Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/323830333a383865303a3a2f33322d3438203d3e20323639383638.roa
File:                     323830333a383865303a3a2f33322d3438203d3e20323639383638.roa (raw, json)
Hash identifier:          LH+hbtNzXj+4i79SJxBiUIFUDNyxjLK1mgSL+zSsz4w=
Subject key identifier:   22:4B:39:BB:DC:AA:F0:3F:1F:79:7B:88:4F:15:67:1D:08:BC:37:65
Certificate issuer:       /CN=420CEF0BDB83EC830BEBC18D4ED591A33C49328B
Certificate serial:       3AB08556D6C8222599356BA48A22F5039CA1C694
Authority key identifier: 42:0C:EF:0B:DB:83:EC:83:0B:EB:C1:8D:4E:D5:91:A3:3C:49:32:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/323830333a383865303a3a2f33322d3438203d3e20323639383638.roa
Signing time:             Tue 05 Mar 2024 18:05:12 +0000
ROA not before:           Tue 05 Mar 2024 18:00:12 +0000
ROA not after:            Tue 04 Mar 2025 18:05:12 +0000
asID:                     269868
IP address blocks:        2803:88e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b0:85:56:d6:c8:22:25:99:35:6b:a4:8a:22:f5:03:9c:a1:c6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420CEF0BDB83EC830BEBC18D4ED591A33C49328B
        Validity
            Not Before: Mar  5 18:00:12 2024 GMT
            Not After : Mar  4 18:05:12 2025 GMT
        Subject: CN=224B39BBDCAAF03F1F797B884F15671D08BC3765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:b7:07:5f:23:9f:72:f4:4e:01:0b:78:db:
                    a6:23:65:bf:7f:61:64:c2:f6:54:42:f0:24:b4:90:
                    89:70:cd:c8:94:37:1b:d5:da:10:12:2e:ab:6e:69:
                    89:16:a5:a6:0f:97:6c:32:b1:f0:9e:a1:cb:cc:0f:
                    7c:83:0e:f7:ce:9e:7a:43:65:fc:72:a5:3c:c5:a9:
                    1b:9a:0b:4e:f0:cb:c1:55:35:2d:11:10:99:9e:1b:
                    c3:1f:78:44:95:24:f9:65:1c:c4:18:7e:bb:ed:f7:
                    c2:1e:74:b3:40:4f:2c:be:23:14:89:dc:a5:dc:f1:
                    26:7a:fb:19:6f:a6:26:09:f4:23:71:b9:43:2e:55:
                    55:d8:18:10:0c:3c:81:93:c7:da:a6:bb:16:a0:7e:
                    08:51:96:92:91:67:27:f6:4c:4d:5c:76:b0:d0:4e:
                    ae:55:07:87:7e:14:52:04:a8:ae:ea:64:fe:0f:88:
                    31:46:0e:de:47:24:28:3f:ff:ee:03:ca:37:ee:68:
                    0c:54:45:f4:93:3c:ef:43:fb:26:43:b9:84:d4:26:
                    f2:00:75:b2:a7:65:ad:a1:27:15:c1:1c:ce:d3:ed:
                    49:5d:08:48:ff:98:de:2f:b4:ea:dd:67:87:10:13:
                    d0:4e:9d:76:98:72:cf:cf:3e:55:4d:9d:5e:24:a2:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4B:39:BB:DC:AA:F0:3F:1F:79:7B:88:4F:15:67:1D:08:BC:37:65
            X509v3 Authority Key Identifier:
                keyid:42:0C:EF:0B:DB:83:EC:83:0B:EB:C1:8D:4E:D5:91:A3:3C:49:32:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420CEF0BDB83EC830BEBC18D4ED591A33C49328B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F61E38A991B14B56D617E2C3467510CC9BBFF14C4654079C3FBFEC8C55F4902C/0/323830333a383865303a3a2f33322d3438203d3e20323639383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:88e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:8c:bc:4f:c0:9f:94:73:d2:ff:2c:38:b1:43:ef:64:7b:
         31:2b:b2:bf:d7:00:88:81:47:06:9d:83:1d:14:ac:b6:b0:24:
         be:16:cb:b0:4b:0d:fc:6c:14:22:a7:8e:72:b2:5e:c6:5e:fc:
         a2:15:1a:f4:a6:b9:ef:42:4b:fc:bb:20:0f:ab:6d:bc:d2:b0:
         a4:ec:e8:ef:82:1b:2e:b4:26:50:0d:5a:46:18:29:af:80:cb:
         60:cb:25:06:53:0a:6d:ef:06:fb:7a:b7:b5:4c:e0:3f:68:6d:
         8a:53:8d:bc:fb:8d:a3:95:11:2f:8a:db:d4:bb:57:fe:03:de:
         00:34:85:d5:81:65:1b:a4:01:e4:46:fe:d9:03:6a:e1:c7:18:
         34:70:0d:00:5d:b0:c1:29:2a:df:2b:66:a7:67:a7:69:2e:55:
         ae:56:99:9d:12:f3:6c:7e:bd:92:5d:13:42:49:28:56:2b:01:
         08:64:16:bb:c8:e9:11:c4:57:e7:a3:68:00:1e:70:d7:5f:b9:
         20:53:04:b7:5f:69:21:a5:dd:fd:15:ae:04:ed:b2:69:0e:3c:
         ec:1b:61:04:c4:c6:cf:d0:dc:52:f6:9e:ab:ab:7b:ca:d1:84:
         47:59:fc:4b:07:20:40:f1:34:68:39:e7:ef:40:0f:93:48:41:
         73:4c:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:46:40 2024 by rpki-client on console-ams.rpki-client.org