Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/323830333a343261303a3a2f33322d3332203d3e20323636383531.roa
File:                     323830333a343261303a3a2f33322d3332203d3e20323636383531.roa (raw, json)
Hash identifier:          Nkec5/wEIYXm7OXoKGkYn7gma1+xovd5X9DFo2BDbiQ=
Subject key identifier:   8F:C2:E0:15:4C:1E:7D:22:6D:20:A8:04:17:83:E9:B2:D9:BB:77:F1
Certificate issuer:       /CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Certificate serial:       037DE19F89679A6A9FD6193BA7C3528B3733AC05
Authority key identifier: 84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/323830333a343261303a3a2f33322d3332203d3e20323636383531.roa
Signing time:             Sun 25 Aug 2024 18:20:00 +0000
ROA not before:           Sun 25 Aug 2024 18:15:00 +0000
ROA not after:            Sun 24 Aug 2025 18:20:00 +0000
asID:                     266851
IP address blocks:        2803:42a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7d:e1:9f:89:67:9a:6a:9f:d6:19:3b:a7:c3:52:8b:37:33:ac:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
        Validity
            Not Before: Aug 25 18:15:00 2024 GMT
            Not After : Aug 24 18:20:00 2025 GMT
        Subject: CN=8FC2E0154C1E7D226D20A8041783E9B2D9BB77F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:10:e0:30:51:38:b3:bf:82:f0:67:ba:9c:
                    5b:05:31:cf:d0:aa:39:a0:c3:7f:57:9c:04:1d:c8:
                    d7:91:9e:99:e7:55:5c:c6:61:c9:8a:f1:12:25:41:
                    fc:7e:47:ba:6e:ad:2f:f2:b2:9c:02:8a:c1:eb:c2:
                    5a:41:35:f0:d3:8c:4d:2f:18:e5:2d:4d:29:17:08:
                    94:1d:85:f7:e2:e6:17:50:3e:87:58:d9:77:f0:b6:
                    b2:81:d6:07:1f:39:3c:d5:89:25:0e:69:36:86:31:
                    74:8f:6e:24:ac:8b:27:ee:c2:26:84:26:8a:14:6f:
                    c3:22:f9:42:2c:ed:b8:58:ea:59:7b:4b:27:1c:85:
                    a9:86:78:47:1b:48:18:7f:e9:9b:6f:d9:f0:09:3b:
                    ae:f5:ec:3c:ec:0c:9a:68:f4:10:a8:b5:7c:12:88:
                    7d:e4:46:6c:31:8c:6d:9d:99:d8:b3:0e:b1:ef:e3:
                    93:fd:d8:c8:c0:66:c1:5c:40:19:aa:23:4c:d3:e0:
                    8a:73:98:32:c5:69:cf:15:18:5b:21:7f:67:ea:5c:
                    ca:96:9a:a8:5c:a0:c7:de:4a:08:b6:6a:6b:0b:d5:
                    de:23:6f:69:a0:a8:b1:8a:cb:f3:79:10:b8:f3:06:
                    ab:1d:79:94:f7:e5:b8:10:a0:e2:f0:17:40:16:5b:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C2:E0:15:4C:1E:7D:22:6D:20:A8:04:17:83:E9:B2:D9:BB:77:F1
            X509v3 Authority Key Identifier:
                keyid:84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/323830333a343261303a3a2f33322d3332203d3e20323636383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:42a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:28:bd:96:a9:25:3f:e0:68:ed:c8:28:59:f1:fd:f1:ef:
         6d:f0:a4:0b:90:ee:df:14:99:dd:c5:80:f8:52:66:ba:5d:5d:
         da:02:a2:10:cb:39:0e:aa:b9:3b:72:49:d1:db:ec:92:34:03:
         28:2b:7b:2f:e9:e5:90:c5:05:e5:31:90:2e:a5:25:6c:73:a1:
         16:70:e5:1f:2a:92:76:f3:66:fe:4b:09:e1:fd:59:af:69:15:
         6c:de:8b:33:2a:bd:2e:d9:5a:91:0d:44:a7:d6:ed:af:5a:1c:
         06:54:3a:31:c2:62:06:c1:0a:bb:38:2a:9f:40:18:85:c8:ef:
         e9:fd:54:2c:46:f1:5a:9a:8c:44:18:56:4f:e0:0a:6b:b5:be:
         de:f6:c8:19:c4:8a:03:43:d0:0c:c6:91:cf:64:70:52:65:1e:
         04:0c:af:cb:3e:f6:8e:96:81:cb:a9:c6:46:dd:ad:c5:e1:77:
         a1:87:ca:54:9c:4c:56:f3:24:e4:c0:99:c8:37:ff:f9:2c:9f:
         12:4a:91:7b:77:82:10:c1:c5:e9:ac:b2:fa:f4:8c:75:14:81:
         8b:85:8d:fd:eb:5a:58:e9:79:cc:e1:25:be:b6:1f:e9:74:f7:
         a2:6a:f7:d8:fc:97:39:dd:53:35:40:35:07:88:b5:4a:53:8a:
         8f:15:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org