Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430383a3a2f34362d3438203d3e203237383832.roa
File:                     323830303a3332303a383430383a3a2f34362d3438203d3e203237383832.roa (raw, json)
Hash identifier:          P5iS+AwMvLSdLCTCv2fbM9pVrqRQdWb8Y0dVT6cN7pA=
Subject key identifier:   3C:B9:74:CD:9F:ED:C8:1E:18:50:61:68:1F:52:CF:C5:86:F5:22:40
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       4BEBDCCC659C489B50BBD302935F5DDC9850D2F0
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430383a3a2f34362d3438203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:39 +0000
ROA not before:           Tue 05 Mar 2024 18:04:39 +0000
ROA not after:            Tue 04 Mar 2025 18:09:39 +0000
asID:                     27882
IP address blocks:        2800:320:8408::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:eb:dc:cc:65:9c:48:9b:50:bb:d3:02:93:5f:5d:dc:98:50:d2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:39 2024 GMT
            Not After : Mar  4 18:09:39 2025 GMT
        Subject: CN=3CB974CD9FEDC81E185061681F52CFC586F52240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:e2:53:b1:e2:c2:84:96:1d:5f:f0:1c:27:
                    f8:19:7f:16:ec:77:16:79:fc:c2:dd:a6:ce:49:9c:
                    07:53:ed:36:55:30:b0:12:e9:bf:46:d9:e7:87:e3:
                    0b:be:3a:4f:8d:2f:7d:59:37:ee:d7:7d:e2:ce:96:
                    b6:70:14:02:02:74:87:33:d8:92:f4:e8:90:5c:f4:
                    c7:e7:62:25:e3:a4:3b:da:3f:28:f0:34:d4:18:9b:
                    64:91:e7:51:9a:a8:1b:61:29:55:24:97:96:37:40:
                    4f:b6:c6:a6:29:6c:83:eb:3d:b4:ae:43:01:91:a4:
                    7a:5d:f6:d4:4c:99:c3:47:fa:6e:94:5e:f3:9b:f7:
                    ea:21:91:9d:17:5c:64:92:6d:85:30:02:7e:ff:38:
                    1a:70:07:95:3b:37:2f:f3:63:0c:67:70:30:0e:ef:
                    3a:69:fa:65:7c:d9:4f:43:ed:82:f5:ec:35:92:cb:
                    c3:68:c9:8c:1e:49:0b:64:c8:97:c1:5f:0d:64:33:
                    80:53:14:29:2b:73:52:bb:27:47:ad:4c:98:fc:7a:
                    7c:5b:8f:cd:64:e9:71:1c:4a:f2:da:ed:dc:03:0f:
                    e9:37:40:44:a7:a5:7b:de:37:2b:f6:a4:cb:b6:0b:
                    33:19:c2:27:75:c6:1d:1d:9d:56:ec:60:41:ea:b6:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B9:74:CD:9F:ED:C8:1E:18:50:61:68:1F:52:CF:C5:86:F5:22:40
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430383a3a2f34362d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:8408::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:46:a8:ed:79:7c:ee:c4:82:c6:82:a0:c3:ef:d3:06:fe:
         1e:94:85:c9:02:9a:32:2e:f3:0f:d0:c1:77:cb:e8:19:a4:29:
         ec:76:58:f6:b6:9e:52:13:9b:12:5e:1a:cd:ad:81:68:00:14:
         8e:5a:c2:c3:63:a1:e0:66:a5:b8:9b:50:fe:0c:dd:12:cb:34:
         08:7a:4e:c6:ca:c7:15:04:1f:42:6c:20:84:4e:bd:58:93:37:
         24:38:3f:7c:ed:f2:d2:45:ef:90:42:63:35:49:e8:36:96:b7:
         8b:65:df:3b:a0:a8:40:67:69:7c:23:1d:16:23:12:12:26:8d:
         7b:58:d8:be:7c:2e:b7:70:b6:36:47:09:8a:1c:2d:ca:39:00:
         a8:4a:26:1e:a9:b1:be:72:27:2b:2b:5b:a9:28:13:bb:f1:a9:
         37:68:43:b3:bd:a0:b6:0b:b2:c4:ec:8b:54:a9:d1:8c:5b:4a:
         ef:03:8c:85:23:62:66:0a:c8:b9:18:3b:7b:b4:ff:33:3d:8b:
         e0:41:aa:d7:23:d4:5c:02:08:a4:40:62:e7:a4:90:22:d8:a6:
         af:42:93:05:63:c2:48:ee:da:9b:c1:53:d4:ad:e0:08:b8:57:
         d4:57:f5:19:3e:7e:15:0f:1e:3a:6d:36:e3:75:da:27:c7:29:
         4e:99:14:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:47 2024 by rpki-client on console-ams.rpki-client.org