Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383065303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383065303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          xkEv28KPadG4Xdfg+y2nfvKE1hST5DwqxIoVtn0gNpc=
Subject key identifier:   6C:9B:5D:DF:1A:E0:0B:2A:8A:B5:7D:BB:E2:7C:3C:52:EC:30:DB:9A
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       05CCD781B063926F8C9E48E81A6718EB548ADF73
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383065303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:00 +0000
ROA not before:           Tue 28 May 2024 02:35:00 +0000
ROA not after:            Tue 27 May 2025 02:40:00 +0000
asID:                     64120
IP address blocks:        2803:f080:80e0::/43 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cc:d7:81:b0:63:92:6f:8c:9e:48:e8:1a:67:18:eb:54:8a:df:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:00 2024 GMT
            Not After : May 27 02:40:00 2025 GMT
        Subject: CN=6C9B5DDF1AE00B2A8AB57DBBE27C3C52EC30DB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:ee:76:ca:43:c7:3c:25:ec:f8:91:b2:af:
                    18:70:08:30:31:28:8e:3f:ac:bc:d7:61:bb:1c:80:
                    6e:d9:7d:55:d8:25:1a:b0:dc:41:83:b9:85:a6:7d:
                    e7:59:40:c3:e4:d4:4f:80:a0:89:56:3b:46:a4:e1:
                    0d:98:60:15:a3:1a:8a:90:6f:7a:30:a3:0c:d9:94:
                    bc:c7:7b:dc:86:79:5c:d6:bf:ce:94:2d:fc:6b:5b:
                    52:c6:f4:c3:b6:19:fe:c0:37:9e:fd:fc:a5:bd:34:
                    c7:b1:85:a3:9a:98:65:ee:65:c4:0d:31:02:a6:d5:
                    a2:c2:67:fc:a1:e9:4a:db:b9:03:a8:5c:e2:ee:5e:
                    1f:ab:53:13:35:4b:3c:64:4e:50:8f:0b:1e:39:41:
                    60:46:01:36:1b:21:fb:a0:6d:b9:8c:47:c6:37:c1:
                    13:c9:18:27:24:a8:e7:4e:ef:ae:b9:a3:d5:de:5a:
                    b5:72:7f:19:ae:56:27:1f:b1:14:63:fc:30:f8:bc:
                    c5:5b:3f:b5:b1:b0:e0:70:8d:e6:37:41:86:74:a9:
                    44:20:57:65:38:f7:99:dd:06:fc:53:62:8a:da:09:
                    8b:ed:f6:ae:35:1e:38:7c:f3:fa:89:37:2e:23:6a:
                    87:dc:73:3c:fc:ba:24:7f:c2:8c:00:55:29:06:2c:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9B:5D:DF:1A:E0:0B:2A:8A:B5:7D:BB:E2:7C:3C:52:EC:30:DB:9A
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383065303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:80e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:a6:03:c7:b9:ee:a9:1c:0c:5b:35:d2:16:f6:c1:d7:80:
         b9:2a:0b:a0:05:3f:c6:69:58:1a:8e:f0:ef:31:f0:91:15:33:
         3a:85:dd:85:21:fb:7f:f7:08:21:c2:9b:1a:b8:90:f1:d0:1f:
         34:18:74:9b:f9:36:1f:a5:60:92:09:8b:3f:5a:d5:7a:91:7f:
         a0:ee:0e:f0:42:cb:09:b0:8a:8c:3d:6d:fb:42:6e:8e:1b:87:
         1a:4c:dc:80:91:bc:fa:c7:ea:7e:4d:9d:ef:9d:5e:2c:a6:cf:
         03:29:5b:e3:a6:eb:1b:2a:90:4a:b6:dc:f8:71:d3:13:21:17:
         07:bb:55:2b:ce:93:3b:22:0b:d0:16:5f:7f:01:fe:fb:69:48:
         2d:19:8d:8f:55:9a:5e:da:9e:67:db:6d:69:a3:42:97:ac:b4:
         ad:af:e7:82:49:41:e2:0e:08:f1:f5:c6:c7:da:1d:46:5b:43:
         91:7b:61:d7:60:20:0b:43:70:41:c9:0b:8c:bf:40:65:42:d1:
         b8:70:8b:ff:62:31:7f:ea:d1:d9:42:6a:5c:53:93:db:a2:2c:
         2a:bb:22:3e:d3:b8:c2:f5:8c:bb:a1:9c:6b:0f:55:cd:7a:e5:
         93:00:3a:88:46:dd:64:75:ab:c5:ed:83:5f:c3:96:47:48:62:
         4b:0b:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org