Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323032.roa
File:                     323030313a313333303a3a2f32392d3634203d3e20323032.roa (raw, json)
Hash identifier:          jzpZS7UoxrIwz2jWWfLaC+UHzAA4Njs571P3FqIQRfA=
Subject key identifier:   6B:75:53:64:47:F2:C8:74:06:F9:46:72:92:CC:9A:99:0B:4A:B0:46
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       61B842517BEF54273903B9F83CFA20E29F0AE636
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 18:02:40 +0000
ROA not before:           Tue 05 Mar 2024 17:57:40 +0000
ROA not after:            Tue 04 Mar 2025 18:02:40 +0000
asID:                     202
IP address blocks:        2001:1330::/29 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b8:42:51:7b:ef:54:27:39:03:b9:f8:3c:fa:20:e2:9f:0a:e6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:40 2024 GMT
            Not After : Mar  4 18:02:40 2025 GMT
        Subject: CN=6B75536447F2C87406F9467292CC9A990B4AB046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:10:c5:be:b6:f5:82:9e:25:46:93:d1:47:
                    61:0e:c3:f2:4d:ee:1b:01:39:04:ac:4f:7d:bd:ef:
                    3b:7a:ec:48:61:f8:86:e4:e7:32:98:af:c7:42:45:
                    2d:72:94:61:33:50:e3:dc:da:78:33:a8:32:9e:3c:
                    b6:31:c1:ea:12:a3:a4:8e:ba:ea:73:bf:a7:6b:24:
                    6c:ed:05:95:29:3c:1e:49:3e:e5:8a:fc:a8:ca:a9:
                    57:d4:18:3b:c8:45:31:e4:e6:1d:ba:6d:d4:26:82:
                    64:46:a6:ce:fa:13:e9:6f:8d:56:11:b6:77:06:f4:
                    a2:79:49:01:5e:ed:4a:45:9b:eb:83:7a:0f:03:00:
                    2c:17:3c:2b:8b:f7:c4:6d:22:12:89:d0:ba:e2:7e:
                    41:b1:00:c0:f8:de:c3:00:18:67:2f:6e:84:d9:43:
                    3d:4d:f1:90:e3:9b:21:be:85:a7:2d:0c:c4:0e:cb:
                    9f:da:68:35:1d:49:92:c6:ef:9f:05:1a:29:a0:65:
                    54:6d:73:9c:74:86:fb:00:cd:8d:6f:2d:6f:46:da:
                    41:cc:11:5f:45:4c:6f:7a:8a:43:d1:e6:75:41:06:
                    00:db:d7:c9:ea:cb:10:50:51:1a:e4:ec:9b:de:3b:
                    ce:15:39:ae:db:68:8d:1b:5c:ce:e3:29:6e:8c:ff:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:75:53:64:47:F2:C8:74:06:F9:46:72:92:CC:9A:99:0B:4A:B0:46
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1330::/29

    Signature Algorithm: sha256WithRSAEncryption
         66:12:b3:f9:f1:cd:ad:50:1d:ec:d8:06:12:4f:06:54:be:e3:
         a3:46:b9:22:04:6e:98:2d:08:72:0d:23:5b:a0:53:6a:4c:b2:
         17:4a:a6:ab:e1:06:13:25:fe:35:7e:c1:1a:23:cd:fb:93:a2:
         18:92:40:76:bd:2a:65:4e:30:f6:5b:bb:0e:df:cb:a7:97:86:
         14:dd:79:38:39:fb:b3:f1:7d:f4:8e:93:0b:c7:44:5c:72:1f:
         92:fb:0b:e0:a5:f9:62:1f:34:b2:75:8d:ac:5b:3b:d2:85:39:
         bb:81:ea:bd:af:a7:4e:03:ed:ce:91:78:c7:93:41:a6:1c:aa:
         03:62:c6:94:f2:b7:e2:9e:79:7e:61:e8:82:b6:0f:ee:ad:90:
         e1:06:b6:c1:fc:e9:eb:f1:da:0d:04:46:da:74:d5:e1:fb:a3:
         4d:fa:55:f5:c9:25:39:15:6c:ea:99:eb:91:cd:c8:44:f0:b6:
         bf:b2:f3:f3:0a:db:60:b7:c0:fc:44:55:97:cf:93:2b:de:2c:
         9e:70:62:4a:b1:25:b1:65:84:bb:cd:4f:70:df:40:d7:45:58:
         96:88:ff:f9:ad:8b:b8:ec:65:b8:a1:12:78:ac:fe:7d:60:5d:
         a2:b4:1b:91:93:8f:d9:e1:79:db:8e:5d:af:4f:86:e4:15:81:
         a1:62:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org