Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a373030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a373030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          spcrG/w/nHLQC0RoMO1W5XSgG/L7G/K3SCaQJOQEN7c=
Subject key identifier:   60:C9:02:D6:27:CC:F6:D3:10:1B:69:BE:93:70:D0:31:53:B6:C9:D2
Certificate issuer:       /CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
Certificate serial:       7DB054846DC78026087EB50F1F14A31D21918A20
Authority key identifier: 2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a373030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Sun 31 Mar 2024 12:40:04 +0000
ROA not before:           Sun 31 Mar 2024 12:35:04 +0000
ROA not after:            Sun 30 Mar 2025 12:40:04 +0000
asID:                     269918
IP address blocks:        2803:dd80:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b0:54:84:6d:c7:80:26:08:7e:b5:0f:1f:14:a3:1d:21:91:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
        Validity
            Not Before: Mar 31 12:35:04 2024 GMT
            Not After : Mar 30 12:40:04 2025 GMT
        Subject: CN=60C902D627CCF6D3101B69BE9370D03153B6C9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:ba:b7:57:53:c5:bd:22:2e:79:38:07:8a:
                    f4:87:96:d3:71:c3:6f:82:06:b1:ee:56:e4:d9:e6:
                    3d:5d:f5:30:12:00:20:f6:3c:c9:66:5c:a6:1c:7f:
                    1d:51:fd:de:59:14:8c:ae:5a:69:d7:ca:1f:c3:6b:
                    9f:fa:72:94:42:40:27:14:37:fd:41:db:a8:90:b8:
                    c1:44:76:62:35:72:82:f8:04:b5:27:91:a1:20:f1:
                    33:3c:ec:df:6e:5a:63:9b:59:37:41:4f:af:ec:14:
                    00:fc:6f:52:68:60:00:58:db:3a:a7:0f:a4:62:be:
                    13:6d:61:f0:4d:75:ef:f6:b5:63:5e:e2:e2:e6:3f:
                    f7:35:ec:2a:63:3b:5c:87:97:7b:1b:fa:3b:4e:b3:
                    8c:d0:61:22:9a:3b:df:4b:8d:fe:6c:1a:46:5e:54:
                    ed:3c:de:75:b8:b6:12:69:56:a0:28:c7:a7:70:95:
                    b9:32:ad:7b:3d:16:74:c2:99:55:c3:c5:26:63:53:
                    1d:32:3c:b8:84:1c:eb:a2:18:5a:d3:03:3b:08:ba:
                    30:3f:8d:c8:aa:71:c2:fe:d0:df:22:b4:f5:f5:d6:
                    b5:56:c9:50:42:2a:1d:26:86:5c:af:4b:7a:2a:d8:
                    29:c2:ed:18:f0:55:9d:1c:05:6f:c9:e2:74:60:65:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C9:02:D6:27:CC:F6:D3:10:1B:69:BE:93:70:D0:31:53:B6:C9:D2
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a373030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a5:0c:1d:ef:75:4d:a9:2e:b3:2f:e4:3e:48:16:dd:46:8b:1d:
         28:6e:79:6f:9b:17:27:53:0d:b5:ec:ca:19:a2:fe:40:34:d3:
         fb:bc:2c:fe:20:af:9c:21:48:de:80:1c:88:88:7c:17:cb:83:
         40:07:f5:6c:be:26:28:d1:7f:8f:b1:86:23:cd:0d:58:10:10:
         9d:1e:35:32:73:0e:a3:6b:d7:3b:99:6c:f1:35:d3:61:77:e0:
         0f:a4:26:a3:92:21:2f:93:1a:07:38:a3:22:71:45:97:e8:fe:
         e4:8c:d8:e6:e5:b2:4d:3f:46:21:f2:15:8b:27:17:00:45:97:
         f2:f6:23:b4:8e:0c:b3:c7:be:80:36:87:6f:2d:fb:35:8b:9c:
         25:60:a1:4f:52:02:35:d3:8c:14:16:ee:bc:c5:be:c4:9d:12:
         c2:1c:4e:bc:f5:2f:c8:6e:b5:26:98:7d:79:69:0b:13:ac:b2:
         fd:bf:b8:51:64:d2:96:be:45:92:1f:71:31:68:e7:f7:f3:10:
         1b:e2:21:2b:93:0c:70:87:42:df:a9:3e:68:5a:1d:17:ff:35:
         63:7f:be:38:29:71:a3:ce:f2:75:f9:13:f2:7e:e5:75:cc:68:
         f8:d9:9c:9b:07:0b:01:58:00:75:3e:4c:ba:3a:37:6b:76:92:
         24:67:7c:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 16 01:51:44 2024 by rpki-client on console-ams.rpki-client.org