Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a3a2f33322d3438203d3e20323633323130.roa
File:                     323830333a363730303a3a2f33322d3438203d3e20323633323130.roa (raw, json)
Hash identifier:          9ws58e2eCXNkmq390BkvEF1qfcHxNqlx/zucBwuQq7g=
Subject key identifier:   AF:06:D1:98:DF:C8:25:9F:B9:BC:32:F0:6A:0A:2B:A4:B7:C6:11:15
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       65EDE308106B38AF8016A4831866203A397AEE65
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a3a2f33322d3438203d3e20323633323130.roa
Signing time:             Tue 05 Mar 2024 17:57:36 +0000
ROA not before:           Tue 05 Mar 2024 17:52:36 +0000
ROA not after:            Tue 04 Mar 2025 17:57:36 +0000
asID:                     263210
IP address blocks:        2803:6700::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ed:e3:08:10:6b:38:af:80:16:a4:83:18:66:20:3a:39:7a:ee:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Mar  5 17:52:36 2024 GMT
            Not After : Mar  4 17:57:36 2025 GMT
        Subject: CN=AF06D198DFC8259FB9BC32F06A0A2BA4B7C61115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:0a:b8:4a:73:85:85:74:6b:de:a3:e8:65:
                    35:b7:67:ce:34:df:14:e4:32:2f:4f:45:dc:4f:88:
                    ee:49:71:15:4e:df:e1:48:b0:17:fb:52:91:71:56:
                    7f:7b:c0:89:1b:41:0e:08:2e:cd:6f:7b:c1:ec:28:
                    ee:df:06:6b:c0:90:5c:fb:95:ab:60:d4:1f:c7:2f:
                    06:33:f3:e5:02:1c:cf:91:b0:6c:99:8f:e2:be:5f:
                    ce:e4:f9:9d:16:71:db:0a:06:25:9d:a0:a5:e0:da:
                    7c:15:39:73:bd:2c:9e:5c:ad:d9:49:d2:77:b1:6e:
                    27:f5:d0:fc:86:73:2e:31:15:e4:a0:ac:90:3d:0f:
                    38:7f:c1:65:66:f7:c6:bc:1d:ec:f2:02:36:7b:aa:
                    64:d1:5e:dc:88:94:da:95:cb:6b:99:bd:71:84:e0:
                    4d:fb:05:d9:ef:bd:6c:59:82:4a:28:cc:c9:c2:71:
                    98:7c:81:08:45:b0:03:14:35:27:34:95:fa:15:f1:
                    8f:54:dd:81:a0:10:76:1b:3d:9d:7b:94:df:6b:04:
                    eb:26:bf:93:9c:bb:97:10:1d:3c:1b:05:48:4c:f4:
                    93:60:ac:48:93:2a:fc:f0:7a:32:3e:9d:17:0b:85:
                    ee:fd:ee:01:43:5f:0c:f4:59:f1:37:71:65:16:54:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:06:D1:98:DF:C8:25:9F:B9:BC:32:F0:6A:0A:2B:A4:B7:C6:11:15
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830333a363730303a3a2f33322d3438203d3e20323633323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6700::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:05:e4:29:60:a0:47:bf:4f:c5:8a:0c:23:8a:0e:04:ee:
         eb:c4:7a:6d:17:7d:ef:6a:37:26:ee:98:cf:05:07:23:ba:8e:
         6d:33:7d:99:6c:3a:e7:56:0c:3a:3a:c5:76:f4:38:6b:81:fe:
         72:fe:f2:ed:65:27:e6:7f:c5:c2:27:f7:ec:e7:71:4a:87:92:
         f9:4f:b7:e7:3b:5c:56:7d:93:71:77:fd:e7:8f:35:37:5e:37:
         f0:9f:07:c2:c8:de:9b:ad:b8:d1:04:bd:f7:47:b7:70:64:58:
         17:1e:48:a0:1b:09:e6:1b:ee:8d:0d:75:3b:12:3e:10:c9:bf:
         88:21:7e:6e:c1:4f:5f:74:c2:fd:31:ca:e0:5b:09:9d:85:10:
         e1:e1:72:fb:3b:9e:55:1d:c2:d9:cf:3a:35:92:3e:f9:64:21:
         83:55:16:96:bc:13:56:b3:3c:06:40:bc:bf:b4:41:9f:9c:2f:
         98:9e:8e:9a:63:c8:28:5c:a1:c4:de:b9:52:68:f8:81:ef:1f:
         6c:bf:2f:2c:ee:49:27:06:10:f0:2f:58:27:e6:48:ac:38:e5:
         33:30:b0:38:d2:56:7c:69:ec:ff:57:f3:1d:91:cc:cd:5b:4d:
         6a:95:99:60:62:9f:70:54:a1:7d:8e:eb:86:58:b6:5d:41:03:
         5a:df:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org