Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/323830333a643630303a3a2f33322d3332203d3e203230323535.roa
File:                     323830333a643630303a3a2f33322d3332203d3e203230323535.roa (raw, json)
Hash identifier:          OT0Ks08lJrAAOH6zOD5TZ9KPJ5fiDoU010lwzgmzxGI=
Subject key identifier:   DC:94:D6:FC:87:1D:B2:B3:51:15:28:2B:C6:20:65:C5:25:35:EB:4B
Certificate issuer:       /CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
Certificate serial:       08768AB8F590056030007D9F6397D732DB2BBF9A
Authority key identifier: 63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/323830333a643630303a3a2f33322d3332203d3e203230323535.roa
Signing time:             Tue 05 Mar 2024 17:45:15 +0000
ROA not before:           Tue 05 Mar 2024 17:40:15 +0000
ROA not after:            Tue 04 Mar 2025 17:45:15 +0000
asID:                     20255
IP address blocks:        2803:d600::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:76:8a:b8:f5:90:05:60:30:00:7d:9f:63:97:d7:32:db:2b:bf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
        Validity
            Not Before: Mar  5 17:40:15 2024 GMT
            Not After : Mar  4 17:45:15 2025 GMT
        Subject: CN=DC94D6FC871DB2B35115282BC62065C52535EB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:7c:e2:8a:cf:08:b5:cd:9f:7f:fb:92:92:
                    30:70:1f:14:26:af:70:e8:63:db:2a:10:3a:7c:4f:
                    7e:1e:af:bb:bb:d8:b4:74:2f:bd:6d:76:b0:c9:6b:
                    e2:8b:c0:71:21:b8:97:0e:56:64:a0:8b:e2:3f:40:
                    b4:20:65:26:af:eb:1f:d2:c7:6b:7d:b0:07:fe:b0:
                    4c:42:a1:ff:33:62:42:60:7c:df:a5:ba:05:62:a7:
                    8c:6b:a1:ff:32:93:dc:f5:14:92:94:ce:78:7b:e7:
                    b2:1f:30:4c:0f:d5:2d:ce:87:f1:e1:8f:0a:6e:4e:
                    86:91:fa:3b:2d:8a:d6:55:16:98:b3:c8:27:4a:bb:
                    96:21:72:b3:c3:2f:1a:c2:77:c5:7a:18:d9:2b:29:
                    46:76:48:e6:e1:0f:08:b1:5c:15:ad:44:2c:1d:e1:
                    83:20:9a:5c:4b:74:94:31:87:7b:84:b2:6f:9c:81:
                    b7:bb:0b:9c:bd:29:44:7d:09:1f:73:29:16:44:c1:
                    49:cd:70:03:d3:69:60:c0:ef:f0:9d:f3:cc:35:50:
                    89:05:f2:a4:87:70:af:ea:5f:7d:7a:88:2a:32:68:
                    8d:ad:51:5a:e5:7d:f3:5a:c9:a3:c6:a9:1c:20:14:
                    cf:9a:18:31:2e:ca:6f:59:63:42:33:5b:8d:0c:55:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:94:D6:FC:87:1D:B2:B3:51:15:28:2B:C6:20:65:C5:25:35:EB:4B
            X509v3 Authority Key Identifier:
                keyid:63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/323830333a643630303a3a2f33322d3332203d3e203230323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:fd:d3:f2:2c:ec:ee:f8:91:a5:f5:80:05:57:3e:1b:66:
         13:28:e0:e2:ed:d0:ce:43:f6:d1:68:b9:b1:7e:54:a2:c2:3d:
         8b:f1:cc:4f:b0:a1:0c:67:5e:40:e9:ef:f4:6c:ba:5d:69:5a:
         fa:50:30:1f:60:4f:7f:14:9f:cb:ba:4a:8d:c9:83:60:f6:05:
         36:34:ab:c0:e4:2e:d5:e1:d5:d4:c8:ce:52:25:61:fa:93:b6:
         55:07:b5:29:ad:91:78:2e:f8:a2:5e:86:90:b8:1d:cc:0f:3f:
         6e:c5:19:e3:64:2e:d4:5f:bb:35:ed:11:f4:75:a8:93:4d:23:
         60:fd:2d:3d:64:f0:f6:d2:09:71:d5:ba:66:d9:c9:b8:2f:99:
         93:84:d0:40:92:8a:ff:f4:10:c1:b2:3e:e5:4a:d7:5f:78:20:
         f2:c1:fd:5d:aa:27:cc:42:03:5b:3d:bb:48:d7:10:eb:e6:7d:
         56:f9:c2:3c:06:4a:61:cb:2a:3b:99:b3:fd:d2:26:aa:39:47:
         82:95:d0:16:9c:74:93:e6:19:7b:0d:3d:77:70:b4:b5:f3:dc:
         85:68:ba:87:0b:b0:2f:c5:56:b5:6f:5b:0b:51:97:3e:9b:11:
         7a:ac:0e:4d:c3:8f:50:de:44:9a:66:41:b9:8e:b2:35:4a:f2:
         f7:29:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:23 2024 by rpki-client on console-fra.rpki-client.org