Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666638303a3a2f34322d3432203d3e203238343539.roa
File:                     323030313a313230373a666638303a3a2f34322d3432203d3e203238343539.roa (raw, json)
Hash identifier:          UyyUtd1aMh7qyyk2B9p59R2l5G1j0Afi56dWEzTfJqY=
Subject key identifier:   FC:AB:56:E9:C2:1D:38:D2:BC:8F:35:CA:FF:73:82:A9:A0:7E:E8:61
Certificate issuer:       /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial:       F1E3BC9A9E2B0C57DF64B7292DDCE200C18EB7
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666638303a3a2f34322d3432203d3e203238343539.roa
Signing time:             Tue 02 Jul 2024 01:15:01 +0000
ROA not before:           Tue 02 Jul 2024 01:10:01 +0000
ROA not after:            Tue 01 Jul 2025 01:15:01 +0000
asID:                     28459
IP address blocks:        2001:1207:ff80::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f1:e3:bc:9a:9e:2b:0c:57:df:64:b7:29:2d:dc:e2:00:c1:8e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
        Validity
            Not Before: Jul  2 01:10:01 2024 GMT
            Not After : Jul  1 01:15:01 2025 GMT
        Subject: CN=FCAB56E9C21D38D2BC8F35CAFF7382A9A07EE861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:54:7a:be:22:ea:ed:fb:98:a2:25:20:df:
                    c4:cf:3a:6d:c5:7f:02:ad:a1:12:a2:f6:7e:d0:7b:
                    b5:19:ac:ed:6f:27:90:d1:c5:a2:c5:a9:29:d1:39:
                    17:e5:e1:e7:55:1c:ae:97:c5:d3:e6:66:e6:e0:af:
                    86:89:7f:b4:d7:22:6a:5f:dd:2f:e6:9b:ea:07:db:
                    98:79:29:26:8c:30:d0:d4:f2:47:22:3b:0f:13:4b:
                    b4:9b:71:08:d2:3e:cc:1e:7a:1f:d9:89:d6:6f:3b:
                    bb:45:33:60:86:ce:39:6e:3f:a6:a9:f2:95:c8:67:
                    90:36:64:5a:bc:4f:14:ba:27:73:ff:10:31:f7:b2:
                    c4:05:dd:14:09:9a:d7:c9:09:b5:02:5c:a9:41:b9:
                    13:ba:a8:da:c7:e1:20:04:17:60:33:f3:c4:34:67:
                    56:c3:7b:a2:0d:d3:a1:f1:05:a4:1c:5f:da:ef:9e:
                    2f:91:cc:ad:ed:79:5a:45:fb:cc:e7:28:3a:bd:4e:
                    ba:e3:c8:fa:59:54:fd:f3:ae:43:b4:36:91:02:e2:
                    fc:64:89:98:20:a2:60:f8:69:7e:c0:8e:93:0f:2f:
                    9d:72:0a:41:8a:f8:60:29:e1:18:93:ca:fa:8b:f6:
                    5b:c9:ae:4f:c8:83:c8:da:22:74:d2:bd:58:9a:4c:
                    5a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AB:56:E9:C2:1D:38:D2:BC:8F:35:CA:FF:73:82:A9:A0:7E:E8:61
            X509v3 Authority Key Identifier:
                keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666638303a3a2f34322d3432203d3e203238343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1207:ff80::/42

    Signature Algorithm: sha256WithRSAEncryption
         22:57:38:34:ed:f6:16:9e:2c:b4:89:09:2d:06:dd:f9:a1:8e:
         8f:f6:5e:22:1d:ff:2e:22:fd:34:a7:a5:af:c9:f8:a2:58:88:
         e3:2f:83:b3:2e:2f:15:c2:51:c6:1c:16:9a:4e:c7:84:5e:d2:
         71:b3:43:41:b2:d7:f2:e5:ea:9b:47:62:36:04:d9:f5:6c:37:
         8c:ec:8c:32:1b:42:22:eb:95:1b:ed:90:88:a6:33:28:8c:75:
         d6:54:b2:0c:9e:af:36:2e:ea:0c:43:d6:06:b1:b3:ac:ab:d5:
         b6:94:53:0a:03:47:99:bc:16:a6:b8:67:94:eb:89:ce:1a:bc:
         eb:a0:a9:35:a3:8a:b1:1e:e6:56:11:a0:97:eb:c5:1e:f7:34:
         dc:98:77:32:3b:1a:17:a7:0d:88:d8:34:14:60:36:6d:be:7e:
         91:d0:93:68:b1:c3:d4:0c:1a:0e:e4:48:18:76:35:db:6b:87:
         bd:56:81:3a:02:10:ec:f4:26:58:69:3c:bd:0a:23:65:c5:13:
         bd:9a:b8:cb:c8:45:7e:36:eb:3a:fd:40:db:c3:8d:d0:f8:fc:
         33:c5:8d:7b:ab:93:a5:17:e6:51:ae:11:d8:90:48:7b:38:e5:
         89:83:28:95:e3:50:36:b6:d6:3c:bc:4c:13:54:4f:14:e1:57:
         c9:7b:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:46 2024 by rpki-client on console-fra.rpki-client.org