Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/323830333a633036303a3a2f33322d3332203d3e203631343531.roa
File:                     323830333a633036303a3a2f33322d3332203d3e203631343531.roa (raw, json)
Hash identifier:          +BSxmyd4wr8AfwYt+Q6HZH0wZwqpksTAdWK1V2K/QNQ=
Subject key identifier:   CF:DD:4B:3C:A1:1C:99:31:96:BE:3F:41:08:47:49:81:D5:41:2F:F4
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       0B7DA54FA10F4847BC88040CB06AC201859BCA7D
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/323830333a633036303a3a2f33322d3332203d3e203631343531.roa
Signing time:             Tue 05 Mar 2024 18:21:26 +0000
ROA not before:           Tue 05 Mar 2024 18:16:26 +0000
ROA not after:            Tue 04 Mar 2025 18:21:26 +0000
asID:                     61451
IP address blocks:        2803:c060::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7d:a5:4f:a1:0f:48:47:bc:88:04:0c:b0:6a:c2:01:85:9b:ca:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Mar  5 18:16:26 2024 GMT
            Not After : Mar  4 18:21:26 2025 GMT
        Subject: CN=CFDD4B3CA11C993196BE3F4108474981D5412FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:aa:e1:e9:cb:74:3d:d6:dc:0a:1a:82:2d:fa:
                    01:32:74:15:9b:7d:c6:06:69:73:fb:be:84:37:6c:
                    d0:81:22:96:82:3a:ea:93:0c:d4:5d:d3:36:1e:59:
                    80:f2:f0:53:52:13:21:44:51:d7:bf:21:04:db:08:
                    a5:13:d8:04:c8:70:7e:cf:80:16:f7:d0:f2:db:ca:
                    53:53:43:dd:af:1a:5f:75:04:62:33:69:9e:91:9b:
                    ef:ff:80:09:7c:3a:06:50:62:20:24:0f:65:15:f6:
                    91:c5:cb:21:e9:55:d2:96:48:57:6f:2e:42:3f:81:
                    24:cf:31:a6:6f:ff:96:05:24:a6:5e:c6:be:74:65:
                    05:9e:01:4a:35:ed:8c:c9:fc:e8:92:f2:99:db:74:
                    78:10:57:05:56:1d:29:37:26:35:31:d9:ef:fb:e0:
                    b7:9f:21:ba:ea:be:33:a4:1e:d3:db:61:85:7c:d7:
                    e4:18:e2:06:6c:c7:88:2d:b1:e8:f4:25:f4:c7:8f:
                    20:54:f9:25:91:b2:2f:9e:88:a8:b7:bc:c8:3c:2b:
                    e2:32:1c:ea:70:bf:c1:6b:e1:86:1a:e6:6c:a1:fe:
                    09:e9:4b:da:10:20:39:d3:ec:2d:ab:a3:b5:b5:85:
                    c2:d9:b3:e4:7d:8f:38:80:d6:9e:b5:5c:49:08:11:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DD:4B:3C:A1:1C:99:31:96:BE:3F:41:08:47:49:81:D5:41:2F:F4
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/323830333a633036303a3a2f33322d3332203d3e203631343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c060::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:61:2a:39:d0:db:b4:68:11:55:70:9b:f3:1d:f4:5c:1c:3b:
         44:b7:1f:45:10:4f:60:77:e0:2b:fb:74:3a:0e:93:9f:1b:85:
         e7:fe:13:67:6f:1b:17:d2:26:5b:f8:bb:17:3a:a5:41:6d:4a:
         b1:94:78:80:00:4b:50:40:73:85:59:e8:18:f3:6f:9c:64:d2:
         74:2a:30:a7:38:27:73:9f:bf:68:11:08:00:f6:4c:d1:bb:da:
         3d:9b:a3:e2:a6:a8:0b:30:b0:db:a3:60:2d:67:30:39:ae:7c:
         e4:24:6e:4f:40:57:20:fa:71:00:32:22:8a:be:cb:34:1c:b4:
         00:47:c9:03:df:05:89:e0:75:34:31:34:bd:65:14:39:31:f8:
         73:eb:85:79:bb:61:3d:73:94:45:62:94:77:77:9e:ba:dd:a0:
         5f:c5:3f:b2:cf:31:01:be:15:e3:68:69:81:0d:3e:a0:4f:cb:
         56:21:3f:e1:25:82:4a:1f:67:04:53:12:79:47:56:ab:98:32:
         6f:9f:51:41:4b:1d:44:12:74:c0:a1:7b:3d:be:42:1e:14:66:
         8f:3d:07:4f:c6:9c:08:d2:1c:60:7d:ec:42:c4:19:92:c7:d5:
         21:f1:c0:21:e4:d7:79:0a:69:21:fa:68:36:dd:43:1d:2a:68:
         f6:32:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:16 2024 by rpki-client on console-fra.rpki-client.org