Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3230303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3230303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          ztI6ZUAXxr8v1WaP4Cr+oFPZWWNXKENaNGRpnVu62Iw=
Subject key identifier:   86:01:B5:4B:02:C2:1F:A0:29:29:9E:B2:9A:FD:56:5E:23:B9:E8:B0
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       707E63FC9EDA3B2DFA8C9EA10D5B44725D73BE11
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3230303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:58 +0000
ROA not before:           Tue 05 Mar 2024 17:42:58 +0000
ROA not after:            Tue 04 Mar 2025 17:47:58 +0000
asID:                     264824
IP address blocks:        2803:e360:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7e:63:fc:9e:da:3b:2d:fa:8c:9e:a1:0d:5b:44:72:5d:73:be:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:58 2024 GMT
            Not After : Mar  4 17:47:58 2025 GMT
        Subject: CN=8601B54B02C21FA029299EB29AFD565E23B9E8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:98:42:dd:15:11:5e:c8:dc:cc:6d:8a:e5:
                    9e:46:af:35:2d:6b:fc:31:68:47:97:87:26:cf:fe:
                    8e:0d:f4:37:28:5a:ac:e9:0b:19:61:8e:ff:70:cf:
                    ad:f4:a2:36:8e:fc:80:c9:f4:c2:0e:96:63:89:2e:
                    b4:41:e3:b1:88:59:7f:03:94:fb:c9:d0:47:0a:0c:
                    1d:e7:5b:37:80:d0:bb:d9:32:d6:84:c5:8b:a2:2b:
                    b0:03:bf:14:2c:36:e0:e2:5e:70:3a:19:56:6b:2a:
                    1a:31:29:63:16:68:aa:70:25:54:09:c7:5e:2f:44:
                    26:da:f4:e7:0c:85:ad:3b:2b:8c:d0:d4:46:cb:2d:
                    36:0f:2e:2c:d7:35:81:09:8c:98:02:b9:07:af:7a:
                    26:41:32:4e:8e:74:79:86:7c:01:0d:76:bf:f9:55:
                    d7:05:14:74:d0:1f:98:eb:2e:f9:34:d0:40:84:89:
                    7f:49:17:f7:e4:47:71:be:09:60:95:ad:95:41:3e:
                    93:37:32:ec:cc:4b:92:a5:31:d2:7c:f9:a2:f4:1f:
                    af:56:95:0f:d7:af:63:88:11:9b:34:33:dc:f3:1a:
                    be:35:78:4c:7a:78:d2:3e:15:bf:08:94:6d:9e:f8:
                    a6:d7:31:85:e6:e9:3b:ae:88:cc:ee:b9:b2:e9:d4:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:01:B5:4B:02:C2:1F:A0:29:29:9E:B2:9A:FD:56:5E:23:B9:E8:B0
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3230303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:36:02:d8:21:ff:78:d1:10:ac:81:95:fb:70:c1:c4:bb:
         9a:21:55:0a:ec:1b:47:33:e2:8d:f0:64:eb:33:6c:c8:64:97:
         ae:75:ce:53:df:82:8d:9b:b2:7a:1c:4e:ad:21:9a:a9:6e:74:
         3d:3d:40:a2:9f:4f:94:94:11:e0:e6:d1:8c:ff:47:29:e8:fc:
         11:f7:05:07:f4:f8:6b:70:6c:6b:5a:df:31:66:c0:6c:18:0c:
         93:b3:7e:3d:b1:c2:52:4f:d1:82:9f:13:29:53:70:19:3c:75:
         11:46:b3:70:c1:68:6b:56:a4:7e:6e:48:19:1d:8d:0f:51:5f:
         6c:b3:c0:a3:0e:b5:91:95:49:24:5b:f6:b2:d7:65:46:51:b2:
         8e:4f:f4:49:be:93:27:40:78:9f:30:28:bc:5e:0d:c0:0c:14:
         a8:a4:74:e0:30:79:3a:a1:3c:d7:d7:12:59:06:5c:ec:2a:52:
         6b:7e:90:88:bc:4e:09:3c:90:fe:9f:b6:43:d6:a0:86:99:70:
         19:ef:b0:83:a5:48:c9:88:50:a9:80:d7:4c:a0:50:8b:7c:6d:
         da:30:97:6b:83:1c:d3:08:f9:ec:36:15:52:5b:96:45:ec:8a:
         23:45:38:03:70:a6:2a:36:e8:9b:33:58:23:11:26:e8:6a:cf:
         d2:eb:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:57:06 2024 by rpki-client on console-ams.rpki-client.org