Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383130303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a383130303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          hFqO7Ehjv/E0TnLPfv68UKeh1PySbXCne4K7q/S2PoI=
Subject key identifier:   D7:84:85:EF:EC:D1:15:3D:F5:8F:2C:F6:44:EC:7E:E4:EB:8D:D2:39
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       260B2E3A28D514B93D29F8562E663B7ED2246854
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383130303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:01 +0000
ROA not before:           Tue 28 May 2024 02:35:01 +0000
ROA not after:            Tue 27 May 2025 02:40:01 +0000
asID:                     64120
IP address blocks:        2803:f080:8100::/43 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0b:2e:3a:28:d5:14:b9:3d:29:f8:56:2e:66:3b:7e:d2:24:68:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:01 2024 GMT
            Not After : May 27 02:40:01 2025 GMT
        Subject: CN=D78485EFECD1153DF58F2CF644EC7EE4EB8DD239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:05:d9:c7:19:75:cc:cc:cd:ff:a1:fd:cc:92:
                    84:a0:de:58:90:24:e5:0a:ed:6d:1a:2f:55:a2:11:
                    4e:28:42:a1:50:f5:3f:47:fc:e4:00:26:24:f3:44:
                    55:b4:69:3c:11:de:99:68:a1:14:8a:88:e3:54:90:
                    2d:13:5c:ef:5f:91:c2:b9:46:a9:f1:d0:2f:21:71:
                    0b:3d:00:74:17:8b:e5:0b:f4:b0:db:4f:60:f1:c2:
                    e2:38:e8:83:50:13:00:ae:43:0e:70:97:3a:3f:1d:
                    a9:84:bf:03:97:60:c8:56:67:7c:e2:aa:fe:f4:f9:
                    54:8f:ee:25:78:db:84:2f:a8:5e:d6:62:09:14:6f:
                    29:03:18:e2:99:48:0d:ce:b7:51:86:9b:3f:1d:e8:
                    ee:83:23:cf:58:5a:64:68:c2:c4:41:2c:d8:48:21:
                    92:99:71:c1:94:2f:15:8b:35:f0:27:80:4d:69:2e:
                    5a:61:4c:9e:6d:57:02:67:f9:89:d0:ad:50:57:ae:
                    05:4b:e4:88:03:19:42:84:36:ae:20:d7:7e:33:80:
                    97:23:c7:40:2f:0f:b7:83:49:d6:f5:16:d5:16:f7:
                    af:14:0e:f5:f7:7a:ed:f2:33:80:90:39:77:33:26:
                    ac:62:cb:10:c7:09:73:bf:e2:8f:fe:e9:97:e5:98:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:84:85:EF:EC:D1:15:3D:F5:8F:2C:F6:44:EC:7E:E4:EB:8D:D2:39
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383130303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:8100::/43

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:50:d9:43:5d:a0:70:50:98:a6:cb:f9:fd:f7:0e:85:ab:
         54:d6:b5:34:23:bf:1f:b3:c0:fb:d4:8e:e1:32:72:2e:17:b0:
         24:75:ee:ff:df:16:e4:66:ff:b5:c0:66:40:46:70:d4:e5:71:
         c8:37:65:66:3b:d5:e1:0a:2a:79:52:c1:f7:78:7b:6a:9f:9d:
         13:37:2e:c8:90:59:85:42:16:2f:70:78:6f:e3:af:4d:99:c6:
         68:a8:cf:02:ad:d8:63:05:c7:f9:65:5a:89:af:e1:06:ff:54:
         ec:ae:12:8c:da:76:8a:53:39:1e:20:db:fb:2d:00:f6:c0:09:
         70:af:27:14:60:bb:6c:59:a1:49:62:8d:fa:6e:0d:f0:e4:b5:
         b3:6d:07:ed:d4:67:3b:87:aa:1a:be:31:d4:ab:c7:c6:71:dd:
         5f:ba:1d:65:c0:25:26:43:c2:e9:62:69:05:d7:b8:16:28:4b:
         e7:5f:3f:dd:d1:ab:e9:b8:7a:33:23:79:d0:45:aa:f3:8c:6b:
         8b:ec:e2:ba:0a:94:ad:92:8b:a6:be:25:ca:47:c6:8f:57:cf:
         86:9e:76:73:8a:db:91:5e:be:d2:ed:a5:34:af:05:a2:91:ef:
         01:b1:5b:c0:c4:1b:ef:44:72:d3:5f:46:d1:7b:d2:a2:5b:0c:
         79:00:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org