Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/323830333a633130303a3a2f33322d3634203d3e203238313033.roa
File:                     323830333a633130303a3a2f33322d3634203d3e203238313033.roa (raw, json)
Hash identifier:          89swGNBo6LyXMFX1sYQh0UOmPQDz5RBl5lXc+GYuJMA=
Subject key identifier:   B6:58:D6:21:12:97:FA:37:10:DA:F6:04:6E:4F:94:F0:80:79:92:B9
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       04E41B73710A6132775358651515838A5E9B8E58
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/323830333a633130303a3a2f33322d3634203d3e203238313033.roa
Signing time:             Tue 05 Mar 2024 17:58:20 +0000
ROA not before:           Tue 05 Mar 2024 17:53:20 +0000
ROA not after:            Tue 04 Mar 2025 17:58:20 +0000
asID:                     28103
IP address blocks:        2803:c100::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 17:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e4:1b:73:71:0a:61:32:77:53:58:65:15:15:83:8a:5e:9b:8e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Mar  5 17:53:20 2024 GMT
            Not After : Mar  4 17:58:20 2025 GMT
        Subject: CN=B658D6211297FA3710DAF6046E4F94F0807992B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:72:dd:70:76:7a:88:6b:07:05:77:eb:e2:4e:
                    11:56:68:cb:98:2a:5f:6a:73:7a:ba:e6:07:d4:a3:
                    50:e7:14:3f:d3:18:b6:96:bd:62:be:d2:8b:6b:ae:
                    51:49:61:e0:76:12:7f:ae:84:da:8c:f0:ad:37:d1:
                    a6:6f:40:d5:0e:a5:9d:bc:b4:fb:17:5d:92:d9:e8:
                    67:4e:62:2f:13:cf:87:47:77:5d:7b:d2:80:96:25:
                    f0:e5:e0:cb:c5:ea:6b:64:07:ab:4a:45:ba:f4:64:
                    e2:12:b5:83:46:cf:c8:bb:23:cf:02:70:a2:40:eb:
                    83:44:14:fc:4b:f8:cb:79:33:f6:61:fe:67:ca:1b:
                    55:a5:b8:76:80:52:14:96:87:c6:03:78:c4:cb:7f:
                    9a:f2:45:a6:b5:16:85:34:d1:65:bc:d3:8b:08:71:
                    5a:01:61:05:d2:02:10:25:eb:5e:5d:e6:c2:f2:0f:
                    52:d7:24:dc:ee:66:1f:a5:61:34:fd:34:96:f4:62:
                    df:9d:4f:44:03:5d:b6:08:35:bb:89:d0:0f:35:ec:
                    73:fd:3c:d7:ec:3d:ba:3b:ce:1b:c9:10:e4:06:79:
                    25:22:89:43:5e:92:6b:d0:c8:97:a6:a2:be:50:a3:
                    f2:ac:8d:61:71:c3:d5:fa:64:be:8e:66:47:21:c8:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:D6:21:12:97:FA:37:10:DA:F6:04:6E:4F:94:F0:80:79:92:B9
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/323830333a633130303a3a2f33322d3634203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c100::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:6d:95:44:7e:60:fa:8a:eb:88:11:12:8f:81:1f:39:27:
         53:68:88:6e:51:48:ee:98:ab:cf:c5:a1:b9:79:cd:14:03:da:
         55:90:1c:a4:e5:7b:8f:df:37:c1:aa:04:7f:13:42:cb:c3:b9:
         8a:4c:4c:fa:89:1b:8e:71:11:9c:3c:8c:1b:3d:3c:d7:55:cb:
         18:8b:71:25:87:67:e0:2a:6d:26:ac:18:2f:03:a6:24:d6:59:
         ad:76:c6:0d:87:f6:a9:81:4c:52:e2:39:f6:31:73:ad:f1:28:
         73:2f:d9:de:b5:70:fc:f2:0d:fb:fa:aa:ec:46:15:a1:dd:95:
         cc:6c:d7:63:c8:cf:b3:1a:2a:ae:77:2d:70:df:a1:ab:e5:2c:
         82:3e:ff:6d:b6:2a:aa:59:56:33:cc:09:5d:08:55:7c:a3:ff:
         06:1b:af:2f:1f:74:1e:95:a7:82:df:12:6b:0d:12:6a:00:4a:
         e4:ff:56:ad:4f:f7:c3:43:2e:7a:d1:bd:4f:55:08:70:72:56:
         6b:0a:62:8a:6a:92:0b:5b:58:89:52:3e:f3:87:56:b2:ff:46:
         35:85:de:cb:21:f2:24:c2:3e:9d:a7:66:25:b7:7c:bd:9f:b7:
         c6:27:86:48:90:be:0c:d0:27:f1:50:ec:b5:07:96:6a:ef:b3:
         6e:60:d7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:13 2024 by rpki-client on console-ams.rpki-client.org