Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/323830333a333165303a3a2f33322d3438203d3e20323730303032.roa
File:                     323830333a333165303a3a2f33322d3438203d3e20323730303032.roa (raw, json)
Hash identifier:          sYGuRji64i41txbcOCmy7/5vTX9Wl4RS57L76ikmLJE=
Subject key identifier:   5A:AA:93:54:D8:00:0E:52:1F:01:3E:DF:2C:86:2C:88:E3:03:6F:9B
Certificate issuer:       /CN=D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8
Certificate serial:       59836B0FE0E58B74BE1FACE6995E9A3CA666D244
Authority key identifier: D0:F8:6C:4A:DF:00:47:64:4A:C1:EE:EA:EF:57:C4:26:E9:E5:09:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/323830333a333165303a3a2f33322d3438203d3e20323730303032.roa
Signing time:             Tue 05 Mar 2024 17:42:40 +0000
ROA not before:           Tue 05 Mar 2024 17:37:40 +0000
ROA not after:            Tue 04 Mar 2025 17:42:40 +0000
asID:                     270002
IP address blocks:        2803:31e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:83:6b:0f:e0:e5:8b:74:be:1f:ac:e6:99:5e:9a:3c:a6:66:d2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8
        Validity
            Not Before: Mar  5 17:37:40 2024 GMT
            Not After : Mar  4 17:42:40 2025 GMT
        Subject: CN=5AAA9354D8000E521F013EDF2C862C88E3036F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:b8:51:be:c9:07:49:5a:70:41:c2:04:a4:
                    ab:b8:07:1d:e4:ce:e7:3d:d5:5d:eb:18:47:c6:d2:
                    a0:fb:0a:3d:3f:f6:c2:e6:73:b4:e9:b6:50:0f:5a:
                    61:7c:ca:62:28:bd:36:12:a9:67:b1:b3:73:0e:73:
                    90:f5:ed:79:38:12:79:ae:66:a6:f5:39:0f:b7:b3:
                    a5:1a:f5:7a:9c:b7:51:02:1b:52:5b:47:92:8d:14:
                    14:7e:c1:c5:56:2a:18:8c:f5:da:7f:fb:ce:94:67:
                    cd:c8:23:6d:50:ac:fc:87:77:a0:cc:29:9b:82:58:
                    8e:99:26:a3:3d:f4:26:01:51:e5:ce:e4:16:e4:0b:
                    8c:bc:c8:f3:98:50:cf:7d:39:86:f3:41:9f:26:0c:
                    e2:78:48:2e:f6:eb:bb:eb:97:b4:5c:aa:eb:a0:e2:
                    38:71:1f:4f:15:48:23:18:c2:72:92:b1:b6:0f:c5:
                    0e:74:c2:1b:a5:cc:f3:93:3a:28:6a:fb:8a:64:18:
                    fd:03:4d:9e:28:eb:05:5b:c5:9f:76:c0:40:64:34:
                    08:4c:75:35:c6:d6:fc:07:b7:d1:5a:44:e4:ad:29:
                    de:bb:9c:66:8f:79:a1:f9:18:a6:0e:c6:5a:8a:f4:
                    fb:3e:dc:71:c8:d4:0b:10:c4:82:e5:3b:8e:46:27:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AA:93:54:D8:00:0E:52:1F:01:3E:DF:2C:86:2C:88:E3:03:6F:9B
            X509v3 Authority Key Identifier:
                keyid:D0:F8:6C:4A:DF:00:47:64:4A:C1:EE:EA:EF:57:C4:26:E9:E5:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/323830333a333165303a3a2f33322d3438203d3e20323730303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:31e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:80:fc:62:49:52:b9:37:b7:2d:90:8a:bd:77:83:0e:08:
         a5:b9:ab:53:1b:37:8f:0c:8d:5f:9c:1c:43:01:35:2a:5a:c1:
         5e:a9:48:c3:15:da:fa:19:56:9f:6e:3d:b5:db:e8:a8:b3:d4:
         d1:32:88:c6:55:02:13:1c:cd:4d:66:9d:72:46:7f:e1:22:38:
         07:f0:fe:a0:06:a9:42:a6:d1:6b:fb:62:b1:3e:81:ed:66:9c:
         1d:55:c3:82:95:9d:e7:f1:fb:8b:00:af:b8:fe:10:28:45:82:
         df:ff:b5:ef:db:f9:59:05:ad:01:78:19:87:85:03:76:3b:e3:
         9e:9a:36:e0:48:61:18:c3:2f:ae:2f:5e:bf:b8:68:42:f6:26:
         20:74:b6:85:5f:26:25:94:d4:2d:f2:a4:c2:4b:65:ff:31:3d:
         a6:4a:34:74:66:82:0d:f6:ab:8f:6b:98:a2:9a:9c:f8:2d:bb:
         1d:c4:84:2b:9a:e2:11:93:5a:a7:8a:2f:d6:b2:1d:81:99:33:
         52:90:1d:02:45:ad:12:e5:71:cf:e7:ed:f0:0d:8e:91:71:36:
         71:bd:95:90:0f:6c:d5:49:45:4d:f9:27:7c:c4:a5:6b:9f:22:
         87:b3:57:fd:b7:b7:d3:a5:af:01:6d:7c:3f:8c:a2:41:f8:77:
         c3:d6:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org