Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/323830313a31383a323830303a3a2f34382d3438203d3e20323639393633.roa
File:                     323830313a31383a323830303a3a2f34382d3438203d3e20323639393633.roa (raw, json)
Hash identifier:          BT69nwZxEJeRqt4wOLnlQi7ew/WZRzzA8cQk38lZioI=
Subject key identifier:   E7:A4:88:E2:5A:F3:C6:ED:B4:8B:89:2C:28:73:44:12:FD:93:53:10
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       2ABFBBFFF5AA93D149432A3A2F02E17279B01FF8
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/323830313a31383a323830303a3a2f34382d3438203d3e20323639393633.roa
Signing time:             Tue 05 Mar 2024 18:22:25 +0000
ROA not before:           Tue 05 Mar 2024 18:17:25 +0000
ROA not after:            Tue 04 Mar 2025 18:22:25 +0000
asID:                     269963
IP address blocks:        2801:18:2800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:bf:bb:ff:f5:aa:93:d1:49:43:2a:3a:2f:02:e1:72:79:b0:1f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Mar  5 18:17:25 2024 GMT
            Not After : Mar  4 18:22:25 2025 GMT
        Subject: CN=E7A488E25AF3C6EDB48B892C28734412FD935310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:d2:9e:bd:3f:76:c7:18:2f:44:d9:3e:7f:
                    4f:75:b6:09:11:08:c1:3f:bc:7d:bb:96:32:4f:d4:
                    e7:33:57:18:ab:0b:1b:02:44:72:10:c0:b7:93:7c:
                    a0:18:3b:12:52:ed:a9:f6:4b:57:f3:b9:db:5c:b3:
                    d1:63:e2:68:c7:fe:c1:1e:a1:6f:a7:0f:25:26:42:
                    e9:4a:4f:ed:c0:9b:cf:8b:6f:ab:b1:b2:48:4f:c2:
                    c1:37:d0:0e:20:6a:6f:98:3c:43:58:3a:07:02:14:
                    c6:6c:8c:80:46:c0:f0:0d:a8:c1:6e:f9:3b:99:81:
                    83:b7:bf:b1:e0:77:9d:56:d7:8f:c4:0e:9e:27:65:
                    58:39:e3:fb:e7:50:79:ce:7f:67:5b:a8:c3:ce:32:
                    85:9f:6d:83:c5:9b:60:ba:98:20:ed:e8:0d:ef:c0:
                    18:11:15:f9:aa:90:1e:13:fc:e2:8b:c7:a9:1b:ec:
                    64:ac:b2:33:71:b2:df:23:60:44:3f:04:0b:fa:57:
                    29:5f:2a:81:59:49:72:ee:08:4a:6c:0d:e4:7c:dd:
                    a3:46:1a:9b:3a:ab:fb:77:0d:73:78:57:c0:d4:90:
                    a7:2a:4f:2f:b4:0e:e2:0e:3a:55:c7:f3:8f:fe:1c:
                    b2:96:bf:59:f6:6c:1b:3e:50:72:b0:fa:d9:31:74:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A4:88:E2:5A:F3:C6:ED:B4:8B:89:2C:28:73:44:12:FD:93:53:10
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/323830313a31383a323830303a3a2f34382d3438203d3e20323639393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:ed:0b:80:9a:7c:2e:41:92:f5:19:1b:6f:73:f8:5f:82:
         d4:a4:18:50:d3:5a:a8:63:27:20:89:0a:c2:12:70:a3:6b:20:
         95:99:f2:4b:d8:57:5e:63:fa:c6:b6:8e:2b:07:1e:15:76:68:
         0b:e9:ec:7f:ee:58:ca:a8:f4:31:3b:5c:e6:eb:19:5f:e5:fc:
         88:67:87:e9:df:a1:61:d5:da:26:9f:2f:52:29:d4:0f:7a:9a:
         6c:33:b7:32:f3:55:0b:cb:07:09:41:b2:10:6c:f5:24:ec:67:
         f0:23:8f:94:fb:08:a3:00:52:73:3f:d8:d0:f3:64:f9:de:ce:
         71:22:5f:c4:8e:33:eb:ee:43:ab:70:f4:4f:7a:07:70:3c:8e:
         d2:73:4a:15:30:56:39:37:d8:30:9b:74:16:50:f4:cd:eb:df:
         81:a0:8e:61:24:85:e7:c2:46:33:22:47:aa:d0:e0:4e:3f:03:
         a9:f9:29:8d:8d:e8:ce:0d:d0:b8:00:a1:03:10:f1:14:22:c1:
         4b:39:eb:90:34:9a:36:74:da:90:6e:b1:78:ca:a3:f6:10:9a:
         36:80:17:b4:9d:c2:25:1f:7f:ba:87:95:18:35:b3:82:2c:cc:
         01:93:bd:7a:b2:a7:c5:e7:9e:d6:c8:0c:c5:4d:53:ae:34:4b:
         32:32:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:16:36 2024 by rpki-client on console-fra.rpki-client.org