Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/323830333a363065303a3a2f33322d3634203d3e20323639383630.roa
File:                     323830333a363065303a3a2f33322d3634203d3e20323639383630.roa (raw, json)
Hash identifier:          6tMN3vQ+HpBI1B/OawNZwsdAdmj7itTQtL1HS0hkGtI=
Subject key identifier:   22:6D:3A:AB:41:47:19:89:6F:BF:BA:11:E4:10:8A:1A:37:70:88:45
Certificate issuer:       /CN=2A7D6F434E1C14422868C8C6E751B64D72719220
Certificate serial:       0F1B49E13C3D00C0D55CCCC9BD7E538DED328AB6
Authority key identifier: 2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/323830333a363065303a3a2f33322d3634203d3e20323639383630.roa
Signing time:             Tue 05 Mar 2024 18:01:48 +0000
ROA not before:           Tue 05 Mar 2024 17:56:48 +0000
ROA not after:            Tue 04 Mar 2025 18:01:48 +0000
asID:                     269860
IP address blocks:        2803:60e0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1b:49:e1:3c:3d:00:c0:d5:5c:cc:c9:bd:7e:53:8d:ed:32:8a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A7D6F434E1C14422868C8C6E751B64D72719220
        Validity
            Not Before: Mar  5 17:56:48 2024 GMT
            Not After : Mar  4 18:01:48 2025 GMT
        Subject: CN=226D3AAB414719896FBFBA11E4108A1A37708845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:38:e7:63:ca:70:24:7b:52:ae:97:ad:f8:
                    bd:ec:8d:ee:1b:14:4d:07:bb:14:2b:26:16:57:6b:
                    3b:73:be:46:15:83:94:31:5d:63:de:4d:10:0b:67:
                    8c:c3:15:58:f1:bc:04:a3:8e:fe:5a:3a:33:aa:0c:
                    6a:43:e5:1b:7a:c0:ba:87:32:2d:02:2c:e7:49:01:
                    48:38:cf:ea:8a:11:92:14:ee:17:35:36:6a:dd:4c:
                    57:37:00:e9:3a:5c:0c:02:94:7b:1a:f5:5b:41:e8:
                    b3:b6:42:31:e2:66:02:56:06:1b:88:58:28:24:6e:
                    b5:d2:05:89:27:ef:54:3c:35:c8:d9:f9:17:52:0e:
                    e2:78:15:5c:08:4c:5c:d1:3e:b7:38:83:a8:63:f4:
                    82:ac:53:bf:39:c1:a8:36:3f:41:c3:12:16:f3:ff:
                    c4:83:3b:a2:e0:d1:56:4e:3d:48:6a:31:19:6a:34:
                    7c:1a:43:9d:78:bc:98:ee:27:05:b5:44:17:6e:ee:
                    b7:97:93:12:14:82:82:bf:99:9d:f3:59:63:9d:4f:
                    08:f7:05:b4:75:92:5a:ce:9d:14:dd:6e:dd:24:ee:
                    2d:bf:07:3a:b7:6d:8f:fe:69:eb:3f:60:b5:ed:67:
                    d9:82:2c:ea:d3:b8:2e:d5:e0:25:a6:87:97:91:c5:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:3A:AB:41:47:19:89:6F:BF:BA:11:E4:10:8A:1A:37:70:88:45
            X509v3 Authority Key Identifier:
                keyid:2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/323830333a363065303a3a2f33322d3634203d3e20323639383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:60e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:30:0b:f1:b3:12:d8:85:6d:b0:20:93:59:aa:84:4c:36:
         dc:32:b4:be:18:63:ad:02:bf:a4:df:67:90:7a:1e:e5:9c:8e:
         4f:d8:c6:3a:84:a0:b8:f9:a9:97:a1:55:18:30:02:84:5b:c7:
         0f:9a:52:33:b0:78:8a:18:85:1c:a5:ea:b2:5d:aa:a5:e9:5a:
         79:c1:ed:56:79:e6:d7:44:ee:88:a8:56:89:a7:b9:46:e2:80:
         fb:53:de:4c:84:3e:8d:78:3d:51:ea:1a:82:2c:9b:1b:5f:a3:
         24:ab:a8:f6:e1:2f:84:d9:f4:8b:24:6c:36:ea:5c:51:e4:23:
         fe:6e:3d:f1:2e:c6:cd:12:d3:b2:c8:59:cf:df:9d:8c:e6:f8:
         fa:b5:e6:41:45:f4:c1:b3:6e:08:17:8e:9e:37:7a:70:76:e3:
         e7:74:64:bb:8f:fe:55:53:28:29:40:13:0e:eb:cb:1b:27:1c:
         d2:37:2c:8a:88:b4:30:50:cb:2e:56:3d:fd:19:8b:df:d4:dd:
         34:7c:e0:6b:db:ee:d6:14:ca:c9:94:f2:f7:49:03:8d:98:93:
         f6:a0:52:12:b5:7d:f6:40:20:a9:55:6b:84:6c:a8:0d:d8:65:
         a0:4f:ed:a3:ed:0f:af:95:54:92:66:8f:20:f5:b2:00:67:4f:
         a3:b5:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org