Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3131393a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          nyqT9QgYqbgsu6wjRySdhQZ3i8WcS94RYK8UxHXYo5E=
Subject key identifier:   6F:C5:AD:F5:35:66:EC:16:DF:8A:47:3F:CC:2E:7F:EB:9E:9F:26:4D
Certificate issuer:       /CN=02F630ED71E30A0228F714DB90E8B714460D868C
Certificate serial:       61B76652F64CF0757EE1EEC9A5996CB55908D1A9
Authority key identifier: 02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 17:41:40 +0000
ROA not before:           Tue 05 Mar 2024 17:36:40 +0000
ROA not after:            Tue 04 Mar 2025 17:41:40 +0000
asID:                     14080
IP address blocks:        2801:119::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b7:66:52:f6:4c:f0:75:7e:e1:ee:c9:a5:99:6c:b5:59:08:d1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F630ED71E30A0228F714DB90E8B714460D868C
        Validity
            Not Before: Mar  5 17:36:40 2024 GMT
            Not After : Mar  4 17:41:40 2025 GMT
        Subject: CN=6FC5ADF53566EC16DF8A473FCC2E7FEB9E9F264D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:a3:ca:a8:88:de:6e:62:b4:4d:79:4d:1f:
                    13:16:ab:ea:31:3c:cc:a6:36:de:ba:9b:92:b6:ae:
                    7d:da:ac:b1:50:ab:8b:b8:f8:4c:bb:ec:fa:10:5b:
                    aa:66:bb:5e:2b:d0:48:a7:cb:70:56:93:74:95:b8:
                    6d:1f:1f:5b:2f:36:42:dc:ff:20:0c:80:21:cd:1e:
                    20:a0:72:d4:40:4b:a6:94:e7:9b:98:39:98:b4:1f:
                    40:0c:c2:0b:cb:5c:72:a6:44:76:74:1a:46:b2:f2:
                    9e:e6:2c:e0:56:a9:0b:58:aa:23:49:22:3a:41:33:
                    5c:bf:ce:15:a6:a6:82:a1:99:3e:8a:8d:8f:fa:ed:
                    2a:aa:68:f3:0c:f5:dc:0c:b6:f1:e8:1a:30:3e:10:
                    ba:bc:54:3e:96:36:dd:f5:b3:6a:3c:3d:75:57:20:
                    e9:45:c7:a9:aa:c6:85:78:1c:16:a2:60:3b:2d:cc:
                    19:46:e3:c4:7b:d5:7f:ac:43:35:c6:44:15:e6:60:
                    3d:33:6b:08:39:ad:fe:21:72:1c:b0:a7:b1:59:47:
                    7e:39:f2:72:c2:3a:b3:d2:8b:c5:31:bb:15:a1:58:
                    29:ac:cd:6c:2f:3f:93:51:fa:c6:51:1c:4e:14:bb:
                    3d:a6:18:62:2a:e6:70:cd:65:16:e5:68:ac:35:ad:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:AD:F5:35:66:EC:16:DF:8A:47:3F:CC:2E:7F:EB:9E:9F:26:4D
            X509v3 Authority Key Identifier:
                keyid:02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:119::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:7e:d9:e5:53:ab:c7:b8:66:e5:de:83:07:c4:51:51:a3:
         fa:b5:d0:e0:22:9e:98:eb:93:f6:6a:ae:c3:5d:cb:ee:6d:a5:
         39:7c:ab:4c:5e:9a:27:3b:81:13:2e:78:64:5b:f9:61:2b:6c:
         9b:a9:a2:02:1e:35:31:ca:96:60:41:4f:06:69:b9:67:5c:c7:
         b6:29:78:b3:08:74:d0:f2:41:15:ff:41:53:99:aa:4c:35:ec:
         73:78:de:70:1d:d5:be:a4:0f:27:49:bd:5b:d7:a8:ca:d7:09:
         15:5f:37:ad:7a:71:c0:35:bc:42:56:15:a4:af:e0:7c:98:f2:
         67:b6:d0:bb:8d:d1:ec:59:1c:21:02:ac:68:16:73:09:70:bb:
         b4:d6:ae:df:ed:f2:5a:7f:6b:bf:15:0a:de:3e:0f:1b:ef:23:
         a4:dc:ad:c8:d2:ab:7b:5d:bb:54:ef:32:13:55:1b:da:05:a7:
         bb:05:48:b6:2b:ad:29:a5:c0:23:84:4e:2f:5f:e1:b9:6a:f2:
         23:28:e9:bb:6d:1f:27:69:a9:92:6e:86:e5:fa:04:91:a4:78:
         c3:b7:91:30:33:34:68:fe:ef:5c:53:06:1b:aa:7c:ea:8f:98:
         16:a1:66:4b:c9:67:a2:cb:e1:33:2c:99:9a:58:b2:dc:be:71:
         ea:16:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:37:01 2024 by rpki-client on console-ams.rpki-client.org