Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3a2f34302d3438203d3e20323636373930.roa
File:                     323830333a613061303a3a2f34302d3438203d3e20323636373930.roa (raw, json)
Hash identifier:          +cHigQAo9ELN/PxlZmUsjoe1X9JqoqFYbBNU8zIe3og=
Subject key identifier:   C1:07:09:D0:3F:50:D9:C5:2D:25:6C:CE:9B:6E:5E:33:47:58:60:54
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       38F6CCDABE68BF3AEEF5BA6E05BAA8FB17C0674F
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3a2f34302d3438203d3e20323636373930.roa
Signing time:             Tue 05 Mar 2024 17:48:51 +0000
ROA not before:           Tue 05 Mar 2024 17:43:51 +0000
ROA not after:            Tue 04 Mar 2025 17:48:51 +0000
asID:                     266790
IP address blocks:        2803:a0a0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f6:cc:da:be:68:bf:3a:ee:f5:ba:6e:05:ba:a8:fb:17:c0:67:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Mar  5 17:43:51 2024 GMT
            Not After : Mar  4 17:48:51 2025 GMT
        Subject: CN=C10709D03F50D9C52D256CCE9B6E5E3347586054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:56:fa:5e:03:4e:b1:22:9e:eb:14:c1:dc:a6:
                    c7:11:3f:01:66:45:7e:33:2c:2b:ad:39:a9:75:7f:
                    64:d0:01:11:45:d7:14:49:17:4f:b6:90:2f:ac:61:
                    66:1a:a4:34:21:d7:58:1c:ce:09:e7:36:1d:f5:6d:
                    5f:eb:98:25:26:e1:26:e9:7c:36:a0:3b:c6:4f:4a:
                    5b:f0:70:98:ba:95:40:0f:cb:23:a3:76:b8:15:0b:
                    df:f1:3b:6b:dc:57:80:de:19:be:ed:08:73:55:8b:
                    ba:c5:ba:90:cd:3a:ab:1d:bb:b8:59:ec:d5:04:53:
                    7c:45:f2:f2:ae:6a:a3:6e:ac:3b:b3:61:93:22:ac:
                    34:13:98:e3:09:45:ce:74:25:28:d1:7b:c8:a8:f0:
                    88:35:9d:27:98:2e:68:ea:ea:76:7a:af:1e:f2:e5:
                    cc:91:09:65:a3:66:a7:cb:0c:9b:85:ba:36:9b:a2:
                    42:d4:32:81:c6:46:42:c5:5a:fa:b9:5f:bf:74:44:
                    64:91:d8:e2:61:22:92:d2:64:4e:97:29:41:78:f6:
                    8c:0b:bd:a7:db:0d:c6:5c:88:9c:42:12:e0:8e:51:
                    9b:4c:18:15:33:18:94:b6:8f:fd:46:4b:c3:20:2b:
                    88:cd:ba:34:3f:70:f4:40:af:11:11:a6:1c:e6:4a:
                    83:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:07:09:D0:3F:50:D9:C5:2D:25:6C:CE:9B:6E:5E:33:47:58:60:54
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3a2f34302d3438203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:70:65:8c:c5:a1:dc:73:ae:52:f9:19:15:9a:8a:ab:46:a2:
         a0:42:41:e5:5a:03:86:7d:21:6d:27:54:ab:11:98:17:88:08:
         35:d7:44:5e:41:34:8f:30:a2:7a:51:40:78:08:3e:7b:c6:9d:
         45:aa:17:6d:79:68:6a:e8:86:62:e0:79:75:34:af:5e:f7:0b:
         b9:3d:03:fc:27:6c:bd:22:a5:53:8a:03:d3:75:a0:73:01:44:
         43:ae:60:2d:f3:a1:d9:0f:26:53:a9:03:19:f1:84:32:fb:4d:
         26:f7:9d:a0:e1:40:a3:25:6b:87:5d:5b:53:03:51:f0:4c:43:
         9a:17:ff:f6:ca:bc:0e:40:5b:3a:00:d8:4b:b2:14:62:07:dd:
         2e:e4:2f:36:38:b6:5f:b1:b7:1a:e0:cc:7c:dc:09:ec:49:49:
         74:55:76:54:9d:62:c2:35:f7:96:58:ce:15:31:4f:1f:b9:4f:
         b4:25:cf:0e:34:18:72:ca:bd:c0:10:7a:25:8d:a4:ad:35:92:
         d9:63:f3:e1:4b:f3:03:c5:ee:d9:7e:15:fe:63:03:17:93:e1:
         e7:ff:46:84:bd:a1:99:e0:92:22:e0:da:44:8a:96:30:17:52:
         e3:34:9b:3a:99:75:a7:aa:50:b7:42:4c:6a:1e:07:d4:90:83:
         c5:49:db:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:25 2024 by rpki-client on console-ams.rpki-client.org