Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa
File:                     323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa (raw, json)
Hash identifier:          kTqhRAUv1ZeJZAlRHVobPIMRKgFboDODtH5Iou0szaY=
Subject key identifier:   56:B4:60:3B:60:D5:43:E6:60:3E:F5:4A:E2:03:E4:0D:51:02:74:37
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       7BBD9901AB9B34D28E91A1F5DE2FE30E0CD1AA21
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa
Signing time:             Fri 06 Sep 2024 17:00:00 +0000
ROA not before:           Fri 06 Sep 2024 16:55:00 +0000
ROA not after:            Fri 05 Sep 2025 17:00:00 +0000
asID:                     272966
IP address blocks:        2803:8590:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bd:99:01:ab:9b:34:d2:8e:91:a1:f5:de:2f:e3:0e:0c:d1:aa:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Sep  6 16:55:00 2024 GMT
            Not After : Sep  5 17:00:00 2025 GMT
        Subject: CN=56B4603B60D543E6603EF54AE203E40D51027437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:00:90:83:8c:e0:e7:10:64:a4:9b:2b:10:
                    b5:8d:fb:86:eb:d6:04:ca:f1:32:ce:fa:ec:23:61:
                    aa:72:4f:3e:3a:69:1e:e4:38:4d:f3:5f:5d:e0:1e:
                    a6:67:b2:1a:16:fc:69:97:95:2f:94:fb:ba:4a:56:
                    ea:62:06:96:09:e9:5b:47:7c:c2:59:34:e4:5c:93:
                    af:f9:01:6d:5c:e1:90:96:be:b2:b0:1d:e8:35:7e:
                    b7:68:a2:2e:2c:01:45:6e:de:e1:ef:58:3f:3b:f2:
                    56:ba:b6:5d:8d:a8:2c:14:74:22:77:02:8f:7d:49:
                    8d:69:51:67:60:db:a9:e1:44:06:98:a7:64:e2:ca:
                    f6:23:6a:a2:a8:bb:11:21:41:ec:01:72:8f:03:10:
                    fc:6f:05:c3:6c:e8:f8:8a:ef:f3:08:0a:d9:48:12:
                    b7:fd:06:e1:10:aa:5f:e6:32:bf:04:6e:92:b8:55:
                    cb:be:15:a9:5c:0c:dd:7a:56:fc:b7:c9:ab:8f:e3:
                    7d:0a:ad:c3:e5:d2:7a:4a:6a:21:42:32:7f:db:a1:
                    e0:8f:88:3b:ba:d8:32:4d:ae:6d:71:0c:c1:e5:7a:
                    95:f9:94:5f:2b:22:14:4e:b5:52:39:1a:72:e3:fc:
                    25:45:a6:f5:d5:69:52:32:af:f2:eb:be:fa:99:6a:
                    3a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B4:60:3B:60:D5:43:E6:60:3E:F5:4A:E2:03:E4:0D:51:02:74:37
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a343a3a2f34382d3438203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:94:76:32:cc:88:06:67:55:53:82:0b:c9:a6:73:72:b8:
         b1:89:37:70:77:3c:ef:96:af:bc:44:27:d5:c1:47:10:ed:58:
         a4:d2:36:5e:ee:8d:c3:c4:49:7e:13:db:50:47:05:47:60:46:
         b4:d0:27:ce:17:85:cf:6f:c1:2d:e9:44:e4:6b:96:92:79:e2:
         7c:5f:2b:68:2f:7f:d3:4b:32:77:35:e0:52:1e:6f:ae:13:95:
         77:2b:0f:f9:ba:7c:fd:76:2f:70:66:86:ba:d0:9d:47:35:7a:
         da:4f:23:48:17:64:78:f8:70:33:49:56:21:79:2e:3e:0d:7b:
         bc:20:5c:28:81:14:96:a7:5b:af:ee:1f:29:da:96:5b:68:3b:
         42:ea:4a:28:e1:ad:a5:a0:d4:15:0d:47:f6:73:3d:22:b6:eb:
         86:86:5b:0d:ac:96:3a:75:fb:d1:02:60:1d:b2:cf:80:69:23:
         bb:c9:d2:6e:44:19:27:2e:54:00:38:fc:1e:38:1d:03:7e:4b:
         d4:cf:10:26:6b:0f:97:16:15:1a:a7:4b:63:89:6d:92:eb:3f:
         0a:8d:92:c1:6c:b5:59:fc:a6:da:e2:fa:1a:f1:6b:90:65:b8:
         20:65:e8:a1:82:19:48:c3:b7:82:83:56:9e:5e:cd:de:c9:1b:
         64:49:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org