Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/323830333a663261303a3a2f33322d3634203d3e20323636383633.roa
File:                     323830333a663261303a3a2f33322d3634203d3e20323636383633.roa (raw, json)
Hash identifier:          +Vv9CN7G+lfhF+S4o5uzrOQL7uA87BzSG+EYo3djsRE=
Subject key identifier:   F1:AD:80:90:A9:6E:E1:10:EC:02:74:41:94:3F:A4:72:D1:A5:F1:62
Certificate issuer:       /CN=DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07
Certificate serial:       7D7D65665D94298723CB68984148ED381A501153
Authority key identifier: DF:7C:CE:89:EE:1A:19:AE:75:BC:29:23:6E:F6:D7:40:9E:BD:4D:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/323830333a663261303a3a2f33322d3634203d3e20323636383633.roa
Signing time:             Tue 05 Mar 2024 17:51:50 +0000
ROA not before:           Tue 05 Mar 2024 17:46:50 +0000
ROA not after:            Tue 04 Mar 2025 17:51:50 +0000
asID:                     266863
IP address blocks:        2803:f2a0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7d:65:66:5d:94:29:87:23:cb:68:98:41:48:ed:38:1a:50:11:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07
        Validity
            Not Before: Mar  5 17:46:50 2024 GMT
            Not After : Mar  4 17:51:50 2025 GMT
        Subject: CN=F1AD8090A96EE110EC027441943FA472D1A5F162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:f3:14:2c:32:5d:0a:60:10:44:45:9f:c1:
                    17:45:19:20:0c:d7:ed:b5:29:bf:b9:d9:78:44:d1:
                    3a:bf:1e:67:c3:9b:a9:b8:0c:94:4a:f6:bc:fa:63:
                    19:f9:a8:4b:e8:0b:be:01:e8:c9:78:c6:35:e8:58:
                    f7:53:28:42:69:27:29:88:65:5c:63:f8:de:7d:b7:
                    c8:a1:8d:ea:2b:f7:d5:c8:da:86:e5:1a:7e:2b:4a:
                    99:67:10:d6:43:c0:56:88:3d:a3:d8:c8:bb:39:3a:
                    65:8f:5e:59:82:c8:df:3e:13:f3:af:e7:05:6a:e3:
                    ae:b8:8e:89:7d:fa:1b:a2:4c:07:cf:36:56:d2:b7:
                    26:b0:76:d2:22:2b:30:a5:ba:1b:e1:e5:fe:03:6c:
                    53:e1:d0:17:76:36:59:e4:40:a7:fc:79:03:60:19:
                    5f:f3:dd:8b:c4:4e:a5:c9:95:02:6c:c7:33:fc:d9:
                    59:ac:84:f3:bb:f8:be:ac:2a:f5:25:d4:c9:64:41:
                    66:a3:5b:ab:0b:2c:e8:4f:52:0c:22:a1:b1:3f:8a:
                    57:ed:44:f0:73:a0:aa:11:e3:e5:e9:d5:06:0e:38:
                    18:f5:ce:7c:15:22:fa:cb:69:a0:80:09:d7:12:b2:
                    24:56:33:e1:4c:8b:16:4e:cb:69:fd:1d:c0:21:c2:
                    b0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AD:80:90:A9:6E:E1:10:EC:02:74:41:94:3F:A4:72:D1:A5:F1:62
            X509v3 Authority Key Identifier:
                keyid:DF:7C:CE:89:EE:1A:19:AE:75:BC:29:23:6E:F6:D7:40:9E:BD:4D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/323830333a663261303a3a2f33322d3634203d3e20323636383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:f6:da:52:71:9c:25:e1:28:75:08:1b:5e:ed:cf:5f:a6:94:
         28:2b:d5:95:5b:9f:39:fa:eb:f5:bb:91:0f:fe:0b:75:b4:f9:
         10:fe:0d:53:01:3f:72:21:ee:d9:5e:d7:62:42:06:fb:58:42:
         85:41:6b:bc:82:47:3a:17:a4:50:de:b6:f3:58:4c:22:9d:ff:
         0f:be:0e:35:fc:99:d3:64:e6:43:fa:8e:13:d1:ca:59:4c:a5:
         a3:36:56:43:e3:51:b7:44:59:f2:04:b4:ca:14:a3:28:fd:92:
         b3:01:e2:2f:d8:82:f0:9d:a9:4d:f2:62:01:6b:42:ee:a9:fb:
         68:54:a6:4b:e6:65:cb:22:45:83:65:6c:67:80:d6:ed:56:5f:
         f7:53:2c:39:df:ff:5a:d5:c9:bd:8a:27:b1:1a:b3:63:5b:e0:
         1a:30:af:4b:1c:18:39:cc:06:d0:0e:17:0d:0d:5f:70:83:35:
         e6:a7:af:0d:86:5b:b8:a8:ed:5e:2a:7e:1c:88:2d:67:25:32:
         74:b4:1a:f6:f3:c6:d0:9c:79:30:e7:f6:79:76:7c:31:f3:bd:
         92:1c:89:fe:94:50:a5:1c:e4:e4:b0:72:a0:49:a7:61:e7:f7:
         8f:3a:ca:0b:44:91:83:56:b8:5f:ff:02:34:b2:be:fb:dd:7d:
         26:89:1f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 13:23:29 2024 by rpki-client on console-fra.rpki-client.org