Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f33322d3332203d3e20323637363739.roa
File:                     323830333a366561303a3a2f33322d3332203d3e20323637363739.roa (raw, json)
Hash identifier:          d1z14gzaoXZZWI4fen4S5HXxFPFWD6i/MZuRSZnY6Jk=
Subject key identifier:   9C:5E:C6:70:2E:E9:9C:24:58:92:5F:3F:4D:A4:7C:E1:04:3B:DE:07
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       6219191C10676CDC87AD650AD9EF02C553EC7657
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f33322d3332203d3e20323637363739.roa
Signing time:             Tue 05 Mar 2024 17:42:47 +0000
ROA not before:           Tue 05 Mar 2024 17:37:47 +0000
ROA not after:            Tue 04 Mar 2025 17:42:47 +0000
asID:                     267679
IP address blocks:        2803:6ea0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:19:19:1c:10:67:6c:dc:87:ad:65:0a:d9:ef:02:c5:53:ec:76:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Mar  5 17:37:47 2024 GMT
            Not After : Mar  4 17:42:47 2025 GMT
        Subject: CN=9C5EC6702EE99C2458925F3F4DA47CE1043BDE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:8a:8d:87:4d:24:a6:fc:cf:f6:a9:d3:16:
                    78:86:86:e4:dc:98:5d:1f:63:34:5c:be:bf:86:48:
                    7c:7f:0a:39:80:56:aa:b4:7f:be:68:89:ca:71:ff:
                    2a:50:ee:b0:2f:6a:c1:0e:4e:0d:68:39:26:ea:82:
                    0a:ed:23:2e:69:17:e0:40:d3:95:3a:01:eb:34:f4:
                    5a:ab:b4:ea:cf:6a:8e:db:a6:09:cf:e4:2d:0c:6b:
                    ec:79:fe:f0:e5:2d:8d:b7:48:ff:bd:10:29:e7:f1:
                    79:61:72:39:00:0c:80:e4:a5:58:ef:d5:e3:62:bc:
                    63:81:10:b1:d9:09:4c:e8:79:e7:bc:e1:96:f7:69:
                    a5:8e:a4:e0:a1:04:6b:ac:cf:f0:9a:06:d9:50:74:
                    d8:a6:18:a9:aa:03:5f:af:b3:bc:46:0c:88:ac:46:
                    b7:9d:ad:45:f3:d4:d2:19:7d:eb:e8:b6:53:1a:59:
                    98:76:63:20:47:50:1a:f2:6c:7d:98:80:6e:6d:4a:
                    eb:39:07:0a:99:f5:20:4d:3b:92:3e:63:61:78:09:
                    78:a0:79:9e:ee:65:e4:0e:1c:e5:f6:f1:54:8a:c9:
                    59:54:b6:24:96:8a:34:9a:b3:f6:68:f5:4d:87:60:
                    94:3a:e4:c5:69:98:9c:a7:65:ee:5e:2e:a2:47:2a:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:C6:70:2E:E9:9C:24:58:92:5F:3F:4D:A4:7C:E1:04:3B:DE:07
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f33322d3332203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:18:41:c4:10:d9:a7:39:31:15:66:b7:64:5d:ce:7e:d0:
         e0:80:2e:dc:24:e1:7b:68:21:78:03:76:a6:0e:27:83:6c:f8:
         d8:f7:c2:3c:ed:2b:e7:91:a8:10:d6:25:1e:97:c0:53:f6:06:
         d1:cd:b0:55:f4:90:54:4b:ae:8f:31:37:4a:0e:dc:50:bc:35:
         d2:a2:da:64:d0:45:10:cb:46:96:86:77:9b:9c:21:f2:af:88:
         9f:8a:0d:b6:aa:6d:91:6e:84:47:1a:c3:5c:75:85:86:36:7d:
         6e:2f:1a:67:0c:90:38:c3:d2:59:0d:05:3f:b6:4b:89:17:2b:
         5a:25:7d:7d:db:ef:1e:fe:90:b5:61:92:72:45:00:13:38:a9:
         35:5d:7e:8a:f0:39:fd:26:6a:e3:d2:ef:ee:05:3d:15:93:b3:
         01:ea:0a:61:9b:d4:63:bc:b2:94:bc:fe:b8:80:56:30:e0:2a:
         10:26:98:23:ce:9e:78:86:78:76:18:84:4c:94:02:30:ca:ba:
         f9:ea:d7:bf:77:57:a9:8a:f5:12:3b:21:9c:3d:d4:15:36:23:
         b2:fe:12:48:c7:d9:70:cc:1b:83:ea:c1:3a:1e:3b:58:17:18:
         7d:79:e8:2a:24:3d:ba:e5:3b:17:69:87:96:9d:95:35:24:23:
         33:74:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:37:14 2024 by rpki-client on console-fra.rpki-client.org