Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/323830333a333632303a3a2f33322d3332203d3e20323635383637.roa
File:                     323830333a333632303a3a2f33322d3332203d3e20323635383637.roa (raw, json)
Hash identifier:          61YebFIWg43pFybK3ZA95hsqigQahmTkOpfDf/dRgLg=
Subject key identifier:   2B:0A:1D:E5:07:3B:BC:FF:41:2F:5A:96:37:3F:7B:1D:5F:9D:7E:32
Certificate issuer:       /CN=1B90866BEA758352E83C87E07C1DEBF22ABF00AA
Certificate serial:       3D4D3C5FB24C5ACBE6E255EE67B271322F55D8F0
Authority key identifier: 1B:90:86:6B:EA:75:83:52:E8:3C:87:E0:7C:1D:EB:F2:2A:BF:00:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/323830333a333632303a3a2f33322d3332203d3e20323635383637.roa
Signing time:             Tue 05 Mar 2024 17:57:55 +0000
ROA not before:           Tue 05 Mar 2024 17:52:55 +0000
ROA not after:            Tue 04 Mar 2025 17:57:55 +0000
asID:                     265867
IP address blocks:        2803:3620::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4d:3c:5f:b2:4c:5a:cb:e6:e2:55:ee:67:b2:71:32:2f:55:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B90866BEA758352E83C87E07C1DEBF22ABF00AA
        Validity
            Not Before: Mar  5 17:52:55 2024 GMT
            Not After : Mar  4 17:57:55 2025 GMT
        Subject: CN=2B0A1DE5073BBCFF412F5A96373F7B1D5F9D7E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:37:e7:bb:9c:4a:ba:11:7a:47:2e:a7:20:
                    45:48:8d:8e:81:b7:7f:c3:cf:a0:98:c6:00:87:a9:
                    ba:b3:00:aa:94:b6:1f:90:f2:b6:91:c0:97:dd:20:
                    e1:00:a4:13:92:ea:76:25:9f:6a:cf:ee:76:0c:63:
                    4c:e4:89:f3:53:37:f2:a7:69:44:f1:4d:0a:34:61:
                    e1:b8:25:3d:fd:c9:2f:49:0a:ec:c1:f6:b7:57:d4:
                    78:9d:51:38:3d:33:a9:e3:52:ce:d5:37:ef:ca:a1:
                    cf:51:d2:a2:a2:78:b8:3e:fd:18:e2:d0:84:24:38:
                    67:30:3c:a9:1a:93:77:c8:e3:62:ee:60:d0:97:ca:
                    d4:38:a2:40:b6:aa:ae:b3:a4:24:0c:ef:2d:8f:ab:
                    80:45:c6:79:f1:ab:41:c2:bf:ca:1c:bf:77:32:b7:
                    f9:28:46:df:3c:d6:f3:51:83:23:b4:d3:37:8b:a7:
                    df:c0:98:b2:e2:08:82:f1:52:93:ed:f4:25:8e:7e:
                    03:78:23:4b:32:67:28:91:7a:35:aa:04:33:6a:be:
                    fe:96:42:f9:a1:e7:c3:a6:7e:32:b6:1f:97:17:8e:
                    fd:4e:27:de:c2:4f:3b:79:c5:f6:03:3b:1a:11:fc:
                    19:5a:7a:b3:65:45:c9:99:ea:33:78:6f:19:1c:d4:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0A:1D:E5:07:3B:BC:FF:41:2F:5A:96:37:3F:7B:1D:5F:9D:7E:32
            X509v3 Authority Key Identifier:
                keyid:1B:90:86:6B:EA:75:83:52:E8:3C:87:E0:7C:1D:EB:F2:2A:BF:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/323830333a333632303a3a2f33322d3332203d3e20323635383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3620::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:26:8d:88:e9:c2:4e:95:36:0c:16:54:e2:a1:d7:19:8a:
         83:8b:b6:4b:0c:9d:e5:4e:41:70:d1:54:8c:ee:6e:6e:85:bb:
         0c:29:c7:7e:d2:7e:ef:0e:63:6d:23:da:7b:58:4b:38:22:00:
         2f:e5:64:73:39:3a:42:3c:0b:ae:00:35:15:0e:63:32:9a:b2:
         38:36:94:9e:ff:13:1e:5f:3a:86:53:79:38:36:42:aa:9b:f5:
         10:67:c9:11:2e:06:dd:67:ad:7d:97:3c:56:0f:82:ac:50:9e:
         a8:f2:a7:17:66:01:a1:44:8a:48:81:bf:e0:c4:b2:0e:d4:20:
         92:b0:c3:58:00:ad:99:a8:84:78:37:13:64:4a:31:b5:67:76:
         d6:3d:cb:a9:00:1a:5f:11:c2:05:c7:db:8f:a9:91:fb:3a:e9:
         f1:29:e8:8a:2b:ab:77:08:91:c1:b4:05:aa:e8:44:82:3d:78:
         55:50:0f:94:60:96:b4:9a:fa:40:47:1f:62:f2:42:94:ee:59:
         90:4f:24:49:11:e0:23:3f:0b:ed:af:8d:89:ba:b2:12:f0:d2:
         f7:3a:d2:9a:df:d3:2e:93:fe:01:e7:61:4a:8e:9d:e6:1d:8b:
         c1:fe:59:78:66:2f:16:2e:97:8e:db:29:7a:8d:9d:f7:81:85:
         f1:23:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 21:16:52 2024 by rpki-client on console-ams.rpki-client.org