Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/323830313a3163343a3a2f34342d3434203d3e20323632353839.roa
File:                     323830313a3163343a3a2f34342d3434203d3e20323632353839.roa (raw, json)
Hash identifier:          WwImfOKQlk1J95QYRAOurCIahmiW1wwDvjecL8ADwKc=
Subject key identifier:   6C:14:29:86:2C:BD:49:62:2C:C5:B3:0B:0D:75:79:A7:FA:EC:1A:59
Certificate issuer:       /CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0
Certificate serial:       059ABB40E81E889B3437E63E0D85407D44EBCA9E
Authority key identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/323830313a3163343a3a2f34342d3434203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:01:13 +0000
ROA not before:           Tue 05 Mar 2024 17:56:13 +0000
ROA not after:            Tue 04 Mar 2025 18:01:13 +0000
asID:                     262589
IP address blocks:        2801:1c4::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9a:bb:40:e8:1e:88:9b:34:37:e6:3e:0d:85:40:7d:44:eb:ca:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0
        Validity
            Not Before: Mar  5 17:56:13 2024 GMT
            Not After : Mar  4 18:01:13 2025 GMT
        Subject: CN=6C1429862CBD49622CC5B30B0D7579A7FAEC1A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:05:f4:5e:3f:0f:50:d7:93:de:8b:e8:f4:
                    e6:39:e4:a6:e2:95:2d:0a:af:bc:4c:4c:6e:d4:13:
                    70:53:08:24:b4:2a:64:a4:fe:32:ab:52:2a:b0:5e:
                    d3:40:e4:23:1e:44:34:3e:52:9e:66:91:e1:18:21:
                    d4:17:29:35:90:48:a0:03:0d:f5:b2:68:1a:f4:95:
                    21:1c:58:87:c5:84:50:85:8d:ec:ea:48:75:d9:ab:
                    ec:9f:2f:aa:64:e0:b7:8c:8f:ab:4b:e0:3c:87:fd:
                    88:fa:a9:01:b5:e4:3e:9d:36:40:46:3d:de:f4:eb:
                    94:88:d2:35:1e:7b:2b:b7:c6:c5:fe:1f:f0:c6:dc:
                    b0:42:6a:47:2c:4f:a6:42:6d:26:38:5c:ef:ce:c1:
                    74:da:f4:3f:14:1a:a4:44:f6:6e:9f:42:6e:13:32:
                    de:ef:8e:e4:49:39:cb:c6:92:87:0d:37:ab:c7:b2:
                    0a:fc:b6:a6:4c:75:b0:6d:21:f2:c3:fe:74:1a:1a:
                    3f:43:57:c3:20:56:e5:4f:ac:93:c7:df:f0:12:44:
                    6f:6a:f9:f0:36:9b:3d:c2:48:24:dd:27:24:c9:83:
                    56:e1:a0:4b:d1:1c:91:d1:86:1b:10:ce:a2:11:d6:
                    db:0e:ff:90:47:96:42:5d:cd:4b:05:57:cc:df:1a:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:14:29:86:2C:BD:49:62:2C:C5:B3:0B:0D:75:79:A7:FA:EC:1A:59
            X509v3 Authority Key Identifier:
                keyid:3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/323830313a3163343a3a2f34342d3434203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c4::/44

    Signature Algorithm: sha256WithRSAEncryption
         a7:15:1a:f3:37:fd:b9:86:4f:27:38:04:0a:b2:31:9f:10:52:
         51:49:76:1a:23:0b:67:d2:64:96:96:b8:5e:af:e9:d5:fc:52:
         56:99:6e:32:7f:d0:e3:a9:6e:cc:1f:9d:83:2e:98:d7:b8:3f:
         60:70:bd:fc:f4:79:fc:6b:87:6b:48:59:6b:d4:c8:23:d1:22:
         40:b1:6a:76:26:e5:65:4e:41:5e:27:a4:25:76:45:dc:e0:ec:
         be:79:83:8f:e4:c4:f6:77:2f:bd:73:9d:b6:a1:f1:39:37:a2:
         f2:de:74:b7:fc:9b:46:7d:5f:1f:68:fd:b9:88:36:97:b8:3c:
         26:67:76:99:7b:c7:3c:21:8e:e9:85:45:04:5d:57:1f:1c:12:
         a7:bc:87:2b:da:a5:68:b3:7c:e3:ac:32:9c:45:4f:21:a4:8a:
         7f:77:36:2d:aa:73:da:5f:f4:d5:ee:46:dc:59:9d:d7:1d:af:
         dc:bb:a9:7b:ab:04:4b:58:7d:ed:04:04:19:f9:a7:bf:46:7b:
         83:07:98:ec:0f:2e:f1:23:67:66:ff:6b:1e:97:cc:21:47:11:
         23:3a:38:0c:08:71:2e:d6:6b:51:17:0c:6f:22:27:94:26:b6:
         bf:57:21:b7:fc:79:26:84:9b:76:2f:bd:c3:b8:1f:83:05:e8:
         4a:3c:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:05 2024 by rpki-client on console-fra.rpki-client.org