Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a613a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a613a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          VA+x7PXdv6MQ8k3R8S/gmKBwSgItrD32z7qYMHkXV/0=
Subject key identifier:   0D:20:9D:04:5D:AA:1E:22:EA:EE:D7:C1:74:74:19:B6:AE:39:18:C3
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       27327C3F4B1E03174965C21BAE1B0DBC1B3FDDF5
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a613a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 10 May 2024 15:35:03 +0000
ROA not before:           Fri 10 May 2024 15:30:03 +0000
ROA not after:            Fri 09 May 2025 15:35:03 +0000
asID:                     263242
IP address blocks:        2803:1180:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:32:7c:3f:4b:1e:03:17:49:65:c2:1b:ae:1b:0d:bc:1b:3f:dd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: May 10 15:30:03 2024 GMT
            Not After : May  9 15:35:03 2025 GMT
        Subject: CN=0D209D045DAA1E22EAEED7C1747419B6AE3918C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:ef:d2:14:eb:60:09:ab:7a:63:9e:36:af:
                    26:17:31:0e:7c:93:f8:da:50:0d:60:c8:16:5c:23:
                    ad:04:0a:7f:8c:e4:69:a0:d5:28:70:be:bd:81:6e:
                    18:c0:15:83:40:a9:f6:9f:3f:b6:af:45:30:02:18:
                    b2:82:b2:fe:b1:02:91:0e:d4:c0:b1:7f:b8:a9:4c:
                    f6:c5:a4:16:c1:c3:88:7e:e2:a7:64:81:58:84:6f:
                    74:60:f8:02:58:3d:dd:b8:67:5e:31:29:a5:f5:9e:
                    08:1d:d1:4f:13:53:75:02:cb:12:57:6e:77:ae:d1:
                    b8:cd:9b:89:29:27:23:84:16:00:89:d4:c7:19:11:
                    d1:55:2f:82:83:e3:9f:cf:22:ce:00:f8:f3:5c:94:
                    52:a1:5f:ca:fc:1b:5a:99:28:44:84:3b:b7:f3:c8:
                    fa:fa:ab:24:a3:c1:09:0b:39:ea:e8:d1:49:f6:46:
                    3f:59:43:3f:cf:d5:3d:4c:70:a9:6e:05:99:fd:04:
                    95:d9:42:d2:fd:a0:7b:f0:f2:95:96:65:f6:a2:54:
                    af:80:8f:dc:21:37:3b:51:6e:84:7d:7a:8c:45:d6:
                    3e:e5:16:1d:86:3d:fa:00:f5:70:c1:a9:79:ed:e6:
                    18:82:e0:a8:59:13:5b:62:6a:81:e1:c4:5d:83:df:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:20:9D:04:5D:AA:1E:22:EA:EE:D7:C1:74:74:19:B6:AE:39:18:C3
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a613a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:46:0a:0b:84:2b:4d:dc:24:66:cd:45:79:ac:d5:b2:bf:6d:
         45:09:6a:b9:b9:52:da:48:e9:0a:3c:2e:3d:b3:5b:d7:94:c7:
         61:59:01:c6:f6:7e:c0:9b:14:cc:8b:b3:0e:c2:83:a6:0b:28:
         4f:e6:74:61:72:fa:65:9c:3b:e0:a7:e3:6b:43:47:15:2e:26:
         5a:10:69:66:43:48:8b:f2:68:c3:7b:09:57:28:2c:cb:07:e9:
         bb:81:51:01:e2:2c:5d:90:d9:66:e1:e3:06:34:db:3d:19:34:
         a3:0d:bb:0e:c1:06:03:e2:5a:fa:f0:d6:92:e6:ee:e8:5c:8a:
         b5:46:b7:8a:77:17:e6:c2:0d:61:ea:1b:26:84:e8:1a:b3:d3:
         e9:6d:f4:82:31:ce:f2:71:c3:25:21:3a:b2:95:c7:6f:48:69:
         f8:ca:15:70:bb:9f:ac:9e:02:a6:30:5e:02:0a:c1:18:ec:b0:
         1e:ea:d0:5c:16:31:1c:b4:b7:18:17:69:5a:45:71:39:8d:a5:
         ac:ce:56:de:f2:36:ae:a7:03:cd:42:f8:44:80:83:86:96:ab:
         33:f9:2e:66:30:3d:4a:a5:d1:75:ba:01:d8:21:40:9b:4e:a1:
         cc:74:a3:89:eb:57:3d:73:de:15:88:e0:79:60:c3:31:10:c5:
         7d:30:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 19:35:31 2024 by rpki-client on console-fra.rpki-client.org