Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323032303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323032303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          bPkPvcUpQ8vJU6QEB1oR/AU3/SBmIUrjcClrgqU2GX0=
Subject key identifier:   A4:E3:7D:B4:B6:07:DC:12:19:A6:73:30:3B:26:79:B0:B2:D5:66:A7
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       4782E4E609FE3D99A3008C04DB406E438E8A2B92
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323032303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:00 +0000
ROA not before:           Tue 28 May 2024 02:35:00 +0000
ROA not after:            Tue 27 May 2025 02:40:00 +0000
asID:                     64120
IP address blocks:        2803:f080:2020::/43 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:82:e4:e6:09:fe:3d:99:a3:00:8c:04:db:40:6e:43:8e:8a:2b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:00 2024 GMT
            Not After : May 27 02:40:00 2025 GMT
        Subject: CN=A4E37DB4B607DC1219A673303B2679B0B2D566A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:6c:43:20:a5:fb:b5:78:a1:b4:fc:74:e6:
                    9b:58:08:6d:16:0a:40:26:94:61:26:7a:3e:92:b7:
                    08:45:d1:8d:6d:ed:5c:22:1c:c5:be:fd:de:b3:6a:
                    7f:5d:46:16:fe:6b:23:d1:d1:2d:8a:47:9b:43:52:
                    88:ec:5e:9d:f2:73:b2:00:78:94:c8:d6:a4:3a:b6:
                    2d:1d:91:4f:50:cc:b0:66:ad:03:91:51:b5:f7:d6:
                    5d:66:6e:02:1e:94:17:d9:3a:32:24:11:55:2a:b3:
                    b3:1c:0a:52:94:f6:78:e3:e0:b6:7e:67:bb:44:ab:
                    44:07:e1:dc:a3:8a:37:73:86:ff:c9:5c:be:d8:20:
                    9c:12:54:7d:7a:66:f5:1b:75:af:c4:40:db:01:be:
                    3e:2e:d6:4c:5b:ec:4e:23:1d:3e:26:43:8a:1e:47:
                    9f:4d:90:0d:b1:eb:36:4e:2c:43:5b:19:d0:b4:12:
                    2c:f2:ce:bd:b4:eb:b7:59:65:bc:84:f0:4a:e8:fa:
                    2d:53:9a:0f:dc:9a:9a:6a:34:95:6a:e1:51:d5:c1:
                    14:d6:1d:5c:42:78:2f:1d:00:13:1e:7c:4e:5e:67:
                    90:a9:18:7c:f7:48:77:10:6f:54:f2:c7:7a:a5:1d:
                    79:8a:84:28:dd:c7:87:cb:fc:0f:93:b1:ee:e9:88:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:7D:B4:B6:07:DC:12:19:A6:73:30:3B:26:79:B0:B2:D5:66:A7
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323032303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2020::/43

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:08:09:ce:bb:d9:2b:1a:72:f1:b7:df:a1:9a:6b:87:d9:
         65:c7:5f:5e:ce:ed:4d:a4:8c:61:91:7e:f4:bc:6d:2a:b0:8e:
         b5:11:42:a7:db:e9:00:c9:e5:85:ea:18:42:ff:41:3e:5f:e6:
         1b:9f:62:d4:b6:e8:ac:9e:09:d4:82:6c:29:ec:65:8f:2c:fd:
         d4:89:8c:ba:8a:b4:0b:7e:1d:dc:f5:2d:d8:ba:d9:35:cd:c4:
         b6:03:3d:8f:c6:95:9c:c2:be:dd:51:8c:05:1f:20:95:79:23:
         4a:e6:be:31:45:4a:a4:fa:1e:0b:d9:db:35:22:19:c9:ad:8e:
         81:04:d1:68:61:2a:dc:74:65:90:a3:83:3e:22:a3:e0:b2:d1:
         11:2b:cf:dc:68:a9:74:44:93:10:13:17:58:ba:b5:96:dd:75:
         23:2a:e2:df:7a:13:f1:db:7e:83:a9:de:d0:39:5b:9b:86:f1:
         e5:75:36:f8:f0:e5:c3:b0:28:1d:e0:0a:39:d6:34:59:79:b3:
         19:38:25:0b:9a:7d:72:18:6d:c2:8c:bc:55:62:3c:b9:4b:35:
         ae:ae:ca:5e:05:ba:25:02:a3:18:a6:e1:1b:47:43:8b:c2:28:
         10:62:d0:02:e6:4a:c4:7f:88:61:90:8a:c2:31:d7:2a:b8:ce:
         2c:0f:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org