Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/323830313a303a3363303a3a2f34382d3438203d3e203631343633.roa
File:                     323830313a303a3363303a3a2f34382d3438203d3e203631343633.roa (raw, json)
Hash identifier:          YG7QAVXPHKg76DvI3djEhWBh+N1uCnEhPtqJ2Z4oLHA=
Subject key identifier:   BC:52:30:99:B5:76:9A:DC:33:E6:C7:18:99:C8:0E:5F:02:97:BA:17
Certificate issuer:       /CN=12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB
Certificate serial:       112445999C5CB171AEF27DC5015FA439890FA0EB
Authority key identifier: 12:BF:AA:7C:91:F4:EB:76:B9:0D:5D:65:B9:B1:AD:DD:70:4D:B0:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/323830313a303a3363303a3a2f34382d3438203d3e203631343633.roa
Signing time:             Tue 05 Mar 2024 17:43:56 +0000
ROA not before:           Tue 05 Mar 2024 17:38:56 +0000
ROA not after:            Tue 04 Mar 2025 17:43:56 +0000
asID:                     61463
IP address blocks:        2801:0:3c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 17:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:24:45:99:9c:5c:b1:71:ae:f2:7d:c5:01:5f:a4:39:89:0f:a0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB
        Validity
            Not Before: Mar  5 17:38:56 2024 GMT
            Not After : Mar  4 17:43:56 2025 GMT
        Subject: CN=BC523099B5769ADC33E6C71899C80E5F0297BA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:1c:fb:1b:2d:b2:ca:17:68:96:77:92:92:
                    f7:e4:15:20:ee:5a:f6:bd:74:ea:46:f9:78:c3:bf:
                    12:09:49:0b:40:ec:ba:28:1a:75:05:96:5f:de:84:
                    bf:4b:91:64:6b:d0:2d:d8:93:4b:f9:b1:c2:2f:07:
                    1c:3a:42:43:0f:4c:e1:5c:9d:aa:b4:a2:ad:c2:c8:
                    64:22:6e:87:a5:db:a8:d3:77:19:33:ab:08:c1:2b:
                    ce:35:bb:c5:40:f9:e8:17:9c:cf:72:68:e4:b8:74:
                    5f:ef:d6:be:f5:fa:84:42:22:19:5d:b7:6c:97:05:
                    c4:1b:61:4e:b1:66:72:ea:47:83:21:e2:b6:0d:c8:
                    26:4e:3c:51:57:b3:b5:78:51:fd:27:cb:27:1a:b5:
                    f8:d7:b5:71:96:b4:57:01:c7:65:2c:cf:0a:ba:2d:
                    44:97:79:0e:77:f6:17:ff:e7:37:82:18:f9:69:ba:
                    22:f4:fb:b0:ea:8e:a4:59:2d:a1:45:68:21:e3:99:
                    78:31:da:38:0d:15:55:e7:64:3d:bc:bd:06:cb:ef:
                    6d:2f:96:fc:53:a6:05:6a:79:fe:84:98:7f:e6:fc:
                    11:e0:32:1c:9c:07:94:c8:4a:c2:0e:b8:dc:04:ce:
                    f5:3b:a0:5b:fb:8f:83:31:60:cf:d4:f8:d0:5f:bd:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:52:30:99:B5:76:9A:DC:33:E6:C7:18:99:C8:0E:5F:02:97:BA:17
            X509v3 Authority Key Identifier:
                keyid:12:BF:AA:7C:91:F4:EB:76:B9:0D:5D:65:B9:B1:AD:DD:70:4D:B0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/323830313a303a3363303a3a2f34382d3438203d3e203631343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:81:1d:19:24:1e:a2:d2:b2:63:f4:44:02:e8:69:55:96:
         1d:5f:d5:c3:96:8f:22:52:5a:0d:ee:d1:9a:17:ef:d5:6f:4b:
         db:51:e6:8d:a0:ee:20:bc:e4:39:7a:d1:34:63:89:bb:15:3a:
         e5:19:92:df:49:ca:42:20:88:63:62:0c:04:b3:26:3d:8f:6a:
         71:ea:37:c1:97:1a:cd:80:3e:83:8c:bc:4b:ea:e1:c4:90:00:
         75:44:94:96:f1:77:a8:e0:5b:07:77:95:dd:d6:19:6c:bd:05:
         33:68:a0:3e:e6:80:d9:02:54:1d:bc:49:7c:33:a9:4c:d8:3b:
         4d:5c:2c:66:2e:d1:97:09:8e:be:7c:ab:7d:d5:3f:cd:7f:51:
         39:4c:02:90:1a:db:29:c1:07:be:42:67:0a:4f:0e:f3:7f:34:
         06:7c:00:06:ab:c1:2e:17:d7:6b:34:e3:68:3d:bf:81:c5:5c:
         c7:ef:10:8a:61:6a:c1:b0:95:d6:87:aa:74:bb:e2:3c:25:e2:
         b7:7d:db:ca:e7:6f:a6:a2:05:19:27:69:7d:08:71:7e:ec:0b:
         5a:5f:8a:6b:76:8d:5b:fb:19:f6:82:f6:7f:d6:09:45:6b:1b:
         82:99:ab:4a:91:23:17:14:ed:a5:01:40:f3:f8:5e:30:f0:a1:
         c2:88:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:08:48 2024 by rpki-client on console-fra.rpki-client.org