Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a383030303a3a2f33342d3334203d3e203237373831.roa
File:                     323830333a373338303a383030303a3a2f33342d3334203d3e203237373831.roa (raw, json)
Hash identifier:          hELEgmIzlIqQzF4urpQagw2PTraXo9ung/y6XG1zLL4=
Subject key identifier:   AA:A6:92:E9:1E:27:E2:E3:34:10:9E:6E:C6:AF:89:FB:47:97:BF:13
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       5EDA14F546E393EF3141BC29FA87AB07FC409FBC
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a383030303a3a2f33342d3334203d3e203237373831.roa
Signing time:             Mon 15 Apr 2024 04:50:02 +0000
ROA not before:           Mon 15 Apr 2024 04:45:02 +0000
ROA not after:            Mon 14 Apr 2025 04:50:02 +0000
asID:                     27781
IP address blocks:        2803:7380:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:da:14:f5:46:e3:93:ef:31:41:bc:29:fa:87:ab:07:fc:40:9f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Apr 15 04:45:02 2024 GMT
            Not After : Apr 14 04:50:02 2025 GMT
        Subject: CN=AAA692E91E27E2E334109E6EC6AF89FB4797BF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:29:41:85:ac:31:f5:0e:c0:8c:69:0e:64:
                    33:12:de:0e:90:dc:96:8d:6a:28:1f:6c:93:1f:d2:
                    1f:fb:35:33:51:d9:0a:9e:60:4d:fb:5d:65:d1:92:
                    e2:a6:b2:55:c3:82:5b:29:2c:11:0b:59:6b:e8:27:
                    6d:f1:33:05:dd:07:1e:07:23:78:6d:f2:1c:11:e9:
                    c9:01:d0:9b:36:ce:aa:08:ad:1e:e0:8b:18:b2:95:
                    df:2f:54:38:91:ae:9f:bd:09:b6:66:01:e8:e9:80:
                    39:11:cd:7f:8e:f3:d1:d1:6b:84:f9:0c:3c:12:10:
                    dc:92:82:40:96:cc:54:cd:40:f1:d9:8e:0f:61:f8:
                    62:d5:4c:66:48:aa:7e:a3:4f:52:2d:db:6c:b0:84:
                    ca:b8:c2:a6:98:e5:57:c9:4f:3c:ea:41:e7:be:db:
                    16:28:87:87:cd:c1:15:ea:ef:aa:ca:44:f8:e5:41:
                    76:f4:18:be:56:20:37:6d:a8:db:9c:53:12:b1:2e:
                    d2:9c:d0:3e:36:0e:eb:68:f2:39:34:d8:c0:2e:4a:
                    53:1f:bf:ea:13:87:1e:a6:8d:51:49:2a:77:02:6c:
                    af:64:81:71:e1:36:c0:6f:c1:ba:63:b6:8a:84:ce:
                    e3:28:86:a6:b0:2d:52:a6:19:e1:e0:f7:9f:a9:c0:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:92:E9:1E:27:E2:E3:34:10:9E:6E:C6:AF:89:FB:47:97:BF:13
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/323830333a373338303a383030303a3a2f33342d3334203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7380:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9f:c2:77:ef:1c:e4:e5:b2:57:91:e9:de:ea:e6:13:41:7c:7d:
         d9:03:b4:24:db:4a:9d:3d:3f:5c:1f:6b:fc:43:af:8a:fd:e6:
         8c:c0:3d:5b:99:95:2b:21:b6:64:82:c6:f4:84:2e:65:26:54:
         1a:13:a5:b5:4f:ce:7f:2a:4b:7d:67:a5:ec:2e:63:73:3e:bb:
         af:a1:02:ea:66:a7:76:9f:cc:cb:e4:89:14:63:53:08:c9:b8:
         da:51:47:e5:4a:30:1c:59:00:55:93:68:aa:b9:73:25:ae:6c:
         c3:27:af:7a:25:86:74:bf:78:83:87:8f:d9:2d:a5:41:ce:8a:
         21:40:e0:d8:95:93:af:c0:c5:e6:cc:7e:e2:21:b3:c8:58:b0:
         7f:d6:6d:2b:49:a1:53:8d:6e:a6:88:c3:a4:73:aa:2a:99:e4:
         0c:ef:25:04:94:b9:4c:b5:12:dc:53:90:6a:18:bc:61:6f:6e:
         41:0e:a0:1b:1b:67:9e:8e:9c:25:be:93:89:2f:a8:b0:e4:25:
         f1:4b:64:17:51:70:88:d1:0d:35:53:cc:69:d9:cf:9f:ec:5e:
         1c:21:37:e7:26:4f:d0:7e:26:55:7e:63:53:6a:4c:6b:21:3d:
         1b:c1:5c:f1:45:2c:c9:87:bf:39:57:ef:bd:09:7b:c6:91:5c:
         72:2f:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:17 2024 by rpki-client on console-fra.rpki-client.org