Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/323830333a623831303a3a2f33322d3332203d3e20323731393733.roa
File:                     323830333a623831303a3a2f33322d3332203d3e20323731393733.roa (raw, json)
Hash identifier:          a2vhpQB5GpUaPVP2siE1NJw9bRpT2CAKJdU6DLAjXek=
Subject key identifier:   9A:2D:FE:0C:35:E7:17:9C:C1:2E:45:68:48:B1:65:5B:B6:8E:C7:77
Certificate issuer:       /CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
Certificate serial:       6C72514BDE00562930C03659F3B7E2EA364FCBEA
Authority key identifier: D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/323830333a623831303a3a2f33322d3332203d3e20323731393733.roa
Signing time:             Tue 05 Mar 2024 18:22:37 +0000
ROA not before:           Tue 05 Mar 2024 18:17:37 +0000
ROA not after:            Tue 04 Mar 2025 18:22:37 +0000
asID:                     271973
IP address blocks:        2803:b810::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:72:51:4b:de:00:56:29:30:c0:36:59:f3:b7:e2:ea:36:4f:cb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
        Validity
            Not Before: Mar  5 18:17:37 2024 GMT
            Not After : Mar  4 18:22:37 2025 GMT
        Subject: CN=9A2DFE0C35E7179CC12E456848B1655BB68EC777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:e2:84:8f:c0:6a:ca:5d:a7:43:a4:63:17:
                    84:ee:25:1b:1c:ba:10:80:63:af:db:58:1d:d4:7b:
                    86:22:9b:ed:c6:a3:63:a0:95:dd:cc:66:0b:36:4e:
                    77:f8:62:2f:69:32:8d:eb:c2:56:57:e9:7a:45:86:
                    3c:f0:7d:12:6c:cd:96:17:2f:95:27:99:3d:54:b7:
                    26:2e:f5:29:7c:02:d8:5b:68:95:da:6e:41:02:fd:
                    ee:76:6d:71:5a:4e:1f:07:99:81:bf:de:18:da:87:
                    81:cb:e6:29:2e:35:33:95:a6:34:77:49:3b:63:b7:
                    bc:f1:77:14:68:d5:4d:d7:38:32:7a:c4:db:7d:72:
                    62:92:f2:2e:3f:08:8d:86:4f:df:fd:bd:9e:91:b8:
                    7e:56:98:7b:1c:79:a2:8a:26:9e:7f:4b:24:5f:71:
                    85:6d:ab:b8:5d:0a:04:67:ca:f7:1d:05:94:b4:73:
                    8e:31:20:f8:5e:ad:ef:f7:7b:f1:f6:01:0e:2f:1f:
                    24:3b:83:a0:55:7f:7c:7f:6e:45:ab:09:31:6a:5d:
                    dc:4c:fc:9d:c4:3f:de:4b:4f:04:10:8e:40:0c:7f:
                    19:17:27:99:66:66:35:21:b0:57:fe:9d:46:1a:69:
                    7d:74:87:ba:d3:b4:b7:8a:1b:ea:2c:51:0c:b3:59:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2D:FE:0C:35:E7:17:9C:C1:2E:45:68:48:B1:65:5B:B6:8E:C7:77
            X509v3 Authority Key Identifier:
                keyid:D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/323830333a623831303a3a2f33322d3332203d3e20323731393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b810::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:5e:90:2b:39:3e:29:91:55:a6:a9:05:1e:72:7e:fd:b2:
         c2:66:10:91:95:99:be:ab:3a:fe:d9:38:22:41:0f:38:cb:3a:
         3a:e9:a8:1d:52:a8:e7:36:89:b5:8f:66:16:d2:67:ee:ee:7e:
         8d:9e:57:3a:f5:77:08:67:91:2e:40:b9:39:21:b7:85:54:fb:
         78:ad:b9:11:51:45:dc:be:64:37:15:fe:d9:e3:d8:f4:9e:59:
         d3:71:41:7f:84:d6:53:a1:c2:e3:e6:ca:b6:d3:92:86:69:d5:
         0d:73:f2:e2:25:43:3b:77:4a:e2:f7:0d:d0:a4:31:44:77:d0:
         17:ad:01:f7:e3:04:6a:2d:70:30:a6:2a:ff:be:7d:49:15:32:
         89:a2:e4:46:bd:fb:4c:fa:55:5f:5b:50:a3:ea:3e:5f:99:02:
         ca:71:a6:b8:57:17:9d:e3:b7:4a:27:78:0c:c3:14:d0:34:3b:
         de:fa:4e:4c:36:06:90:69:6c:dd:77:f4:67:9e:13:c0:5b:00:
         9b:e2:b7:69:8f:0c:53:8d:cf:3f:19:d2:78:75:e3:b6:18:f2:
         ab:eb:29:97:8b:12:16:a2:b8:bd:5c:a0:90:e7:18:01:d5:ca:
         6d:b8:7f:d5:5b:e8:33:73:f4:11:5d:60:bc:ed:55:0e:eb:4e:
         01:42:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org