Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/323830333a6536303a3a2f33322d3334203d3e20323637393133.roa
File:                     323830333a6536303a3a2f33322d3334203d3e20323637393133.roa (raw, json)
Hash identifier:          fkONi8r4oi0aZNV/q4otCv/D2lSoU0doB/VUX8WXCSU=
Subject key identifier:   CD:33:DE:3C:FE:B7:C6:33:3C:BC:72:05:9E:FF:62:AF:FF:E0:D2:D9
Certificate issuer:       /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
Certificate serial:       597D45CE7C4853D72031DE1822A34D9C45EE0C35
Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/323830333a6536303a3a2f33322d3334203d3e20323637393133.roa
Signing time:             Tue 05 Mar 2024 17:59:40 +0000
ROA not before:           Tue 05 Mar 2024 17:54:40 +0000
ROA not after:            Tue 04 Mar 2025 17:59:40 +0000
asID:                     267913
IP address blocks:        2803:e60::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7d:45:ce:7c:48:53:d7:20:31:de:18:22:a3:4d:9c:45:ee:0c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
        Validity
            Not Before: Mar  5 17:54:40 2024 GMT
            Not After : Mar  4 17:59:40 2025 GMT
        Subject: CN=CD33DE3CFEB7C6333CBC72059EFF62AFFFE0D2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:e7:c4:ae:9b:f5:25:b7:3c:d6:c9:2e:34:
                    13:15:16:0b:18:4e:0f:35:1f:84:37:d7:e3:b5:2e:
                    9d:76:5b:3a:c6:26:50:db:95:80:8e:60:30:5c:9e:
                    a2:cd:1d:4c:4d:f2:c1:30:ef:60:48:9a:e1:c5:e9:
                    3a:62:29:ae:f3:a9:be:6e:c5:1e:7b:15:f0:3b:1d:
                    f1:3f:5f:c4:6d:3f:cc:3e:4e:48:1a:74:6c:e0:7e:
                    9a:1e:8a:40:6e:ff:f6:3e:ae:a8:b8:bf:9e:0b:9b:
                    be:ad:58:4b:2b:f5:50:8d:75:e2:4e:6d:a5:75:96:
                    ed:80:81:22:7a:f8:cd:4b:3e:85:d1:8f:82:00:73:
                    47:02:eb:2f:8c:4e:06:30:1b:49:6d:d0:d3:8e:9c:
                    fc:c9:73:27:dd:c1:32:22:96:2e:56:65:b8:81:2b:
                    be:00:6d:9d:32:e1:51:df:53:93:72:ab:07:fd:99:
                    5f:c5:8a:68:34:6b:01:a8:5d:3c:23:90:48:01:27:
                    8b:c4:d3:d1:f9:b1:08:46:3d:a3:b9:34:f5:5e:1b:
                    45:db:e5:5d:cb:80:20:99:86:48:b0:5f:da:4e:9a:
                    55:72:a3:04:69:2d:dc:b4:b1:6d:aa:3e:5d:f7:64:
                    30:0f:d4:80:b2:82:e9:e6:73:5d:5d:73:21:79:30:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:33:DE:3C:FE:B7:C6:33:3C:BC:72:05:9E:FF:62:AF:FF:E0:D2:D9
            X509v3 Authority Key Identifier:
                keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/323830333a6536303a3a2f33322d3334203d3e20323637393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:47:8b:58:61:0d:65:d3:7b:c1:07:12:12:13:d9:6e:ce:09:
         6e:3f:91:7a:77:d1:a2:6c:0a:6b:f1:9f:64:68:7b:d3:69:99:
         cb:96:58:5a:74:b9:6b:62:e9:9c:dd:1b:82:6a:70:67:8a:7a:
         15:e7:20:b4:00:89:bc:66:70:61:77:00:db:5c:fd:b7:49:54:
         9f:bd:07:03:a7:9c:d6:96:08:fa:c3:60:83:85:f4:79:a0:ec:
         ec:0f:ad:31:95:9a:12:04:36:0e:66:4c:87:f5:ee:c7:ee:cd:
         06:15:86:4d:dd:48:a7:e9:f7:10:ab:55:90:4b:c0:d2:6d:62:
         15:46:69:e4:46:4d:2c:9c:c6:7b:48:de:b9:99:d8:f6:58:65:
         75:4b:2f:d3:31:7f:ce:11:e9:31:6f:df:89:d4:5f:1c:70:f2:
         97:eb:b6:90:6f:7e:26:6e:de:17:d9:d2:33:78:a7:22:4d:38:
         16:a2:79:2e:82:63:50:63:92:dc:78:b7:3a:78:23:40:1d:68:
         04:81:72:f3:76:9c:71:9f:0a:59:0a:f4:ef:d5:bd:f6:79:c1:
         90:25:a8:48:da:e7:ff:22:69:7c:9c:91:4f:7a:70:3d:d6:a3:
         44:73:16:9f:f5:79:74:e9:b5:c4:40:23:c7:26:1a:c3:40:b9:
         c1:aa:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:03:48 2024 by rpki-client on console-ams.rpki-client.org