Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa
File:                     323830333a326434303a3a2f33322d3332203d3e20323634373037.roa (raw, json)
Hash identifier:          UACU8ai8BI7ola6GU9z5u0YI8druxaScyMTbgDDWJik=
Subject key identifier:   90:2D:02:3B:25:7B:B7:99:ED:AF:94:CB:43:C7:EF:3B:36:11:03:E1
Certificate issuer:       /CN=B1566632B5442CF0C87AB7D54C504E27671A3935
Certificate serial:       6A8BC85422517932DADCF985E0E54FD2D75A54C2
Authority key identifier: B1:56:66:32:B5:44:2C:F0:C8:7A:B7:D5:4C:50:4E:27:67:1A:39:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa
Signing time:             Tue 05 Mar 2024 18:10:31 +0000
ROA not before:           Tue 05 Mar 2024 18:05:31 +0000
ROA not after:            Tue 04 Mar 2025 18:10:31 +0000
asID:                     264707
IP address blocks:        2803:2d40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8b:c8:54:22:51:79:32:da:dc:f9:85:e0:e5:4f:d2:d7:5a:54:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1566632B5442CF0C87AB7D54C504E27671A3935
        Validity
            Not Before: Mar  5 18:05:31 2024 GMT
            Not After : Mar  4 18:10:31 2025 GMT
        Subject: CN=902D023B257BB799EDAF94CB43C7EF3B361103E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:a4:b5:74:05:62:80:b6:b0:df:a3:57:0b:
                    ea:fc:d3:51:b5:0d:ff:7f:fa:10:5b:cd:8e:ed:13:
                    0f:6c:9c:0e:52:56:eb:22:e8:04:e5:ba:4f:63:a9:
                    96:0d:0d:26:99:fa:4e:3a:4b:ed:33:4d:a4:ba:be:
                    77:94:ce:b2:1a:e2:5c:4b:dd:8e:65:71:38:fe:4d:
                    f5:06:21:09:6c:16:74:95:e6:0a:ff:0d:26:d7:64:
                    73:b4:58:db:a2:33:41:40:24:b4:64:80:4a:9e:57:
                    99:54:cb:04:70:a4:18:f0:65:d9:62:5b:1a:c2:38:
                    bd:ec:b2:26:b2:1f:6a:9e:0e:4e:5b:78:75:c6:a3:
                    75:0f:60:4a:a5:63:92:bc:9b:b9:72:68:5e:30:fb:
                    a0:4b:1e:31:32:fb:54:84:6f:94:17:50:37:0e:a8:
                    36:c1:1d:a0:41:65:ff:1e:e8:72:55:b6:4d:ea:2b:
                    81:1d:63:cd:fe:0b:49:18:6b:7d:b2:60:2c:88:02:
                    27:d2:bc:b4:6c:8d:20:c8:37:d6:a2:40:71:2e:0c:
                    a7:dd:b1:5d:96:c1:77:62:56:fe:d9:fa:3c:99:a6:
                    27:00:41:b6:5b:f9:c1:0e:51:18:f1:f0:aa:19:7d:
                    9b:67:ff:44:b9:39:05:3d:c6:fb:dc:97:f1:06:50:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2D:02:3B:25:7B:B7:99:ED:AF:94:CB:43:C7:EF:3B:36:11:03:E1
            X509v3 Authority Key Identifier:
                keyid:B1:56:66:32:B5:44:2C:F0:C8:7A:B7:D5:4C:50:4E:27:67:1A:39:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:26:ea:91:11:56:00:de:1b:66:b4:72:38:09:1e:eb:10:36:
         00:26:b9:95:10:42:00:fb:31:32:48:ca:c5:1c:b0:a5:30:99:
         ed:a7:74:35:b8:90:8b:47:eb:38:12:2b:08:48:9b:78:a8:de:
         31:e6:a4:9a:62:18:36:bb:24:6a:1f:31:68:69:62:14:19:58:
         36:f8:ba:44:1e:7f:dc:4f:3c:d8:c4:b8:a7:a7:4b:24:9b:42:
         e8:f8:3a:e3:57:da:8c:4a:fd:70:aa:5a:b4:16:70:60:74:51:
         0d:58:b5:92:4f:6e:ed:70:6a:38:36:23:3a:ba:3f:4d:50:3b:
         a9:d6:9c:36:8f:d3:69:c7:09:c1:ea:5e:70:91:b7:a3:73:2f:
         e3:84:24:1d:af:d0:c3:7c:e8:9f:30:da:a8:8c:7c:cd:a4:c3:
         b0:02:9e:43:3e:d1:5b:2f:49:dc:4f:89:86:5f:90:34:84:07:
         04:20:c1:50:a4:0b:93:6b:07:18:b3:16:48:9c:72:44:cd:51:
         91:39:99:17:42:f2:1b:fe:d9:a3:ab:01:be:f9:29:35:b6:ff:
         cd:a3:bd:de:65:c3:13:54:e4:cf:6c:db:cf:58:c3:41:8d:7f:
         80:b8:5e:96:2c:ca:e9:7f:a3:bc:87:58:ac:43:01:c2:12:c6:
         1a:70:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 14:32:42 2024 by rpki-client on console-ams.rpki-client.org