Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3230303a3a2f34302d3430203d3e20323732383839.roa
File:                     323830333a383639303a3230303a3a2f34302d3430203d3e20323732383839.roa (raw, json)
Hash identifier:          xOLzWs4bx0ciyB0qv4xEFn0VIJafyUesdufxyink3Ek=
Subject key identifier:   FC:6D:DA:F8:D3:96:EC:A8:2C:74:6F:14:DC:B1:94:28:C2:10:EC:42
Certificate issuer:       /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial:       4077174692CB59DE75734CD029DD10B60A16EAB9
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3230303a3a2f34302d3430203d3e20323732383839.roa
Signing time:             Mon 14 Oct 2024 02:40:02 +0000
ROA not before:           Mon 14 Oct 2024 02:35:02 +0000
ROA not after:            Mon 13 Oct 2025 02:40:02 +0000
asID:                     272889
IP address blocks:        2803:8690:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:77:17:46:92:cb:59:de:75:73:4c:d0:29:dd:10:b6:0a:16:ea:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
        Validity
            Not Before: Oct 14 02:35:02 2024 GMT
            Not After : Oct 13 02:40:02 2025 GMT
        Subject: CN=FC6DDAF8D396ECA82C746F14DCB19428C210EC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:43:12:dc:d4:33:68:28:23:ca:02:26:51:ef:
                    5f:fc:32:b2:45:9f:94:ca:6c:f2:6f:3d:99:66:20:
                    8f:19:8e:70:81:90:35:c9:c9:e2:80:ec:0d:4a:4c:
                    a5:49:22:ca:e6:85:54:f6:cb:4b:7a:0f:d3:37:da:
                    d0:b4:37:bc:3a:cc:b4:1e:6f:33:6b:de:2d:20:39:
                    8a:36:50:17:69:1f:f8:22:b4:79:6e:6e:d0:e1:a5:
                    ec:94:ca:08:c7:86:db:e7:c1:cd:d1:e6:a3:63:38:
                    da:37:67:e1:21:d5:d4:77:3a:35:87:86:8f:0d:56:
                    31:c3:1d:c8:3b:df:d4:fa:d2:3a:91:75:41:a1:39:
                    36:30:77:6c:e2:c8:c5:9f:55:8d:ab:2b:3e:7e:9a:
                    f6:bd:7d:bf:33:bd:f6:b8:a6:33:d4:57:a0:84:6a:
                    1a:f1:18:5e:46:d1:47:73:0e:b0:3f:fb:82:31:32:
                    ce:41:01:b5:3a:cc:d6:56:85:e0:d2:3c:a9:02:4f:
                    a1:7f:a5:c0:68:2d:12:01:bc:df:de:b3:f0:f9:5c:
                    0d:b0:ab:16:4f:83:f8:59:ff:11:5f:c2:5d:14:45:
                    7f:20:e9:b5:6b:1a:9b:c1:c6:9b:ad:5f:c8:88:fb:
                    b4:d0:36:3e:eb:23:3e:62:07:c7:c1:ff:69:2d:d5:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:DA:F8:D3:96:EC:A8:2C:74:6F:14:DC:B1:94:28:C2:10:EC:42
            X509v3 Authority Key Identifier:
                keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3230303a3a2f34302d3430203d3e20323732383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8690:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:39:1a:60:20:ca:69:4b:a2:fa:a0:3f:2a:7d:77:83:00:77:
         fc:cc:45:9d:d3:f1:ff:3a:33:3d:ed:9b:39:3f:8e:40:b9:8b:
         0f:4f:82:e7:56:d8:1a:92:60:0d:04:1e:03:ac:f0:2e:21:14:
         da:62:fd:09:fd:80:a3:87:bd:56:f1:94:65:5c:13:1a:29:5a:
         e0:f2:64:d9:ae:05:a2:8c:9c:63:8b:0b:f4:9c:c6:5b:de:1f:
         46:19:c7:6b:4b:dc:eb:a4:0b:fc:49:ef:e5:b3:54:8e:1d:f3:
         21:46:25:97:03:ff:25:92:dc:53:88:d1:7b:d1:89:bf:6b:17:
         ab:3c:76:07:05:0c:9f:ea:02:1d:fb:8d:24:ba:e7:6c:52:7d:
         87:73:0c:b9:f6:69:a5:69:f4:fc:8c:c5:86:91:b5:c7:88:7d:
         0b:74:00:de:28:36:a2:e2:81:32:dd:59:aa:53:ee:35:67:67:
         96:08:a7:68:c7:8a:9f:76:a7:2d:68:b1:b4:12:d6:f0:58:6f:
         3d:68:be:e7:3f:c7:f0:d9:e0:38:79:06:00:84:8f:d8:83:45:
         9b:a8:f3:82:38:7a:07:b5:5c:89:25:dd:7c:d7:25:b3:04:95:
         be:3f:88:b3:b8:15:1c:ba:5c:6d:2b:3a:6a:a2:ef:03:1a:12:
         2b:f2:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:04 2024 by rpki-client on console-fra.rpki-client.org