Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E82C0DF3775113D30CDB8525A212ED6B9EF1FB9095141C559F35E7E1A93F8185/0/323830313a3130633a3a2f34342d3438203d3e203134303830.roa
File:                     323830313a3130633a3a2f34342d3438203d3e203134303830.roa (raw, json)
Hash identifier:          d09khKXL6qioj2hTGFDrE74Y9pPDtbEcTxMdDfGzvTQ=
Subject key identifier:   9A:6F:71:37:2E:E1:56:B3:06:22:63:12:14:0D:58:60:27:E1:0F:42
Certificate issuer:       /CN=B9633295031F34B869879813A848553905F3AA46
Certificate serial:       475AD5496880E2C361307B96B7A0EBF6C15BC2F1
Authority key identifier: B9:63:32:95:03:1F:34:B8:69:87:98:13:A8:48:55:39:05:F3:AA:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9633295031F34B869879813A848553905F3AA46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E82C0DF3775113D30CDB8525A212ED6B9EF1FB9095141C559F35E7E1A93F8185/0/323830313a3130633a3a2f34342d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 17:49:52 +0000
ROA not before:           Tue 05 Mar 2024 17:44:52 +0000
ROA not after:            Tue 04 Mar 2025 17:49:52 +0000
asID:                     14080
IP address blocks:        2801:10c::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E82C0DF3775113D30CDB8525A212ED6B9EF1FB9095141C559F35E7E1A93F8185/0/B9633295031F34B869879813A848553905F3AA46.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E82C0DF3775113D30CDB8525A212ED6B9EF1FB9095141C559F35E7E1A93F8185/0/B9633295031F34B869879813A848553905F3AA46.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9633295031F34B869879813A848553905F3AA46.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5a:d5:49:68:80:e2:c3:61:30:7b:96:b7:a0:eb:f6:c1:5b:c2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9633295031F34B869879813A848553905F3AA46
        Validity
            Not Before: Mar  5 17:44:52 2024 GMT
            Not After : Mar  4 17:49:52 2025 GMT
        Subject: CN=9A6F71372EE156B306226312140D586027E10F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:62:82:aa:d6:b6:16:6e:b3:25:86:9b:bf:
                    56:0d:bc:6a:f5:19:01:47:38:df:9a:2f:2c:9c:d7:
                    c1:1c:34:21:ee:16:cb:9e:19:ff:56:b4:1e:b5:53:
                    cb:20:cc:39:24:09:ea:bf:ea:4f:ae:68:54:eb:a4:
                    42:fb:1f:d7:4c:22:bb:b6:90:4b:b0:e5:fb:03:46:
                    20:ea:12:5d:35:d8:0c:42:bf:d6:43:28:09:34:64:
                    fe:95:ca:f5:da:7b:31:d2:cc:26:0a:05:89:d4:2c:
                    49:00:e2:56:1f:e5:88:80:d5:bd:81:99:d5:d3:b0:
                    10:ca:9a:69:6e:7a:55:d9:60:52:13:7d:30:19:2d:
                    0f:66:4c:88:b8:b3:27:f8:85:0c:3d:38:c2:76:fe:
                    a4:70:f0:07:c7:ce:26:d4:7f:74:80:d2:bb:2d:2f:
                    5b:f8:2e:eb:20:cd:5a:2a:75:68:f8:87:7a:62:3c:
                    52:d4:1a:ea:69:15:b2:54:65:ab:fb:c6:1c:0b:cb:
                    9b:05:13:1d:b8:fa:c4:79:93:e7:6b:18:a6:9f:5c:
                    1c:c2:f8:44:2f:dc:a7:94:3e:e6:5a:ca:b5:ae:ec:
                    88:1f:51:92:6b:6d:c8:9e:8a:1f:17:75:8d:3e:aa:
                    10:0c:e1:ed:4c:cf:1f:a8:c1:72:a4:50:11:e9:f1:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6F:71:37:2E:E1:56:B3:06:22:63:12:14:0D:58:60:27:E1:0F:42
            X509v3 Authority Key Identifier:
                keyid:B9:63:32:95:03:1F:34:B8:69:87:98:13:A8:48:55:39:05:F3:AA:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E82C0DF3775113D30CDB8525A212ED6B9EF1FB9095141C559F35E7E1A93F8185/0/B9633295031F34B869879813A848553905F3AA46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9633295031F34B869879813A848553905F3AA46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E82C0DF3775113D30CDB8525A212ED6B9EF1FB9095141C559F35E7E1A93F8185/0/323830313a3130633a3a2f34342d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10c::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:e7:6e:27:13:ab:d7:91:57:5b:27:c6:d3:59:ab:58:ca:9e:
         e0:19:d8:e7:fa:9e:70:10:d2:56:b9:a8:7b:24:80:ba:5a:62:
         b7:a4:05:50:ee:af:aa:7d:3d:99:93:0f:12:15:a3:89:f5:2b:
         1c:64:ac:a0:30:7e:12:40:8f:1e:67:46:b9:fa:f5:86:da:67:
         77:11:3a:90:e9:6d:b3:45:47:4a:b0:0c:0d:e8:28:77:dd:2c:
         fd:36:54:93:b6:a3:7c:43:27:38:1e:2b:d9:f5:63:32:d4:e5:
         f9:78:e5:ba:02:8e:e0:94:1f:99:e8:0e:84:4f:39:ef:82:26:
         d2:4a:f1:0c:a2:08:ba:30:6a:dc:19:07:7e:66:6f:91:7a:10:
         56:0c:7e:66:5b:8e:da:28:dc:4e:8c:cf:30:35:2e:06:ca:25:
         17:ba:34:6d:9f:2b:5f:e5:cf:9d:a7:39:fe:54:19:d7:a7:a1:
         58:92:16:4d:70:87:27:5b:27:b4:9f:3e:71:ee:2a:17:86:c9:
         f0:0a:72:d8:c6:e1:bd:0b:31:3f:cb:da:7b:20:78:61:e6:b5:
         75:d3:c2:64:40:93:16:6b:a9:7a:64:63:c6:dd:2c:39:cb:06:
         b2:34:57:ef:93:bc:dd:a4:68:f3:12:12:b7:fb:29:c5:94:c5:
         06:d2:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org