Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa
File:                     323830333a373036303a3a2f33322d3332203d3e20323633373534.roa (raw, json)
Hash identifier:          z1vIBnJJVBC9Hc63VdhasD4lGzeki3D8C6tKPH0ImXA=
Subject key identifier:   A1:00:44:42:6D:B2:9E:8E:8B:FB:DF:F8:9D:4B:E3:94:D0:2F:B7:26
Certificate issuer:       /CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
Certificate serial:       7BE197904B4E594EFB7FEFEC6BF6E5BF7C12D901
Authority key identifier: C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa
Signing time:             Tue 05 Mar 2024 18:16:51 +0000
ROA not before:           Tue 05 Mar 2024 18:11:51 +0000
ROA not after:            Tue 04 Mar 2025 18:16:51 +0000
asID:                     263754
IP address blocks:        2803:7060::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e1:97:90:4b:4e:59:4e:fb:7f:ef:ec:6b:f6:e5:bf:7c:12:d9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
        Validity
            Not Before: Mar  5 18:11:51 2024 GMT
            Not After : Mar  4 18:16:51 2025 GMT
        Subject: CN=A10044426DB29E8E8BFBDFF89D4BE394D02FB726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:03:f4:a5:c4:4d:d6:7d:f4:a0:c9:56:14:
                    c0:1e:47:4d:15:b6:b7:a3:a4:65:ed:25:79:ee:5d:
                    bb:2c:c9:5c:56:02:23:57:06:e0:ef:fa:c8:e6:32:
                    05:48:4b:5a:fc:e9:ed:7e:53:e5:77:30:77:ab:ce:
                    38:9a:21:f5:a0:6f:fc:86:25:de:00:6e:94:91:6a:
                    1a:96:6d:da:02:6b:83:60:aa:e8:b6:44:3c:3e:b7:
                    23:f2:65:1e:ba:53:88:e4:b9:9b:32:86:89:c9:aa:
                    f1:33:18:f0:1f:d5:37:cc:10:41:10:5c:89:00:17:
                    e0:cf:6c:6a:7e:f8:bc:f2:e7:2c:c9:0c:cb:f8:a0:
                    3f:37:d1:84:18:c7:20:a2:f8:e3:98:18:df:60:55:
                    af:b7:6b:aa:9a:40:1a:3c:96:b6:be:0d:ac:f8:84:
                    2b:79:81:ff:fc:7c:73:3d:86:09:24:75:13:f4:b4:
                    85:3f:24:b0:74:6d:a3:ef:50:b3:38:7b:90:a0:fa:
                    cd:85:31:f5:7e:cd:a6:1a:c1:94:fb:d7:fe:7b:ae:
                    ad:30:ba:43:bf:3f:a5:ce:ad:f4:72:6f:df:8d:0f:
                    48:db:de:e5:34:81:6b:f1:97:39:31:40:cb:2e:fa:
                    67:3c:eb:e3:e4:7b:48:52:19:25:a3:eb:81:d5:16:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:00:44:42:6D:B2:9E:8E:8B:FB:DF:F8:9D:4B:E3:94:D0:2F:B7:26
            X509v3 Authority Key Identifier:
                keyid:C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323633373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7060::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:40:1c:79:5c:6a:9e:a2:ef:cc:06:d7:43:37:32:5e:51:45:
         61:fb:a2:20:60:68:86:12:f5:47:2a:4f:30:2b:ee:c5:2a:85:
         98:55:ac:eb:2f:20:c7:84:3e:b1:82:6f:ca:a1:ab:49:ee:16:
         80:de:c5:f6:28:71:a7:82:4e:05:5c:0e:8b:a9:8f:06:ca:f9:
         0d:d5:62:0a:7d:6f:74:68:66:95:aa:a1:04:97:12:ce:2f:e8:
         5e:09:e2:06:ef:d8:84:c1:72:08:2d:cc:cc:dc:d5:91:69:01:
         a2:7c:fa:03:c9:16:d7:03:c1:79:a8:52:2b:be:10:86:3f:10:
         ae:0a:bb:2c:bb:7b:81:4b:cf:cb:53:4f:42:81:e7:8c:2e:61:
         8c:ce:59:9f:e0:ed:e7:1b:6d:f5:a2:35:4f:db:b8:32:a0:1f:
         5f:5d:df:df:14:66:85:71:4a:37:82:f6:9e:8a:a9:e3:11:3f:
         85:c8:51:75:f9:34:be:3a:fa:30:14:2b:ef:1a:99:41:37:f7:
         dd:bc:41:44:3c:fb:53:ad:c8:98:75:4c:27:15:17:1b:3f:02:
         39:ef:26:53:ab:28:ea:43:92:fe:b1:f9:39:51:b9:95:93:be:
         88:b2:bf:e5:f8:d9:12:43:d8:d7:ff:0b:7e:e7:06:54:a9:fd:
         34:7e:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org