Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          s2tEImXj/FIXiS28Elqe4oVdUVKbHDuzq5fwZwDo/HY=
Subject key identifier:   59:38:DD:CB:39:F3:F6:BD:94:D7:C0:C8:60:BA:34:A7:D0:F4:1B:D0
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       48946E15ECFF1087CFD0CE87B3F7632A1275CC88
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 10 May 2024 15:35:04 +0000
ROA not before:           Fri 10 May 2024 15:30:04 +0000
ROA not after:            Fri 09 May 2025 15:35:04 +0000
asID:                     263242
IP address blocks:        2803:1180:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:94:6e:15:ec:ff:10:87:cf:d0:ce:87:b3:f7:63:2a:12:75:cc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: May 10 15:30:04 2024 GMT
            Not After : May  9 15:35:04 2025 GMT
        Subject: CN=5938DDCB39F3F6BD94D7C0C860BA34A7D0F41BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:b1:90:f8:05:db:14:97:7b:b0:91:cd:83:
                    c3:a1:a4:b9:95:7d:ee:49:f2:2a:5a:8e:0d:54:a1:
                    6f:09:4d:4d:a6:d3:38:80:17:33:3b:91:d2:08:a0:
                    29:35:8f:f4:1e:ae:76:9c:52:4f:c8:07:fb:0e:8c:
                    5b:ca:1f:f2:c1:51:71:fc:52:fa:2c:63:32:3c:bc:
                    e8:04:e0:98:c3:d4:db:93:a9:d1:5e:c1:a8:07:d5:
                    10:ca:0b:9f:99:a6:31:90:c0:6f:78:e7:72:98:15:
                    cc:33:68:ea:0f:55:74:bf:21:67:e7:d8:27:53:37:
                    e4:6a:63:a5:12:5a:84:8d:82:6a:48:df:b3:72:3b:
                    74:56:5a:77:55:17:65:ed:22:59:60:86:40:2b:3f:
                    43:a6:7e:61:e5:b1:df:53:cc:56:1e:6b:f1:3d:f1:
                    64:de:50:40:7b:cb:65:be:1f:a4:31:c5:05:8e:9b:
                    bf:fb:70:7b:42:7a:8d:6a:1e:c3:bc:48:d1:6f:16:
                    e0:f8:ca:bb:f8:d2:f1:6f:66:6a:4a:98:95:c9:23:
                    f7:5d:42:ae:5e:16:9b:1e:0c:c0:a4:f3:0f:86:89:
                    65:35:06:10:8e:70:9d:7e:e7:c7:70:6a:fc:11:9d:
                    a4:83:20:e2:cd:5c:21:e5:f6:9f:98:7c:9d:b7:bb:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:38:DD:CB:39:F3:F6:BD:94:D7:C0:C8:60:BA:34:A7:D0:F4:1B:D0
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a623a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:d3:ea:ae:e5:d1:6a:c0:78:5f:94:74:3d:b0:b5:37:16:d9:
         8a:aa:3e:6c:d1:15:78:b8:89:1f:5c:9a:46:73:dd:78:93:1e:
         7e:f6:54:42:19:06:53:74:00:82:c7:74:ad:ed:ee:d0:23:f3:
         78:a1:4d:6d:68:49:a6:9b:e7:bd:bd:ee:c6:f7:58:e2:0c:63:
         4e:78:14:05:42:30:4c:37:06:9c:dd:95:a1:09:d1:2c:4f:9b:
         0d:af:8e:1c:6a:b1:93:19:79:b4:7c:32:21:83:10:74:c9:0d:
         42:71:46:98:83:98:6d:91:c2:a2:b1:4a:4b:10:8f:20:95:91:
         bc:15:00:09:8d:60:a4:17:b7:48:e9:88:a4:5b:13:a0:1d:25:
         4e:a3:da:3a:d4:22:7f:54:9a:fc:b7:6b:07:8a:26:c3:39:89:
         96:bd:f3:e5:19:7e:c0:65:12:d0:2d:4a:9b:57:a3:ba:b7:e2:
         f7:2d:f9:7e:34:dc:28:e0:f1:f1:2a:f1:11:d2:2c:37:2f:d5:
         ee:9a:68:08:5f:02:54:6b:cb:6f:0c:4e:46:6e:29:8c:3d:95:
         77:32:af:dd:87:9c:cb:1d:c5:1d:7d:aa:29:07:f2:07:06:b5:
         10:f5:16:e9:3a:f9:2e:ad:b0:a4:8c:04:f9:3e:3e:19:8b:22:
         d2:9f:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 17:42:38 2024 by rpki-client on console-ams.rpki-client.org