
Certificate issuer:       /CN=0E6B8732ACC8901032F35F351C4375807259D052
Certificate serial:       3D3D958F53AF43A5189E57A94CEDB2329527A7D1
Authority key identifier: 0E:6B:87:32:AC:C8:90:10:32:F3:5F:35:1C:43:75:80:72:59:D0:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E6B8732ACC8901032F35F351C4375807259D052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/323830333a656263303a3a2f33322d3332203d3e20323635373533.roa
Signing time:             Tue 05 Mar 2024 17:50:10 +0000
ROA not before:           Tue 05 Mar 2024 17:45:10 +0000
ROA not after:            Tue 04 Mar 2025 17:50:10 +0000
asID:                     265753
IP address blocks:        2803:ebc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/0E6B8732ACC8901032F35F351C4375807259D052.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/0E6B8732ACC8901032F35F351C4375807259D052.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E6B8732ACC8901032F35F351C4375807259D052.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3d:95:8f:53:af:43:a5:18:9e:57:a9:4c:ed:b2:32:95:27:a7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6B8732ACC8901032F35F351C4375807259D052
        Validity
            Not Before: Mar  5 17:45:10 2024 GMT
            Not After : Mar  4 17:50:10 2025 GMT
        Subject: CN=31794C4B432230ABB2D2165905F1F4D743E192E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:8c:41:1d:15:a4:f3:61:b9:25:e4:c9:c3:
                    62:e8:29:d1:ce:29:c5:7a:66:65:15:b4:16:78:c2:
                    56:5a:6e:19:ae:2b:ed:98:24:30:08:94:a9:f3:43:
                    98:e0:7e:3e:0f:48:98:13:2f:d3:1f:c0:23:bd:16:
                    7a:80:62:37:50:00:da:fb:bf:e3:c8:e2:f1:fc:c0:
                    32:03:39:20:0b:92:5c:27:2c:48:12:41:49:d7:65:
                    d4:e7:73:80:17:27:ef:6c:99:16:41:17:fc:13:8c:
                    f8:7d:86:98:26:1b:11:7a:83:27:b5:12:51:a8:9f:
                    b1:08:ba:17:2c:05:46:34:b2:21:13:e9:58:f2:81:
                    4f:93:06:b2:6f:9e:fe:a4:db:2f:17:d0:54:f3:05:
                    16:11:35:90:cc:65:91:74:21:19:5b:50:4e:d2:f1:
                    11:88:46:cb:40:4f:ed:3c:a2:3f:b3:09:1e:12:a9:
                    51:09:80:50:9d:f1:fa:18:d7:7f:cc:24:64:8f:a6:
                    72:17:40:01:53:3d:bc:2f:7f:30:ea:0f:d6:b6:2a:
                    b3:27:40:c9:58:6c:79:e8:47:18:02:13:29:8b:52:
                    f8:a5:98:94:b0:c1:f5:1d:29:15:db:13:7c:95:aa:
                    d6:b1:d5:34:46:8c:c4:b7:c6:10:cb:d9:32:e6:51:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:79:4C:4B:43:22:30:AB:B2:D2:16:59:05:F1:F4:D7:43:E1:92:E8
            X509v3 Authority Key Identifier:
                keyid:0E:6B:87:32:AC:C8:90:10:32:F3:5F:35:1C:43:75:80:72:59:D0:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/0E6B8732ACC8901032F35F351C4375807259D052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E6B8732ACC8901032F35F351C4375807259D052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/323830333a656263303a3a2f33322d3332203d3e20323635373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ebc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:d8:f0:16:1c:89:dc:8c:2f:2f:47:a0:e1:e1:58:3a:e6:
         2a:d4:78:e3:97:23:1a:a5:26:68:6d:92:ec:09:51:33:08:61:
         21:5e:a8:07:2f:b7:3e:10:82:d1:7c:55:17:2a:ca:65:e9:8d:
         48:65:61:14:32:28:ae:5d:47:4d:58:60:64:e5:12:63:0c:61:
         f8:b8:08:08:b4:ee:8c:c5:28:a5:e8:30:1b:1d:25:53:8c:65:
         0f:ba:a6:2a:5b:e7:b1:b7:c0:51:f3:c8:2c:a4:3f:d9:dd:60:
         50:c5:3c:01:26:09:c3:65:e0:9e:24:63:b8:2f:72:f0:eb:4e:
         a6:b5:c1:3d:52:74:e3:a1:70:bf:af:58:54:4c:03:0c:d3:58:
         40:b6:82:b5:f7:ad:90:e8:1c:65:a2:44:16:eb:f9:b9:f7:dc:
         59:9f:9e:6d:f1:2c:03:2f:cd:ed:d0:2e:83:34:65:d2:0a:bb:
         e1:32:73:36:8a:2d:0f:b2:8b:70:cf:95:ca:31:11:64:66:95:
         3e:99:7c:72:db:41:56:31:c2:ec:68:48:b2:fa:35:69:49:62:
         fc:a7:19:68:72:bf:ff:1c:1d:43:22:88:b4:00:32:da:c2:ec:
         a1:7e:f3:78:f7:84:ed:30:ac:be:db:4e:9e:be:4c:1b:86:7c:
         66:fa:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org