Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/323830333a386135303a3a2f33322d3332203d3e20323733313735.roa
File:                     323830333a386135303a3a2f33322d3332203d3e20323733313735.roa (raw, json)
Hash identifier:          QYpWDccj3Jsobro54616tv7pwaInIXdPqGsaH2OnH5c=
Subject key identifier:   5B:3E:EE:2A:48:39:EE:AB:B3:8C:1F:44:8F:09:07:1A:E4:ED:DB:72
Certificate issuer:       /CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
Certificate serial:       0C7DE3415EA075DC63BF29B0AF2F59F70A431506
Authority key identifier: 21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/323830333a386135303a3a2f33322d3332203d3e20323733313735.roa
Signing time:             Thu 25 Apr 2024 11:35:00 +0000
ROA not before:           Thu 25 Apr 2024 11:30:00 +0000
ROA not after:            Thu 24 Apr 2025 11:35:00 +0000
asID:                     273175
IP address blocks:        2803:8a50::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7d:e3:41:5e:a0:75:dc:63:bf:29:b0:af:2f:59:f7:0a:43:15:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AFD4435E9D87781118BD16F97AD81F119BFBD6
        Validity
            Not Before: Apr 25 11:30:00 2024 GMT
            Not After : Apr 24 11:35:00 2025 GMT
        Subject: CN=5B3EEE2A4839EEABB38C1F448F09071AE4EDDB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:3b:67:56:cd:ca:e1:f2:07:02:95:10:87:
                    df:10:6a:65:f4:47:78:9c:98:ca:00:13:ff:f5:6d:
                    cf:8b:92:41:0a:97:ca:fd:07:cb:4e:dc:dc:16:16:
                    92:18:df:d8:de:20:b3:2c:18:b4:47:1e:5d:1e:21:
                    f7:14:07:8b:18:5c:59:25:ea:63:58:2a:e7:69:96:
                    7b:4b:9c:af:09:79:97:08:a0:66:38:04:d5:8e:fd:
                    46:b0:bf:27:a7:a6:d5:db:45:40:06:34:3a:f9:ae:
                    5d:0a:aa:e1:b2:26:ec:b7:dc:87:42:56:16:17:cf:
                    5e:94:1e:3e:17:62:2d:31:80:e8:8b:af:f5:49:8f:
                    97:5a:7b:86:f3:67:05:3f:da:3f:07:b2:de:df:d9:
                    c5:16:1f:10:ec:9d:35:e0:b9:7b:89:91:97:c8:17:
                    c2:b7:b7:a5:95:42:e7:1a:10:c3:67:7c:6b:fe:c3:
                    60:14:8d:5e:63:76:a7:57:0b:35:3d:b9:e3:87:76:
                    f1:da:50:cb:8f:63:bd:f6:3a:ac:d9:e4:a9:80:f4:
                    df:e9:30:cf:d9:ca:ac:51:d6:cb:39:c5:c6:e8:cd:
                    c4:90:fc:7f:09:fb:b8:d0:38:17:ae:31:b5:a9:d5:
                    84:f0:66:33:20:90:38:45:d3:c9:fa:90:ed:bd:ab:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3E:EE:2A:48:39:EE:AB:B3:8C:1F:44:8F:09:07:1A:E4:ED:DB:72
            X509v3 Authority Key Identifier:
                keyid:21:AF:D4:43:5E:9D:87:78:11:18:BD:16:F9:7A:D8:1F:11:9B:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21AFD4435E9D87781118BD16F97AD81F119BFBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA9493C1F59860E4AF212245832BDCCA500BE51B3915BB0BCFC8D3D72DAD8CF/0/323830333a386135303a3a2f33322d3332203d3e20323733313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:11:f9:e2:39:bb:f6:31:20:b2:b0:33:65:d7:4e:f0:5b:dd:
         b5:7c:89:f4:60:ed:12:ea:5d:31:1d:d7:c2:8b:d6:77:69:f8:
         c4:93:4c:7e:eb:01:b1:a9:de:94:c5:07:47:82:f2:43:54:67:
         9e:68:e7:09:47:bc:1b:48:95:c0:53:66:82:83:0e:20:e7:24:
         65:c4:a0:b8:25:12:3d:b1:96:69:6f:15:8b:56:0a:64:cd:c8:
         e4:01:d3:67:0a:f5:cd:96:d5:68:8c:fb:bb:e9:51:5f:be:d3:
         27:a1:2a:56:39:12:7d:5b:24:6b:80:6d:a7:5e:f1:e2:55:4d:
         11:4f:f1:3f:00:a9:64:5c:79:af:c3:f8:bc:38:a3:c9:61:8e:
         ae:e6:1d:28:0c:ed:68:81:97:c2:72:8a:f7:34:01:a3:76:a6:
         f5:32:92:8f:70:dc:be:d7:0d:d0:9f:5a:3b:31:37:45:4e:16:
         53:26:7d:88:54:09:c5:f8:fa:d4:3a:9f:1a:11:89:cc:db:ef:
         a8:9e:26:c1:75:8a:59:39:93:86:86:5d:ff:23:e7:4d:ba:8f:
         e1:9d:dc:a6:44:50:0b:03:eb:93:29:44:60:f1:c8:f2:21:56:
         1f:ce:cf:5d:29:4d:fe:25:08:ba:30:27:60:ed:00:7f:d6:f7:
         13:4f:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org