Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6430303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6430303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          B9XJ/hk3wzsLgJ4Je08xBwXbD5SdQslKcSTaewj8ofQ=
Subject key identifier:   D3:D3:9F:06:CE:2B:1B:3A:13:18:ED:7E:3F:DF:F5:11:39:B2:55:55
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       3F9769FC3DB0138EB647A750E14761DD9E8EFBA6
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6430303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:59 +0000
ROA not before:           Tue 05 Mar 2024 17:42:59 +0000
ROA not after:            Tue 04 Mar 2025 17:47:59 +0000
asID:                     264824
IP address blocks:        2803:e360:d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:97:69:fc:3d:b0:13:8e:b6:47:a7:50:e1:47:61:dd:9e:8e:fb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:59 2024 GMT
            Not After : Mar  4 17:47:59 2025 GMT
        Subject: CN=D3D39F06CE2B1B3A1318ED7E3FDFF51139B25555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cc:51:76:22:00:5e:54:84:78:c9:f4:e5:93:
                    58:cd:10:c8:49:45:ec:e6:41:fc:bd:8b:b7:12:fa:
                    c8:53:22:e2:bb:88:aa:d5:6c:3a:bf:2a:d8:03:3c:
                    84:91:c1:b0:5f:aa:fb:f7:b2:6d:ea:f5:da:b5:a7:
                    31:28:10:07:71:cc:00:fc:c3:c4:6b:85:fc:d1:ec:
                    78:39:95:86:7a:28:ce:84:a2:d7:e4:c7:bc:c9:ac:
                    58:98:40:45:e4:3a:c2:27:1c:df:be:1d:a2:d4:a8:
                    be:f1:2b:3c:78:8c:63:93:0e:44:0c:1f:26:ac:d4:
                    8c:49:84:65:40:2d:8c:b0:57:af:0a:d5:30:56:19:
                    c1:bb:03:f2:76:b7:9a:db:c6:3b:af:4d:25:c9:27:
                    fa:f9:15:45:85:e6:dc:fe:ae:48:fb:3b:3e:d5:18:
                    fa:96:2e:08:35:d4:7f:dd:d3:a7:30:c9:95:9a:7e:
                    ad:06:bb:b0:5d:d6:f9:c1:26:c1:dd:69:85:dd:09:
                    9d:89:5a:d5:66:95:64:0a:27:4e:8d:38:fc:e7:f7:
                    bd:97:d4:88:5e:5a:1c:bf:ad:2d:94:32:f3:d4:c8:
                    fa:97:07:1c:69:a8:f7:ec:f5:59:4e:3d:47:ad:1a:
                    31:8b:e0:54:bf:f6:0f:e3:0e:6d:4a:7a:ed:23:8e:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D3:9F:06:CE:2B:1B:3A:13:18:ED:7E:3F:DF:F5:11:39:B2:55:55
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6430303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:36:e2:46:be:25:4e:07:3c:89:f2:f3:72:15:39:cb:42:
         89:c0:06:67:e6:af:11:18:39:78:30:7c:64:ce:be:cd:d0:38:
         48:c5:a6:57:e7:25:cd:07:35:80:ef:75:0d:ef:6d:0d:b9:19:
         aa:3b:76:1b:6e:ee:72:99:d7:53:64:50:e6:9b:e7:c2:88:da:
         71:68:1d:13:94:ee:b7:0a:73:17:ba:f0:8b:e1:b3:92:9c:cf:
         5c:83:2c:e4:35:96:04:1a:ea:8b:b0:30:8e:14:19:4c:5a:2d:
         93:3a:ab:b3:e4:ac:07:aa:5a:c6:81:3a:38:c3:80:3b:15:72:
         e6:57:b3:65:d6:d8:d2:a6:59:7f:0f:2c:24:45:bc:17:07:3d:
         c2:2f:62:67:ab:6e:1c:32:d3:27:3b:37:89:98:bd:29:ef:64:
         48:f4:a9:c8:9c:1c:d0:ce:3f:74:4c:56:fa:de:2f:c8:46:0f:
         a0:80:4c:fc:5c:d5:48:35:b4:dd:86:bd:23:bc:5a:18:23:83:
         f3:e1:d3:48:cf:a5:4d:3c:9f:f3:da:d9:26:48:2a:00:2f:c1:
         3b:bb:b6:ee:84:fd:d5:b5:99:fc:1d:62:f2:bc:e2:df:bc:6d:
         13:84:65:c5:c1:0d:ef:96:46:2e:23:c7:ee:05:87:d9:64:32:
         7a:01:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org