Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e20323732393139.roa
File:                     323830313a3131393a3a2f34382d3438203d3e20323732393139.roa (raw, json)
Hash identifier:          mV9CwjnfPibKPqQS6oEDdT6uxz7lL69lMAqPIJScSRI=
Subject key identifier:   3F:D4:10:F8:A2:36:21:AD:7E:B5:B9:39:41:B3:8D:E0:30:2B:C7:DB
Certificate issuer:       /CN=02F630ED71E30A0228F714DB90E8B714460D868C
Certificate serial:       4906A33A3AE8AD1D9991AA1ABA0A5D1FC7A96BB8
Authority key identifier: 02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e20323732393139.roa
Signing time:             Tue 05 Mar 2024 17:41:40 +0000
ROA not before:           Tue 05 Mar 2024 17:36:40 +0000
ROA not after:            Tue 04 Mar 2025 17:41:40 +0000
asID:                     272919
IP address blocks:        2801:119::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Jun 2024 10:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:06:a3:3a:3a:e8:ad:1d:99:91:aa:1a:ba:0a:5d:1f:c7:a9:6b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F630ED71E30A0228F714DB90E8B714460D868C
        Validity
            Not Before: Mar  5 17:36:40 2024 GMT
            Not After : Mar  4 17:41:40 2025 GMT
        Subject: CN=3FD410F8A23621AD7EB5B93941B38DE0302BC7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:4d:50:89:c4:6a:b3:0b:ca:0f:8f:e9:ad:
                    0b:0b:b9:ea:0d:05:26:7a:3d:1d:15:2b:d8:54:e8:
                    fa:d7:ca:a7:4e:30:85:8f:b1:e6:c5:27:d7:e6:48:
                    1c:a8:0a:5e:22:0c:db:54:d4:8b:d8:8d:20:58:34:
                    0d:5c:f6:eb:d8:4a:c4:e3:ba:7d:5a:5c:66:cf:b6:
                    45:f5:e6:1f:c6:20:60:2d:5f:45:4e:6b:38:3d:c3:
                    05:07:2b:d2:cc:d6:f6:5c:61:80:24:62:e4:49:ab:
                    9e:f6:c5:42:d8:fe:89:fb:a3:25:81:2b:90:9d:f9:
                    bb:e4:ca:f1:b7:50:4f:51:0c:35:1f:b1:af:3d:b8:
                    fe:73:ac:58:38:8d:26:45:a9:4c:6e:3f:e3:9e:ee:
                    c2:96:e9:b8:62:d7:b1:16:6d:ff:c2:39:02:9e:f6:
                    91:c2:20:b5:f9:6d:a4:4c:97:46:18:03:30:16:b3:
                    03:05:09:0d:68:3b:85:5d:76:a8:80:00:d5:97:9a:
                    46:8a:16:9f:01:8e:f1:c0:1f:50:22:4a:6c:1d:d3:
                    2b:a0:34:82:ee:5d:86:91:f2:9a:aa:80:3d:fb:6d:
                    fc:0f:1a:f9:71:36:ec:a9:78:77:6b:d0:2d:a4:9d:
                    ba:80:37:24:b1:c1:a7:f7:29:ef:4c:ba:7d:72:c6:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D4:10:F8:A2:36:21:AD:7E:B5:B9:39:41:B3:8D:E0:30:2B:C7:DB
            X509v3 Authority Key Identifier:
                keyid:02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/323830313a3131393a3a2f34382d3438203d3e20323732393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:119::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:31:2b:e2:2b:a2:58:00:de:32:f4:d6:b7:47:b7:76:36:0c:
         b5:a3:3b:f6:bc:f7:42:f5:6f:cb:46:89:31:56:71:91:82:d7:
         06:66:bd:b1:22:18:83:5a:31:fc:f5:09:0a:45:71:65:91:8a:
         33:4c:b5:81:fb:4f:77:78:92:25:1c:47:82:b1:7a:5e:2f:ca:
         16:c1:78:87:1d:91:b7:b5:af:9a:56:d6:fd:f4:28:d2:e0:5c:
         54:23:9f:1e:d4:0f:82:85:e7:fb:a6:8d:2f:4d:ef:f9:38:89:
         e6:ab:64:04:a3:9e:f8:fa:30:20:8f:3a:85:fa:8f:ba:97:66:
         7f:89:bb:36:15:b5:7c:ac:ce:6b:f8:b0:1e:07:f4:fb:e1:1c:
         b7:59:14:cd:dc:dc:df:00:d8:0c:c6:8d:e6:9a:6b:cd:84:3f:
         6a:0d:04:c6:9d:b6:3f:13:db:f2:7d:38:29:1d:02:1c:ae:41:
         11:e3:d0:dc:aa:ad:88:27:a3:62:14:2e:a6:5e:89:69:f2:89:
         e9:b4:29:09:74:00:ac:0a:15:3e:fd:ee:a9:68:0e:e9:77:b0:
         a1:7a:04:82:23:22:53:da:e6:d9:fc:fd:04:75:1f:aa:8f:1a:
         ea:57:30:b6:15:30:27:0f:38:f3:e7:ca:80:e0:3e:82:44:3c:
         53:e9:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:13:00 2024 by rpki-client on console-ams.rpki-client.org