Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/323830333a323465303a3a2f33322d3438203d3e20323639383836.roa
File:                     323830333a323465303a3a2f33322d3438203d3e20323639383836.roa (raw, json)
Hash identifier:          fbH69bt0mqXqj+XnwOM7XNxpewoPvUyZ3UpCVGvxI9E=
Subject key identifier:   59:20:DD:A1:60:46:3B:A2:BB:F6:91:4B:FD:A3:EF:7C:C3:24:DD:0B
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       2427C051AB6058DB90CE8185ED55F03883FE6BBF
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/323830333a323465303a3a2f33322d3438203d3e20323639383836.roa
Signing time:             Tue 05 Mar 2024 18:06:36 +0000
ROA not before:           Tue 05 Mar 2024 18:01:36 +0000
ROA not after:            Tue 04 Mar 2025 18:06:36 +0000
asID:                     269886
IP address blocks:        2803:24e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:27:c0:51:ab:60:58:db:90:ce:81:85:ed:55:f0:38:83:fe:6b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Mar  5 18:01:36 2024 GMT
            Not After : Mar  4 18:06:36 2025 GMT
        Subject: CN=5920DDA160463BA2BBF6914BFDA3EF7CC324DD0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:f9:bc:9f:69:3e:f9:22:5a:ba:a3:a5:67:
                    18:62:c0:97:b3:0f:0a:7b:f8:fa:fd:01:3d:98:9a:
                    aa:19:35:a6:66:82:55:0b:2f:a5:12:b6:3a:04:99:
                    26:ad:b8:cf:79:75:61:b3:61:49:64:e6:7a:8d:58:
                    65:dc:a3:a3:59:ef:1a:a2:fe:49:d4:56:94:56:82:
                    9a:44:71:12:c3:ae:d8:e1:b3:6a:30:5e:9f:46:d7:
                    6b:fc:51:01:f2:16:54:04:42:93:70:1d:ee:ba:6d:
                    0c:4c:b6:e5:ca:1a:67:b8:82:8e:2c:e5:27:cc:2b:
                    a7:d6:86:62:cb:10:9b:9e:71:89:fd:f2:1e:41:8a:
                    2e:87:a3:26:76:fb:1c:d0:f8:5e:dd:1b:9b:0f:49:
                    e1:e6:87:2d:43:9f:47:99:8e:34:ff:61:95:50:ee:
                    e4:40:fe:a0:a8:fa:21:13:15:25:95:ed:8a:9a:1e:
                    2c:bf:7e:4e:8c:6f:97:b4:7e:3a:90:dd:fd:e4:55:
                    be:43:ea:d0:88:f2:73:14:09:2d:08:a3:14:5a:22:
                    72:4e:fa:2b:4d:43:ef:df:f9:b6:ed:6f:ef:36:8b:
                    ec:90:9b:89:35:89:b9:2d:be:a9:e3:38:d3:55:14:
                    ca:b8:57:a9:df:07:10:77:c6:7a:8d:cd:db:88:9e:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:20:DD:A1:60:46:3B:A2:BB:F6:91:4B:FD:A3:EF:7C:C3:24:DD:0B
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/323830333a323465303a3a2f33322d3438203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:5f:51:82:8a:ab:c8:ff:ce:0c:18:9d:d1:ec:4c:5b:fd:
         1a:d1:d8:e0:ee:94:a2:3a:66:d3:ba:41:eb:35:30:8f:10:a6:
         ec:e1:cc:48:f5:9d:dc:cf:d7:47:24:9f:88:a1:fc:1f:b9:be:
         8c:12:a2:4f:21:22:f3:b6:a6:21:98:6c:f1:32:3a:02:5a:44:
         fd:7c:8c:d9:ab:27:65:17:80:d8:d9:b1:6f:73:27:6c:19:1a:
         34:ca:06:76:d9:91:a8:76:e6:42:ae:12:aa:03:e0:94:6c:96:
         d9:74:91:5e:b0:6d:0a:bf:d8:1b:3f:13:f3:93:15:f7:3d:9e:
         b0:f0:51:e9:86:cf:9c:50:cf:a7:04:f8:5f:e8:55:e2:5b:a4:
         c4:92:e1:61:b1:89:90:fc:7e:66:e9:b2:a3:e7:30:f7:58:a0:
         9d:a8:dd:ed:7c:b0:41:73:df:43:13:36:de:e6:eb:14:d3:7b:
         d0:ca:91:bd:d9:cb:bc:1d:e4:09:e9:c3:dc:93:4c:e5:9d:a0:
         88:c9:1e:98:89:2d:02:d2:4d:78:3d:ad:16:0a:1f:60:3b:cc:
         23:08:79:f0:cf:53:22:39:32:70:aa:91:7c:5d:30:8a:1a:e6:
         77:5c:15:df:e9:08:44:db:37:37:12:84:41:3f:35:1f:bc:7d:
         f8:9c:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org