Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3630303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3630303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          i4/H7U3XukcOhTxQX97jKNvel7m7+o0AoPA6ZnYiO3M=
Subject key identifier:   50:63:85:26:0D:7C:1E:7C:09:60:B6:CE:56:58:72:28:AB:7D:F0:6B
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       32DDAE454CDA4EBDE698A6636B837F316A6A6B7D
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3630303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:59 +0000
ROA not before:           Tue 05 Mar 2024 17:42:59 +0000
ROA not after:            Tue 04 Mar 2025 17:47:59 +0000
asID:                     264824
IP address blocks:        2803:e360:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:dd:ae:45:4c:da:4e:bd:e6:98:a6:63:6b:83:7f:31:6a:6a:6b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:59 2024 GMT
            Not After : Mar  4 17:47:59 2025 GMT
        Subject: CN=506385260D7C1E7C0960B6CE56587228AB7DF06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:18:9b:7d:f2:9d:b6:24:ef:55:85:91:82:
                    7a:9c:07:ca:88:21:15:20:ab:d9:02:2a:cf:2c:94:
                    4b:75:ee:16:2a:47:11:07:86:01:fe:69:89:b5:bc:
                    d5:b4:72:ab:6c:cc:d5:3c:d5:dc:c2:c3:d9:1b:7b:
                    da:e3:ed:49:7f:1a:74:3e:f9:fe:28:75:b4:06:92:
                    43:1b:8c:6f:74:19:17:56:c8:d0:b0:25:29:11:36:
                    56:fa:b7:55:a7:73:1f:56:04:cf:dd:c4:9c:6f:5f:
                    e1:3b:12:af:95:10:de:44:a6:c8:3c:38:01:1f:5a:
                    57:77:0e:4c:ac:bc:86:45:61:16:b2:55:44:09:ba:
                    75:50:47:53:54:64:87:69:6f:17:54:d2:bd:11:10:
                    53:a2:37:b3:4b:11:f9:90:e0:58:37:1a:e7:d4:8d:
                    c9:6d:39:62:07:4f:1a:aa:75:1d:7f:9a:f2:84:10:
                    8a:6a:3f:62:34:a8:82:24:e6:50:77:93:54:a6:84:
                    13:4f:e4:5a:13:25:f0:ad:63:c5:8d:df:95:f0:c9:
                    18:b4:fb:8d:b6:25:70:ce:9e:20:73:52:a9:d7:81:
                    df:d6:af:c3:34:6f:7a:fe:00:2a:73:1e:1a:a3:c0:
                    65:0a:6e:0d:0e:76:52:00:e9:1d:74:20:7c:e4:7d:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:63:85:26:0D:7C:1E:7C:09:60:B6:CE:56:58:72:28:AB:7D:F0:6B
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3630303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:e9:3f:c2:b6:4d:cb:17:2f:92:89:07:46:a2:9c:39:0e:
         63:fe:b6:e3:a7:73:49:98:5a:37:48:1a:81:cc:f0:c9:55:08:
         a8:85:36:c0:2b:f5:8a:e0:93:f4:52:76:8b:0d:13:3a:14:33:
         36:ba:2b:a0:da:29:34:9a:6f:d5:33:3d:7e:7d:b3:ce:e3:e7:
         64:de:2d:7f:5b:2b:04:2a:ef:34:ef:38:32:26:eb:a1:d0:2c:
         ca:54:c0:cc:74:42:df:6b:c9:fa:f3:25:4e:a3:cd:ab:0a:ec:
         b2:90:c1:9e:57:7d:27:1e:d6:99:4b:6c:79:e5:fe:74:82:46:
         77:b3:5c:14:98:d3:33:f1:35:74:1b:6a:8f:6b:4d:82:9b:7d:
         34:c1:a0:62:3d:26:3c:24:b1:91:cd:b6:5b:79:e3:01:29:11:
         bb:56:b0:de:fe:c5:05:9e:49:b4:ca:c8:d4:04:9f:9a:54:bc:
         05:07:73:e8:47:0e:31:90:45:80:d9:7d:17:3c:2e:01:34:2f:
         94:f7:86:24:9e:f6:e6:d8:9e:d4:4d:01:9f:6c:d8:ba:58:18:
         b3:1f:64:23:28:41:ef:c9:d7:df:a3:e5:b1:c1:61:03:d1:c1:
         87:f5:c9:53:4a:9e:7d:c3:06:ea:50:70:ef:fc:f2:b1:9b:bb:
         c8:b2:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org