Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6630303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a6630303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          +8Af1GLCsZdAaH0DcekKzR85GXySOVQxX9QXhlYyRE8=
Subject key identifier:   AD:8C:87:59:A6:86:40:1F:BF:AB:2F:37:73:F5:D3:B9:1E:6E:8F:DF
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       2FEEB0324EA9EACC77219661464727D23C87858F
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6630303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:06 +0000
ROA not before:           Tue 05 Mar 2024 17:39:06 +0000
ROA not after:            Tue 04 Mar 2025 17:44:06 +0000
asID:                     272966
IP address blocks:        2803:8590:f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ee:b0:32:4e:a9:ea:cc:77:21:96:61:46:47:27:d2:3c:87:85:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:06 2024 GMT
            Not After : Mar  4 17:44:06 2025 GMT
        Subject: CN=AD8C8759A686401FBFAB2F3773F5D3B91E6E8FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:9f:55:34:0c:a5:e9:3d:93:0b:26:6e:5c:
                    8e:81:1b:e0:ff:c9:77:38:d9:4c:5e:21:c6:72:a6:
                    61:7d:d6:52:f0:42:81:3a:69:15:5b:97:78:3c:04:
                    4d:c2:66:95:23:aa:cd:d0:19:39:06:e0:47:d4:36:
                    ac:7f:0e:17:96:b1:d5:c9:e6:31:ea:85:84:ba:db:
                    df:91:58:55:37:56:c4:bd:fe:08:6f:b2:3b:4f:4a:
                    6b:dc:a5:cc:60:b5:8b:16:7c:05:52:11:a3:e2:07:
                    31:86:33:1c:7d:12:c8:b3:3e:77:bc:25:5f:2a:2d:
                    4e:ac:0b:e1:c6:31:cf:3f:a0:61:19:9b:3d:43:3f:
                    ff:42:e3:4f:c5:b9:ac:bc:82:21:9b:45:64:bb:6e:
                    6c:89:ec:40:8b:6e:7b:5c:a0:28:fa:67:48:e1:23:
                    59:24:6f:d8:11:83:d9:dc:b8:e8:0c:c9:7d:a9:19:
                    67:92:55:c4:c6:80:60:9c:e8:4d:53:4b:33:3f:bb:
                    45:09:47:d0:e8:3d:74:f1:7a:64:b1:68:6a:53:1a:
                    b5:27:4b:1d:77:73:50:c6:dd:63:91:06:3b:09:b9:
                    8d:80:62:79:60:7d:a9:5a:cb:64:d3:de:ec:dd:7f:
                    ce:b9:c4:ce:3f:1a:90:9f:98:1f:7b:2f:e0:f1:1b:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:87:59:A6:86:40:1F:BF:AB:2F:37:73:F5:D3:B9:1E:6E:8F:DF
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6630303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:e0:75:e3:cf:4c:84:d2:fe:01:0f:6e:f5:c4:db:84:12:
         d9:c6:ea:c6:e8:e6:4b:7f:2a:0f:88:d4:8e:8d:6b:dd:19:0e:
         d4:62:02:f9:31:00:6e:3e:67:a3:6e:b7:af:ba:fd:53:11:88:
         ca:4b:75:ab:fa:d0:1d:bd:f5:c9:d4:d1:3f:fa:66:3e:95:b3:
         47:12:bc:81:eb:a2:60:fb:d9:f3:7a:01:fa:ef:58:91:bb:24:
         05:60:d6:a0:8e:85:37:30:a3:2d:9d:61:30:ce:58:3c:24:bd:
         b2:65:04:be:65:2e:46:5c:56:55:46:a4:a6:26:48:42:87:f2:
         98:2f:be:50:82:7d:f3:33:15:16:96:29:22:96:eb:96:4b:f8:
         c7:50:70:1b:94:e4:70:81:97:d3:59:2b:31:e7:c7:31:31:fb:
         99:7a:07:bf:1d:2d:4d:1b:b7:85:4a:3b:f2:a1:b6:ae:97:3b:
         0a:06:f5:2f:f4:b6:14:e9:0d:5d:59:6c:58:da:56:75:87:a3:
         2a:a6:ff:57:26:59:28:56:41:b1:fc:87:bf:2b:75:97:85:4f:
         b7:3e:8e:9b:c9:84:af:4e:12:be:5b:cd:c7:c1:3a:b6:91:13:
         2d:46:c7:9a:a9:44:2a:49:ce:27:02:70:5b:7c:f3:85:8e:38:
         ab:cf:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:00:13 2024 by rpki-client on console-fra.rpki-client.org