Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa
File:                     323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa (raw, json)
Hash identifier:          YezjbKnEw5UfQsQMBnv6KeIL4rtWBinOSib8UuckX/Q=
Subject key identifier:   B6:67:FF:C5:B6:F6:FD:92:09:22:27:DC:DC:5E:B1:6D:4A:B3:2B:DB
Certificate issuer:       /CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E
Certificate serial:       77FBC2C6E511FB931BA520B7CD7F2299F6AD77CF
Authority key identifier: 3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa
Signing time:             Tue 05 Mar 2024 17:43:20 +0000
ROA not before:           Tue 05 Mar 2024 17:38:20 +0000
ROA not after:            Tue 04 Mar 2025 17:43:20 +0000
asID:                     270127
IP address blocks:        2801:c4:2a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fb:c2:c6:e5:11:fb:93:1b:a5:20:b7:cd:7f:22:99:f6:ad:77:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E
        Validity
            Not Before: Mar  5 17:38:20 2024 GMT
            Not After : Mar  4 17:43:20 2025 GMT
        Subject: CN=B667FFC5B6F6FD92092227DCDC5EB16D4AB32BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:6c:a4:4a:a0:bc:9d:e7:49:7d:ea:12:1c:
                    5a:3f:4d:d3:a3:5c:7e:8e:c4:cc:fb:c1:32:87:bb:
                    d8:10:67:e0:b9:6f:5b:e9:d9:1b:ce:e1:d0:8a:1e:
                    6b:d8:41:e0:ec:c2:ca:17:9d:d9:67:f5:c9:59:1d:
                    81:78:03:1d:b8:fb:3f:fd:66:2f:e6:07:46:95:fb:
                    e3:2d:12:7d:a6:5e:f1:ee:29:86:13:db:86:a5:88:
                    b6:f9:11:59:a7:48:a9:61:a9:e9:84:ee:9e:7f:c1:
                    14:6b:88:ba:14:81:f3:c2:75:9e:c7:66:8f:1d:84:
                    cd:ed:f7:b4:ed:d9:5e:15:bf:b7:4e:8f:ad:b7:a8:
                    f1:57:4e:4c:9e:f4:9b:7a:92:b5:ca:74:6f:7c:97:
                    d3:06:07:e4:b5:40:e3:7b:3c:75:ad:84:fb:e6:7c:
                    8e:44:cd:c8:90:bc:02:60:4a:78:0c:a2:b6:31:40:
                    e3:d2:7d:f4:f3:62:f5:e9:3e:63:6c:4f:8c:4b:5b:
                    ff:05:01:eb:53:26:1e:cc:75:97:ac:7e:ab:08:56:
                    49:48:81:50:73:d0:85:c3:6f:57:a4:5c:10:cd:86:
                    90:0f:5f:d4:cc:e4:4f:d4:5c:83:a9:91:74:f4:8b:
                    bb:8a:b1:6d:6b:f6:fa:0a:da:46:35:8e:07:09:0a:
                    65:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:67:FF:C5:B6:F6:FD:92:09:22:27:DC:DC:5E:B1:6D:4A:B3:2B:DB
            X509v3 Authority Key Identifier:
                keyid:3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:31:24:bc:6e:cf:f5:90:8a:53:7e:04:4f:92:b2:4b:98:c7:
         63:3f:67:b8:5c:8a:0f:d4:c3:68:00:9b:3c:3d:77:82:16:6e:
         a7:a3:fb:09:80:97:39:b3:87:37:8b:3f:9b:f3:c9:dd:85:8c:
         3c:e0:81:54:f2:e1:05:28:fb:bf:80:4e:ec:03:ff:c5:e1:da:
         c7:81:0b:6a:ac:fa:96:18:73:15:67:c6:16:8c:62:e9:03:15:
         c3:97:9b:62:7d:68:33:21:f0:c9:0d:4d:34:4b:cc:96:13:28:
         bf:50:c8:e1:45:5b:33:fb:cf:14:cc:4a:94:e1:e2:ed:44:1e:
         b8:f8:45:ef:41:f8:09:5b:96:74:a6:29:d4:a6:b5:c4:e2:9c:
         35:6f:d3:ec:f6:79:81:19:e7:20:7f:43:2f:56:6d:81:22:a3:
         42:25:37:55:7b:66:b8:4f:f6:3a:19:0d:2c:d9:35:82:c3:cd:
         65:c5:ef:1c:de:a4:81:d0:3e:e5:e4:2b:c7:c1:aa:d7:be:87:
         60:95:7f:47:6e:f8:6c:3e:a1:33:74:ec:92:eb:70:b5:d8:54:
         63:22:92:6b:fa:ea:27:c7:2d:fb:40:24:99:ae:0c:b3:e6:0a:
         ff:1a:aa:60:90:7c:01:fd:31:8c:8a:6c:6a:0e:e7:c8:68:5e:
         7a:bf:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 23:00:05 2024 by rpki-client on console-fra.rpki-client.org