Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3930303a3a2f34302d3438203d3e20323639373939.roa
File:                     323830333a613061303a3930303a3a2f34302d3438203d3e20323639373939.roa (raw, json)
Hash identifier:          SscIFFUV19GYsGYJwjvGEObzF5RqsJPbogdiX2S/0Po=
Subject key identifier:   FA:FB:25:76:38:5B:0F:C8:66:0E:3D:AC:69:DB:E5:E9:4D:84:A9:E5
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       3E7E6B869F105CC6B5C89ABB5E8CAEF09C630DDA
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3930303a3a2f34302d3438203d3e20323639373939.roa
Signing time:             Tue 05 Mar 2024 17:48:49 +0000
ROA not before:           Tue 05 Mar 2024 17:43:49 +0000
ROA not after:            Tue 04 Mar 2025 17:48:49 +0000
asID:                     269799
IP address blocks:        2803:a0a0:900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7e:6b:86:9f:10:5c:c6:b5:c8:9a:bb:5e:8c:ae:f0:9c:63:0d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Mar  5 17:43:49 2024 GMT
            Not After : Mar  4 17:48:49 2025 GMT
        Subject: CN=FAFB2576385B0FC8660E3DAC69DBE5E94D84A9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:16:be:8f:a7:72:e3:37:df:ef:b1:1b:0c:
                    2d:8e:99:03:a3:08:de:0f:01:e1:ff:fa:bb:f8:65:
                    d2:02:10:60:67:40:69:7d:ba:e9:ae:6f:02:cd:3a:
                    db:5d:c9:28:ee:d7:fa:6e:78:57:e0:94:c3:77:6b:
                    e8:14:ef:25:5d:10:57:31:cd:07:50:78:7d:43:e4:
                    66:d8:fa:1d:b5:91:5f:0c:85:63:0d:78:be:4f:09:
                    e6:26:7b:d2:5d:24:2a:b4:9f:17:df:bb:6e:37:90:
                    81:07:bd:49:59:5a:b1:e8:88:a9:84:f4:69:9e:1b:
                    9f:f7:4f:28:5c:1f:92:06:1d:07:4b:34:ab:bb:c1:
                    e3:1c:aa:a9:36:c6:bc:fa:03:b0:aa:f8:76:7e:f6:
                    3c:02:c1:5d:f9:33:e9:8d:a2:d4:6f:54:44:6a:5f:
                    80:d1:27:26:dc:60:6f:ea:98:8b:3e:44:f5:89:a1:
                    70:08:78:74:c1:a8:72:eb:39:5e:4f:97:11:89:62:
                    57:31:3e:79:8f:6a:d8:fc:76:07:f1:50:90:01:32:
                    3c:f5:64:5b:15:27:c1:c6:c5:06:5e:a8:0a:37:47:
                    8e:36:eb:0a:f1:df:f1:db:10:54:65:03:d7:9f:55:
                    5e:f8:55:f1:27:bb:45:1c:ab:65:16:28:41:34:f0:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:25:76:38:5B:0F:C8:66:0E:3D:AC:69:DB:E5:E9:4D:84:A9:E5
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3930303a3a2f34302d3438203d3e20323639373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:76:9d:98:e4:a3:01:81:ad:ca:28:cf:d0:be:3f:12:3b:78:
         ea:5c:8a:0f:66:da:07:da:18:5f:ce:25:cf:03:ce:4e:a3:60:
         28:9d:85:84:eb:bb:3f:9b:02:42:c5:ef:09:7b:73:63:f9:1c:
         5b:97:fd:d9:61:89:f2:4f:f1:bf:1b:e9:36:65:ec:72:9f:91:
         69:57:f8:fe:af:17:c5:26:41:9b:32:55:93:7b:b5:64:fb:9e:
         e7:c9:a0:21:1a:d9:9f:49:fc:43:a1:0d:f4:05:74:43:cc:d3:
         c1:52:44:5a:1b:62:78:ee:90:61:86:ff:e9:83:2c:36:f3:d7:
         8f:37:0a:ac:16:a6:4e:ec:af:6a:90:d6:05:b9:24:70:d6:49:
         bb:31:7e:70:0f:42:46:69:f8:9e:27:84:6c:95:2b:a0:25:98:
         76:e9:6e:18:cb:a4:bc:d5:7d:9d:ba:c9:9d:2b:d4:a5:20:04:
         20:3a:6a:df:1a:d2:7e:2a:f6:69:ee:2a:db:81:78:98:f2:1f:
         16:61:a8:14:33:91:74:cc:71:6c:82:1e:88:41:3b:8f:61:9b:
         d0:ab:cc:86:13:00:03:37:56:4b:b9:a1:06:0d:d0:c6:25:b7:
         d8:7d:a6:a9:6c:a6:69:f3:15:41:78:0a:f9:20:f4:0a:86:a7:
         1a:19:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org