Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa
File:                     323830303a3133303a3a2f33322d3332203d3e203237383230.roa (raw, json)
Hash identifier:          5OuHN+PpYa4RlMRTNpxw1jHeFeJca9QWt3BsTk+IE4g=
Subject key identifier:   C1:E6:C1:5F:10:7B:D7:08:00:D1:FA:F2:1F:07:9D:46:AB:DD:FD:E7
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       6513D5F79BAA934E1EA552FEFBBBC451C43F0D5C
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa
Signing time:             Tue 05 Mar 2024 18:20:33 +0000
ROA not before:           Tue 05 Mar 2024 18:15:33 +0000
ROA not after:            Tue 04 Mar 2025 18:20:33 +0000
asID:                     27820
IP address blocks:        2800:130::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:13:d5:f7:9b:aa:93:4e:1e:a5:52:fe:fb:bb:c4:51:c4:3f:0d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Mar  5 18:15:33 2024 GMT
            Not After : Mar  4 18:20:33 2025 GMT
        Subject: CN=C1E6C15F107BD70800D1FAF21F079D46ABDDFDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:78:c1:a8:9c:68:9d:a7:cc:76:46:f6:b6:
                    ca:ba:cc:02:aa:27:ca:bf:b3:0b:16:28:c7:88:3a:
                    37:dd:2b:43:e1:0a:34:db:50:59:5a:a7:8e:45:a2:
                    43:7b:86:b7:7d:c4:3f:07:02:d6:37:1d:6c:39:57:
                    6b:13:23:30:2a:bb:23:2b:46:d3:b4:47:06:ad:49:
                    6e:50:3e:21:0b:61:f0:e3:a7:5e:c4:e8:26:91:db:
                    d2:4e:8d:f1:e0:9b:aa:b8:3a:6a:a8:f2:a9:e1:d1:
                    49:df:c7:65:4f:9b:3f:f9:49:6b:9d:58:3d:98:b9:
                    c0:b9:3d:0a:80:e1:9d:25:03:4e:11:ce:c8:90:19:
                    e3:ae:13:98:d4:11:32:6c:b6:12:f8:33:89:3d:c8:
                    92:90:69:b4:4e:5c:5e:bd:51:53:96:9f:3c:8b:61:
                    b7:eb:1a:41:ab:a7:4a:ff:38:7f:72:91:fc:f0:77:
                    fd:d3:7a:99:ff:eb:68:3c:6e:a3:c5:4e:10:28:33:
                    49:32:3d:d5:81:e8:a5:c6:4e:1b:f3:20:52:08:f6:
                    b0:ab:4a:2e:67:23:6b:79:8f:23:fa:ed:80:2c:17:
                    0c:fb:a9:65:ee:20:7f:cd:55:6f:88:7c:41:f7:41:
                    43:34:bf:2f:b9:07:e1:9c:1d:3e:c5:06:ba:84:d5:
                    8f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E6:C1:5F:10:7B:D7:08:00:D1:FA:F2:1F:07:9D:46:AB:DD:FD:E7
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/323830303a3133303a3a2f33322d3332203d3e203237383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:130::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:5e:9e:15:ad:df:26:8d:b4:49:65:5b:eb:d1:89:67:20:b3:
         23:2c:67:32:89:6f:67:2f:c5:29:4d:e2:cd:b7:14:eb:7e:bd:
         44:fc:3f:40:17:21:c8:a5:b0:51:ec:0d:20:47:2e:04:86:95:
         a3:77:90:af:cb:6e:0d:43:87:d5:87:71:ac:ef:8a:4c:5e:ae:
         8e:11:f8:3b:88:6e:c5:52:ce:eb:64:98:85:c1:89:72:31:39:
         9b:8d:d9:35:d8:cd:c5:e9:b7:3b:51:2f:a1:c8:1b:70:b4:0c:
         5f:a8:be:1f:c0:5f:01:8e:78:fe:10:7f:92:5e:98:3b:a0:e3:
         3d:b1:cf:7b:ea:21:90:1e:de:db:e9:37:4a:26:bf:63:c4:1e:
         69:77:53:63:33:a7:3a:93:4b:a8:52:89:9e:c3:9d:22:42:f9:
         b1:89:47:35:77:ee:f6:68:a8:cc:dd:f2:fe:8f:a1:6b:47:1e:
         bb:85:9c:6e:7f:25:f6:6b:00:d0:68:e6:0a:9d:88:d8:6f:d4:
         1a:eb:12:55:46:b0:5e:8e:30:34:42:24:96:5c:c4:3c:9e:37:
         63:31:8c:99:c2:2b:c1:29:9d:58:b1:4b:97:96:77:40:0a:45:
         fc:06:e0:05:5d:fa:53:7c:2b:94:c8:88:04:b2:5e:6a:7b:ce:
         bb:2f:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:09 2024 by rpki-client on console-ams.rpki-client.org