Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/323830333a383963303a3a2f33322d3332203d3e20323635373036.roa
File:                     323830333a383963303a3a2f33322d3332203d3e20323635373036.roa (raw, json)
Hash identifier:          zt1lF0Upf/TB04QaO14EiDe52nXNoo1P2z2Ey8aHCns=
Subject key identifier:   3C:3D:9C:55:CD:04:4B:14:58:1A:37:6B:F4:27:61:20:A3:3A:1F:3F
Certificate issuer:       /CN=73F5635860CFCD6D03F2A4CDFFCA79190AAE6915
Certificate serial:       48D889487320CA56D91CB735B36DA1875B015D21
Authority key identifier: 73:F5:63:58:60:CF:CD:6D:03:F2:A4:CD:FF:CA:79:19:0A:AE:69:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/323830333a383963303a3a2f33322d3332203d3e20323635373036.roa
Signing time:             Tue 05 Mar 2024 18:13:40 +0000
ROA not before:           Tue 05 Mar 2024 18:08:40 +0000
ROA not after:            Tue 04 Mar 2025 18:13:40 +0000
asID:                     265706
IP address blocks:        2803:89c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d8:89:48:73:20:ca:56:d9:1c:b7:35:b3:6d:a1:87:5b:01:5d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73F5635860CFCD6D03F2A4CDFFCA79190AAE6915
        Validity
            Not Before: Mar  5 18:08:40 2024 GMT
            Not After : Mar  4 18:13:40 2025 GMT
        Subject: CN=3C3D9C55CD044B14581A376BF4276120A33A1F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:47:5e:0c:69:07:82:8e:2b:ea:64:aa:ce:
                    4d:cc:22:8b:d9:cc:25:4e:48:1e:e0:dd:e0:85:28:
                    aa:ba:91:cf:93:a4:09:d4:11:4a:f4:1b:10:2f:32:
                    09:44:ba:88:f2:f1:65:fc:a8:69:54:26:0d:c4:c9:
                    e5:fa:25:d2:82:d2:49:3a:e7:cc:1b:b9:4d:8a:8e:
                    e1:5e:46:3b:1f:4d:20:9a:60:3e:cc:ed:5c:a9:95:
                    bc:5e:78:d2:43:48:d7:f8:e7:b1:78:67:c0:69:1d:
                    22:ab:eb:26:3f:c9:8a:0f:c1:a5:33:00:1e:05:29:
                    70:35:ba:ee:06:73:b4:6f:f3:f0:ad:d7:d7:3e:3e:
                    3c:7b:47:67:30:60:83:b8:47:2a:8b:70:9d:99:b3:
                    ec:9b:5a:3f:85:04:e4:5a:40:b7:48:26:9a:c9:55:
                    c2:b2:76:2f:74:18:6f:6b:33:22:9b:18:2f:67:a8:
                    e3:ac:27:36:fc:96:f6:24:76:44:6b:dd:a2:3e:8c:
                    78:a5:25:39:0d:cb:0f:41:94:a8:65:b1:71:ea:40:
                    b0:d4:2b:1a:b4:12:0c:1c:bb:40:4a:1d:f9:d7:13:
                    bc:dd:a0:6c:e4:50:c7:ed:4e:44:93:61:9e:33:97:
                    d6:32:96:8c:a9:10:70:2f:51:a4:47:8a:7d:f5:5f:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3D:9C:55:CD:04:4B:14:58:1A:37:6B:F4:27:61:20:A3:3A:1F:3F
            X509v3 Authority Key Identifier:
                keyid:73:F5:63:58:60:CF:CD:6D:03:F2:A4:CD:FF:CA:79:19:0A:AE:69:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/323830333a383963303a3a2f33322d3332203d3e20323635373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:89c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:fb:e1:72:b9:6a:84:91:af:f5:9c:98:4a:91:ff:45:d8:3f:
         78:18:82:e2:67:a3:34:2a:82:23:5a:81:f6:6a:9b:fe:53:2d:
         9c:b1:f6:7e:e2:6c:7d:c5:e7:13:66:37:45:99:af:b6:5b:da:
         f1:0c:dc:17:62:bd:31:ea:b1:84:a8:22:53:66:02:90:9a:fa:
         95:02:99:54:1e:5d:f1:48:7e:51:28:b9:37:0c:35:ce:99:02:
         ca:80:74:c1:c8:71:0d:7c:2b:22:de:93:45:90:29:d3:b7:db:
         cc:f0:50:78:32:d7:59:c1:75:bd:f7:c0:a8:59:91:30:c7:42:
         45:3f:bf:5a:75:37:b8:fa:e1:65:e2:20:64:89:3d:d7:9b:6f:
         2d:bd:63:e8:7c:9d:91:f3:26:88:63:d2:73:73:c9:86:21:b2:
         44:7e:58:9e:93:d5:d6:0f:a6:90:d0:14:8d:cd:6e:2b:e3:fc:
         b7:f1:cf:6d:e0:fc:08:2a:5c:b4:d0:de:0e:f8:4b:33:e4:99:
         6e:62:6b:20:fa:8d:01:cc:65:a7:0b:ac:6b:30:d8:f6:22:60:
         75:0b:6b:80:75:8f:48:2c:d8:11:5c:00:ad:2a:aa:e4:4d:55:
         08:b6:1f:73:9f:44:66:81:32:81:81:51:21:8c:1d:3c:0c:ce:
         bf:14:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org