Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3332203d3e203532333831.roa
File:                     323830333a6130303a3a2f33322d3332203d3e203532333831.roa (raw, json)
Hash identifier:          T3933FRX2QWrrCOnJ6PaSTiAjUuzrGIoq33LfO9lE2A=
Subject key identifier:   CA:36:7F:4F:5A:16:7C:22:B3:FC:A7:71:35:16:55:CE:C4:1F:0B:4B
Certificate issuer:       /CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
Certificate serial:       38233ADE7299FEAA4B4831C8B8DFF962B37672E2
Authority key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3332203d3e203532333831.roa
Signing time:             Thu 25 Apr 2024 12:50:00 +0000
ROA not before:           Thu 25 Apr 2024 12:45:00 +0000
ROA not after:            Thu 24 Apr 2025 12:50:00 +0000
asID:                     52381
IP address blocks:        2803:a00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:23:3a:de:72:99:fe:aa:4b:48:31:c8:b8:df:f9:62:b3:76:72:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
        Validity
            Not Before: Apr 25 12:45:00 2024 GMT
            Not After : Apr 24 12:50:00 2025 GMT
        Subject: CN=CA367F4F5A167C22B3FCA771351655CEC41F0B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:cf:a6:61:db:05:16:96:fd:c8:58:28:ae:
                    43:3c:b0:1d:38:f4:12:a7:c1:62:e3:6a:f4:b7:44:
                    3f:6c:e8:f7:66:13:1a:44:64:e4:dc:d0:17:54:1e:
                    dd:49:63:44:2a:6c:e8:89:6f:57:7c:4d:27:42:f6:
                    30:57:2e:eb:7e:96:e5:8f:f6:10:b5:4f:4c:3a:e2:
                    f5:cb:21:c5:4e:f3:38:38:f6:1b:ae:fa:c8:c8:d6:
                    9c:55:23:12:7c:6c:a1:be:ff:7a:54:e2:9f:a5:6e:
                    b5:0e:bb:68:39:0a:84:18:80:5b:63:f8:7f:43:fa:
                    5e:57:12:e3:61:3f:1f:7d:a0:57:68:5f:29:bd:67:
                    1e:8e:72:a9:3a:2d:4b:d6:9d:d0:07:0b:4a:4d:71:
                    6e:97:a8:30:0d:f9:2b:79:cf:2a:33:db:44:b4:40:
                    a8:50:1c:4b:4f:63:9f:81:f3:83:d7:c2:e5:75:7b:
                    58:4e:91:ba:e0:c5:bd:82:82:18:db:33:17:6d:fb:
                    4d:8e:c6:0f:41:d4:85:da:cb:7e:0b:c1:00:aa:9d:
                    ff:e0:69:1b:ec:38:5c:ca:9e:5d:71:54:38:c0:5b:
                    db:36:ef:67:63:b3:c1:16:c7:95:d0:84:a4:60:7e:
                    a3:c9:11:e7:7a:ff:84:5c:a2:1a:57:64:e8:71:7f:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:36:7F:4F:5A:16:7C:22:B3:FC:A7:71:35:16:55:CE:C4:1F:0B:4B
            X509v3 Authority Key Identifier:
                keyid:18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/323830333a6130303a3a2f33322d3332203d3e203532333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:f9:11:3f:a8:5e:69:10:8f:e9:8e:23:37:6b:70:60:52:
         bb:bb:16:3d:a7:14:28:02:0a:ec:58:26:9e:bb:72:f7:bd:1a:
         fc:8f:81:9a:51:3d:d6:76:c6:10:0f:75:db:c2:2e:06:4c:32:
         45:b2:cc:6d:d7:98:31:9e:f7:de:77:bb:e4:6a:cb:d2:2e:5d:
         c3:79:c8:04:c8:e8:9b:bb:34:1e:1a:69:a8:2a:db:8e:1b:22:
         73:10:ca:20:2d:b6:78:e4:2e:7c:ff:d0:e5:5f:a2:e9:b1:f9:
         72:14:c4:90:c8:36:91:cb:16:ca:15:c1:03:05:fa:52:aa:6d:
         72:e0:77:a9:32:2a:58:83:bb:28:2a:22:ca:cc:c2:ca:64:0a:
         87:1f:9c:51:28:25:8d:82:6c:01:6d:17:9c:03:79:f9:25:24:
         17:d7:6b:23:ff:37:bc:ce:20:38:4c:0f:3b:dc:ba:96:30:0a:
         63:01:81:a8:f4:92:6c:d5:37:1a:ee:c4:b6:41:8f:f5:da:bd:
         1f:a5:ff:61:1a:3d:a2:84:19:b4:ca:e7:9b:c4:67:fc:51:15:
         69:25:44:6c:02:84:42:84:2a:8c:26:0d:13:05:f3:f9:6b:05:
         c0:0a:86:2b:e5:b2:37:0e:72:a8:db:59:28:ad:4b:52:1a:d4:
         c1:e3:61:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:21 2024 by rpki-client on console-ams.rpki-client.org