Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a313a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a313a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          mNF6/JPhrZDC3CZhWnD+JeT+QpWn8D8e7oP3NnyQOGM=
Subject key identifier:   33:B8:8E:7E:02:24:FC:3D:BE:60:91:32:2C:22:F1:24:63:B2:7D:5B
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       3D5A15E29EE86B2DA68C2569A828542338017F71
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a313a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 10 May 2024 15:35:02 +0000
ROA not before:           Fri 10 May 2024 15:30:02 +0000
ROA not after:            Fri 09 May 2025 15:35:02 +0000
asID:                     263242
IP address blocks:        2803:1180:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5a:15:e2:9e:e8:6b:2d:a6:8c:25:69:a8:28:54:23:38:01:7f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: May 10 15:30:02 2024 GMT
            Not After : May  9 15:35:02 2025 GMT
        Subject: CN=33B88E7E0224FC3DBE6091322C22F12463B27D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:2f:f8:fa:90:75:e1:cb:85:58:f0:f0:e5:
                    2a:ab:bc:2c:12:a8:c8:e1:d1:83:73:45:aa:2c:75:
                    1e:32:cd:1f:7e:73:82:15:4e:4e:04:13:bf:06:8b:
                    12:22:bc:63:ee:04:08:29:99:0d:37:91:5e:8e:8e:
                    4c:28:91:98:1b:cb:d1:b2:de:bf:da:dd:0b:85:de:
                    80:aa:fd:7d:00:46:6b:fe:9b:56:3a:c6:0a:f4:11:
                    cc:37:7e:b5:8c:2a:e7:7c:ae:2e:4c:67:83:58:98:
                    6e:db:53:a1:ca:92:7c:99:2d:6b:8a:15:17:a7:a7:
                    37:47:13:04:17:d4:e1:5d:29:3d:17:bb:01:3d:a1:
                    f4:2a:5e:0f:07:66:68:60:80:66:86:1b:64:70:9a:
                    87:3f:f1:b3:57:63:51:1a:d1:7e:c8:18:75:c5:f4:
                    3a:f4:f2:17:47:8d:4b:24:81:dd:d8:42:e7:b5:32:
                    32:ec:fa:74:a5:4a:5a:76:d4:d1:df:b4:42:e3:8c:
                    e5:aa:2b:8d:a8:98:86:24:61:8a:47:de:01:ba:9a:
                    a4:46:52:ab:8a:5e:a1:7f:a7:6b:37:41:ee:4d:b8:
                    87:8e:99:a4:c0:bc:bc:91:41:02:26:54:9c:dc:c6:
                    2e:bc:55:73:67:bd:d2:58:17:f4:1b:23:b2:5e:e5:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B8:8E:7E:02:24:FC:3D:BE:60:91:32:2C:22:F1:24:63:B2:7D:5B
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a313a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:8d:be:e4:0d:67:05:58:2e:4d:d2:a8:50:28:23:94:5c:
         2e:9d:65:b4:de:89:bd:be:b7:63:df:d5:ef:d9:ef:9c:97:a8:
         90:b6:bc:d1:9e:a2:85:72:69:c5:6e:02:97:5e:05:42:af:45:
         b4:95:ad:e1:a0:b7:35:76:b2:b4:2e:61:43:b5:41:4e:1a:d7:
         0b:37:e2:c9:60:49:84:3b:2e:9a:fa:51:67:ef:a0:30:d9:25:
         99:78:42:89:74:3a:fa:44:05:fa:36:31:f7:c7:60:49:45:ef:
         35:02:90:f1:1d:db:db:c6:66:86:7a:ca:48:db:2a:fc:d3:05:
         10:48:66:87:3a:dc:20:f9:75:2c:9b:8f:87:ee:9b:cc:09:46:
         36:72:2f:df:06:b9:0c:38:ce:f4:f5:2b:de:86:8e:3e:dd:58:
         c4:ba:30:a7:a0:5b:55:08:c0:ed:9f:9f:94:3c:33:21:4f:ab:
         7b:75:b9:13:7a:b8:e0:e7:28:26:28:d6:e1:f7:4b:cc:06:94:
         e1:84:b4:76:90:99:e6:66:7c:03:dd:b6:3b:d3:54:9a:70:90:
         f3:4f:d6:1a:01:47:57:45:a3:ba:45:18:c0:22:70:c3:ff:5a:
         10:92:96:78:40:6d:c9:a9:e9:e0:ad:86:a5:c8:21:63:7e:5e:
         bd:ee:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 17:42:38 2024 by rpki-client on console-ams.rpki-client.org