Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33362d3438203d3e20323634373834.roa
File:                     323830333a613932303a323030303a3a2f33362d3438203d3e20323634373834.roa (raw, json)
Hash identifier:          hpdyJW5+lQtgqx5xYTkr4Xu0+6P/mSyAh9UGDCOCV3Q=
Subject key identifier:   00:06:AE:B7:14:9C:50:9E:B4:72:9D:B3:0E:5B:F0:FB:A0:86:D4:31
Certificate issuer:       /CN=7328461355B304B789F60508DF555EAC428848F4
Certificate serial:       1E0C7209F0C11C08534A073810BE74F15FEEB8A9
Authority key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33362d3438203d3e20323634373834.roa
Signing time:             Wed 20 Nov 2024 01:55:01 +0000
ROA not before:           Wed 20 Nov 2024 01:50:01 +0000
ROA not after:            Wed 19 Nov 2025 01:55:01 +0000
asID:                     264784
IP address blocks:        2803:a920:2000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0c:72:09:f0:c1:1c:08:53:4a:07:38:10:be:74:f1:5f:ee:b8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7328461355B304B789F60508DF555EAC428848F4
        Validity
            Not Before: Nov 20 01:50:01 2024 GMT
            Not After : Nov 19 01:55:01 2025 GMT
        Subject: CN=0006AEB7149C509EB4729DB30E5BF0FBA086D431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:2d:62:29:e3:5e:8a:67:3d:a5:5d:f1:5b:
                    d7:8c:1c:27:05:b5:69:68:65:ad:4e:c5:28:59:61:
                    5b:1a:78:c2:bb:30:8d:cb:81:20:52:e6:22:e0:a7:
                    f3:6e:06:8f:8b:44:ce:00:89:79:f1:02:3f:30:c9:
                    81:14:28:b9:29:a7:ec:03:b9:f5:9e:1e:b1:9c:ba:
                    85:87:5b:a7:bb:34:9b:9d:7a:11:18:8a:79:cc:e4:
                    f7:09:4f:d8:2f:f5:f6:40:68:b5:7e:2a:01:65:18:
                    79:3f:6f:a5:dd:ba:1d:be:5e:85:45:f3:b6:2a:64:
                    d5:bf:8f:3e:ad:f5:da:ac:01:73:3a:c2:1f:7e:45:
                    39:eb:9e:5c:83:e7:d2:97:6c:87:c7:6c:83:c8:55:
                    50:22:9c:ee:c4:a5:de:6a:84:60:f7:7a:e5:7c:c8:
                    1e:f8:08:da:30:a3:82:81:8f:85:38:90:17:11:c5:
                    f7:5e:03:e1:00:6d:03:29:95:89:ae:39:ee:a0:58:
                    af:cc:03:03:f3:1b:a1:90:32:67:3d:3f:ec:a9:47:
                    28:4d:1d:f3:04:8f:98:a8:ed:ec:91:da:a3:d7:4f:
                    da:af:3f:a9:0e:91:fc:6a:c1:57:36:d5:c4:c4:aa:
                    4d:79:e2:07:eb:dd:81:5b:38:b2:76:81:d5:96:f1:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:AE:B7:14:9C:50:9E:B4:72:9D:B3:0E:5B:F0:FB:A0:86:D4:31
            X509v3 Authority Key Identifier:
                keyid:73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a323030303a3a2f33362d3438203d3e20323634373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a920:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:cc:14:a1:07:10:9f:ce:52:dd:9a:d8:ca:08:14:33:17:ef:
         a0:8a:79:61:b7:87:93:ae:05:f0:2d:de:6b:b8:e4:5a:ab:86:
         99:95:47:d8:e0:4c:0d:15:4d:65:32:2b:a7:0f:c9:06:7a:be:
         4a:ba:df:08:8b:b3:1c:1d:7a:7b:cd:e6:e8:8b:47:6f:82:85:
         ea:d6:8e:6a:f6:d6:35:de:63:14:3e:6e:c5:88:b6:74:77:e1:
         46:e7:bd:f4:b9:42:13:ae:b7:de:ef:10:5d:0d:9c:9b:ce:f5:
         cb:47:d4:7d:37:ec:bc:57:e0:68:d2:51:6d:5a:e2:2f:6c:5d:
         8d:6b:39:ff:dd:a9:5d:c0:90:a2:35:e0:10:97:cd:e3:9a:5e:
         6b:ae:e6:25:2b:e6:87:2e:c9:25:ae:5a:98:54:2d:7e:86:13:
         ae:7b:9d:6c:68:65:b7:3e:a5:a1:f6:a1:3c:bf:fd:e4:39:9b:
         74:13:3d:1c:e3:b9:60:45:59:a5:8a:7a:7c:3d:96:82:f8:4d:
         dd:68:1c:45:90:57:a7:29:39:30:ef:26:eb:f0:a3:3b:bf:18:
         88:69:1f:5f:6e:72:af:60:1f:5f:ba:19:df:94:b2:8f:e9:08:
         46:2c:00:d0:a9:f9:54:a0:02:ea:fe:94:40:04:bb:78:e4:da:
         2b:0a:5a:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:57 2024 by rpki-client on console-fra.rpki-client.org