Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/323830333a383336303a3a2f33322d3438203d3e20323639373739.roa
File:                     323830333a383336303a3a2f33322d3438203d3e20323639373739.roa (raw, json)
Hash identifier:          fDfXD+6HdxaFXR+OYkeuCZYoV/iI+8kglTBUSoFWEqY=
Subject key identifier:   E9:61:33:1E:40:59:4C:A8:C5:18:FD:82:61:AA:FE:D2:5D:EC:60:D2
Certificate issuer:       /CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675
Certificate serial:       7FB5D02EAA9532A4F62CB37519E265EC21573046
Authority key identifier: 8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/323830333a383336303a3a2f33322d3438203d3e20323639373739.roa
Signing time:             Tue 05 Mar 2024 17:44:15 +0000
ROA not before:           Tue 05 Mar 2024 17:39:15 +0000
ROA not after:            Tue 04 Mar 2025 17:44:15 +0000
asID:                     269779
IP address blocks:        2803:8360::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b5:d0:2e:aa:95:32:a4:f6:2c:b3:75:19:e2:65:ec:21:57:30:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675
        Validity
            Not Before: Mar  5 17:39:15 2024 GMT
            Not After : Mar  4 17:44:15 2025 GMT
        Subject: CN=E961331E40594CA8C518FD8261AAFED25DEC60D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:5c:cb:67:27:78:b9:a6:1f:2a:fe:fe:d7:
                    87:ae:37:ed:ef:3c:fa:80:5d:52:25:be:70:98:ed:
                    b1:4a:99:23:4c:37:fa:cb:41:29:bf:23:99:10:8e:
                    d2:10:0e:58:65:2f:3a:45:0c:bb:99:7c:b6:e1:e1:
                    9d:ad:5c:78:f1:94:ca:e3:51:7f:96:8b:3b:cc:f5:
                    52:70:e5:8b:ce:64:bd:fb:f0:ae:7a:b5:12:2b:f7:
                    12:dc:f7:26:c6:1b:55:4f:e4:5e:6d:63:8b:7a:75:
                    b9:7a:5d:d4:cc:f1:a6:94:dd:24:d7:1b:d5:76:95:
                    49:aa:f7:32:1e:a1:fc:fc:97:35:ab:80:51:66:13:
                    42:ac:0a:90:d4:73:6e:f7:9a:1f:48:80:c5:00:46:
                    f9:6c:9a:9e:70:f5:87:a1:06:c6:4f:4c:b7:16:fd:
                    a9:d9:aa:f1:f2:39:ba:e9:fc:f8:9f:ae:b3:5c:51:
                    29:ef:e3:f0:5a:27:14:38:99:a8:22:54:47:3b:50:
                    64:7c:63:a5:c0:9b:6b:8c:87:f5:49:fe:c2:07:74:
                    71:b9:82:b9:dc:42:35:05:54:fc:02:c7:fe:b2:ff:
                    32:72:60:a1:5e:2d:37:50:3b:cb:bf:b3:f6:5a:28:
                    4e:b6:ec:70:dd:b6:8a:3a:6d:15:0d:f1:27:57:39:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:33:1E:40:59:4C:A8:C5:18:FD:82:61:AA:FE:D2:5D:EC:60:D2
            X509v3 Authority Key Identifier:
                keyid:8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/323830333a383336303a3a2f33322d3438203d3e20323639373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8360::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:6b:62:73:a6:eb:10:e8:e0:c1:8c:5e:9b:bf:d0:b0:2e:40:
         f4:ce:39:3e:3e:00:15:02:1d:0c:7d:ee:56:7a:98:95:cf:f2:
         e4:e1:80:df:38:ed:ca:98:ea:71:b8:69:7d:17:a3:25:6d:5d:
         64:22:c1:50:a2:9a:cb:60:49:f9:6b:3e:d6:bc:a3:44:a5:f3:
         41:00:53:43:2d:dd:33:76:98:3a:7e:d9:d5:5c:1a:76:04:e7:
         09:f9:60:43:90:9a:a1:8e:40:47:43:33:4c:dd:8b:09:8c:87:
         2d:81:dc:7d:d9:eb:e3:c0:7b:eb:b0:c8:ee:73:8a:b8:8a:28:
         1b:4f:65:b1:1f:0d:57:71:ad:9a:47:53:d0:42:32:ab:2a:e8:
         92:24:d4:e7:31:6e:e1:7c:1d:46:63:dc:55:22:76:17:26:ef:
         8d:d0:e3:1b:44:fa:e4:36:34:71:f8:6e:98:69:9f:cf:44:a2:
         4e:af:0e:38:a9:ba:6d:58:20:57:65:73:71:44:4b:99:60:22:
         87:92:82:c3:3a:aa:d9:5d:82:c9:af:5e:54:43:b0:44:70:14:
         66:e3:09:79:75:88:05:fc:78:46:71:a7:cb:a6:22:9f:77:58:
         24:93:d1:7b:2b:6e:82:95:a5:2c:b8:b2:b2:b2:83:79:af:42:
         02:e0:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org