Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3330303a3a2f34302d3430203d3e203133343839.roa
File:                     323830313a3163383a3330303a3a2f34302d3430203d3e203133343839.roa (raw, json)
Hash identifier:          WiqbCQ9xVUSXmFovhQUux//zxkp0oc/kY9kLIsx2njU=
Subject key identifier:   70:C0:B9:0F:6A:FF:19:90:46:95:43:05:8F:19:C9:59:32:0E:C6:39
Certificate issuer:       /CN=EE696F80F79D5A040A78AEE92CD99FF107BE3183
Certificate serial:       59DEE2F348283134186B870036D684524A5AC159
Authority key identifier: EE:69:6F:80:F7:9D:5A:04:0A:78:AE:E9:2C:D9:9F:F1:07:BE:31:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3330303a3a2f34302d3430203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:10:07 +0000
ROA not before:           Tue 05 Mar 2024 18:05:07 +0000
ROA not after:            Tue 04 Mar 2025 18:10:07 +0000
asID:                     13489
IP address blocks:        2801:1c8:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:de:e2:f3:48:28:31:34:18:6b:87:00:36:d6:84:52:4a:5a:c1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE696F80F79D5A040A78AEE92CD99FF107BE3183
        Validity
            Not Before: Mar  5 18:05:07 2024 GMT
            Not After : Mar  4 18:10:07 2025 GMT
        Subject: CN=70C0B90F6AFF1990469543058F19C959320EC639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:4d:3e:d6:9c:ce:76:a2:ed:18:ac:ed:ed:
                    e2:34:27:37:69:04:ed:61:82:8a:6a:1b:f9:c4:47:
                    8d:d4:2c:1c:6a:74:ff:82:c1:1c:f8:b7:25:55:5b:
                    3f:8d:3a:04:43:21:ed:57:20:20:29:ed:dc:ff:67:
                    b6:ae:70:3d:39:58:ff:2f:3d:ec:7a:02:0b:9d:94:
                    00:92:4f:7a:48:21:66:2f:9f:f1:73:22:e7:eb:13:
                    9e:ee:84:d9:1d:5a:3f:3f:58:05:b6:02:99:6c:fd:
                    11:c0:09:2e:fd:10:2c:7f:f2:59:2d:50:49:29:34:
                    34:61:16:7a:f4:fa:c1:4f:2f:d4:2a:e6:9c:3e:be:
                    b2:0e:b2:b9:96:35:41:2e:a3:e4:b3:31:62:fa:7d:
                    f0:1b:97:91:d5:ac:a9:56:3a:e5:8d:b6:f1:c2:4c:
                    10:55:d3:6a:8b:d1:24:bc:55:59:ad:98:fc:d8:fe:
                    c4:ee:88:c8:7c:86:54:69:85:bd:a9:ac:c7:c6:1c:
                    1c:73:ed:1e:c0:23:64:88:8f:f5:7b:8d:30:6e:10:
                    42:e9:ba:03:5f:4f:15:b1:53:9a:78:9d:8e:c2:ec:
                    67:c2:59:23:96:2a:b3:64:26:53:c0:77:d0:2b:c6:
                    90:6b:f6:00:b0:44:c0:01:fc:0d:5a:7d:50:a5:2f:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C0:B9:0F:6A:FF:19:90:46:95:43:05:8F:19:C9:59:32:0E:C6:39
            X509v3 Authority Key Identifier:
                keyid:EE:69:6F:80:F7:9D:5A:04:0A:78:AE:E9:2C:D9:9F:F1:07:BE:31:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3330303a3a2f34302d3430203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:2e:a7:f5:ef:25:3a:28:3f:de:26:7a:91:e9:29:e3:f3:95:
         d5:6e:5c:72:dc:bb:d5:21:48:17:12:75:2f:a1:21:1f:0e:56:
         71:38:b7:74:09:37:f4:28:39:7c:9b:93:78:4b:ee:ba:78:0e:
         96:60:d9:03:95:64:98:6b:9f:95:2f:fd:87:49:48:3d:b2:5d:
         80:52:40:93:6e:f3:d1:05:7e:34:1c:43:14:6f:ed:21:83:4c:
         81:ac:1d:ad:9f:09:af:da:72:9f:1b:bc:be:4b:32:d1:f1:b5:
         34:a1:de:1c:6c:e7:e9:ea:6e:8a:62:00:b1:78:fa:76:5e:13:
         dd:64:59:1a:32:c5:62:b0:01:c8:31:21:f0:34:7b:d6:94:56:
         5b:cc:05:d8:49:a6:a8:4b:d6:8e:16:c4:30:ff:b6:08:1d:7c:
         85:6e:9e:42:e0:5c:6b:42:02:c7:9d:a8:95:ab:37:1d:ef:fa:
         c4:24:1a:72:3c:58:f9:98:f4:59:89:b9:e8:c7:9f:b2:23:68:
         02:6a:2b:9e:67:77:be:a8:1c:02:ae:00:76:88:6b:94:b8:0d:
         73:d2:b2:57:ef:84:d6:cd:ee:ab:66:f4:8e:65:ba:cc:80:d9:
         11:f3:fa:33:ab:34:0f:06:7f:8c:42:76:78:59:e2:c2:cd:db:
         cb:f7:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org