Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          4+ch2EG72INRmti2fN6QHrE7z3ODl9P27M2Ga1gnteY=
Subject key identifier:   67:5D:AA:BF:C5:A6:49:9B:EE:C7:14:21:21:25:00:FB:5C:ED:EF:3E
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       18D14BFA9B682EE32EDA71576D433ED8876D7EA2
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 10 May 2024 15:35:01 +0000
ROA not before:           Fri 10 May 2024 15:30:01 +0000
ROA not after:            Fri 09 May 2025 15:35:01 +0000
asID:                     263242
IP address blocks:        2803:1180:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d1:4b:fa:9b:68:2e:e3:2e:da:71:57:6d:43:3e:d8:87:6d:7e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: May 10 15:30:01 2024 GMT
            Not After : May  9 15:35:01 2025 GMT
        Subject: CN=675DAABFC5A6499BEEC71421212500FB5CEDEF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:fe:22:0d:36:f9:f9:ea:5f:0a:10:a1:5d:
                    a4:0b:cd:22:b4:0f:f8:95:da:54:25:8d:6f:05:ac:
                    6c:e4:aa:fa:7c:ca:c9:67:0a:79:61:58:93:70:bd:
                    0a:ff:6b:3b:f3:9d:14:42:5d:e4:61:14:e3:04:6e:
                    98:c2:1d:2a:28:f5:3c:e8:8d:b1:f8:69:64:d1:aa:
                    ce:bd:6b:46:d9:5f:3e:cf:1b:dc:ee:dc:52:3f:ac:
                    13:97:dc:83:90:34:5e:c2:c8:89:8b:4b:f0:ca:3c:
                    0d:e5:c7:b5:1b:ac:a6:cb:ad:6e:c2:53:db:3d:b3:
                    eb:7d:7f:09:23:9d:8c:fd:c1:c9:99:90:cc:26:aa:
                    f0:0b:19:9b:a9:5f:3e:93:5a:6c:8f:64:86:4b:ab:
                    b3:ad:66:df:96:98:68:50:4a:d4:3e:71:be:d4:b1:
                    b3:96:26:25:5a:65:d2:ef:6b:fd:78:89:78:20:a7:
                    00:8f:f4:a2:0a:96:03:d1:2a:a3:0a:23:e6:a4:70:
                    06:98:fd:9b:d0:a5:b4:81:ec:74:58:9d:46:d2:05:
                    66:7e:d0:61:51:49:f5:2c:e7:cc:ff:b5:74:78:dc:
                    8e:5e:9e:6c:c4:bf:b3:51:e9:e4:ba:14:2c:c9:49:
                    98:4e:09:9e:9b:14:38:cc:de:7d:2a:27:6e:eb:9a:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5D:AA:BF:C5:A6:49:9B:EE:C7:14:21:21:25:00:FB:5C:ED:EF:3E
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a373a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:ee:f9:c6:14:4f:6d:38:e1:1c:da:33:64:2e:80:a8:99:fe:
         29:73:a3:27:48:6c:fc:be:e8:7f:e3:65:fe:c7:4e:6f:bc:5f:
         bd:8d:5c:4f:72:4f:1f:53:37:e5:f0:66:b5:66:48:c8:ac:0a:
         2f:00:58:96:11:6e:c6:a2:08:36:82:8d:39:28:ab:01:e6:3f:
         1b:af:de:5d:22:ec:d5:8b:64:47:30:17:ee:73:f7:79:fd:c6:
         af:f9:f8:0e:47:b9:0b:35:7a:61:36:4d:6a:d8:3b:17:f3:d6:
         ac:e9:3f:21:95:0d:78:f4:f0:cf:51:87:a4:1f:d4:26:cd:ea:
         7a:4c:8a:9a:3f:fc:54:a2:c4:9f:63:f2:85:3c:9e:65:c4:00:
         d2:93:91:55:49:89:8b:2a:ae:f0:b8:41:1d:52:fe:90:5e:32:
         d4:8c:a7:90:cd:94:5a:be:90:ef:62:53:05:01:47:88:5e:f0:
         a6:69:d4:27:9a:10:b1:83:9b:e3:16:21:8d:c3:7f:0d:aa:52:
         46:d7:96:77:25:96:d7:fb:28:b4:e4:91:02:22:99:62:b8:c3:
         46:51:d4:04:32:6c:1a:5e:79:9a:ea:9a:73:70:8c:94:f0:e7:
         b0:67:fc:0f:a4:d6:c6:7d:13:ed:5a:69:f5:a7:48:bb:6b:22:
         8b:c6:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 17:42:38 2024 by rpki-client on console-ams.rpki-client.org