Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/323830303a3434303a3a2f33322d3438203d3e203237373338.roa
File:                     323830303a3434303a3a2f33322d3438203d3e203237373338.roa (raw, json)
Hash identifier:          lCIyj0Z5Dvr3XFvkDQYGi5536KiantgD1zR2GboCimQ=
Subject key identifier:   5F:33:88:A9:CD:F5:21:7E:A2:B7:E2:CB:81:FA:82:D6:60:A7:B0:BB
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       4E7D4C4978C179780D2CC88C8E2B73A45510E82E
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/323830303a3434303a3a2f33322d3438203d3e203237373338.roa
Signing time:             Tue 05 Mar 2024 18:19:15 +0000
ROA not before:           Tue 05 Mar 2024 18:14:15 +0000
ROA not after:            Tue 04 Mar 2025 18:19:15 +0000
asID:                     27738
IP address blocks:        2800:440::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7d:4c:49:78:c1:79:78:0d:2c:c8:8c:8e:2b:73:a4:55:10:e8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Mar  5 18:14:15 2024 GMT
            Not After : Mar  4 18:19:15 2025 GMT
        Subject: CN=5F3388A9CDF5217EA2B7E2CB81FA82D660A7B0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:d2:be:a4:51:03:03:8d:8b:c1:5b:4c:cd:
                    75:fa:7e:56:a4:3d:80:a2:d2:43:80:00:38:57:9e:
                    90:77:4a:ee:44:e7:ba:51:e0:5b:c5:d9:8c:50:e5:
                    f7:26:e4:6f:27:37:49:bb:e9:4f:cc:a1:12:8e:33:
                    c9:3b:90:86:fe:8b:5b:ad:24:dc:c6:3d:f8:2a:93:
                    64:f1:86:f7:c9:aa:6e:2d:ce:6e:34:47:45:9f:aa:
                    0c:f1:0e:97:7e:36:b5:be:ed:cc:c5:99:e8:db:c5:
                    71:c9:c4:fa:f4:30:27:6b:b4:3b:3c:18:52:cc:a2:
                    3c:c9:80:96:f3:e4:52:f6:85:e4:a7:c3:8b:73:ee:
                    75:2e:69:59:8a:ce:e4:4f:cd:8c:b4:8e:b8:35:90:
                    6c:67:dd:e7:3b:3e:0b:5d:cb:82:65:ec:aa:80:49:
                    7f:54:6d:a9:1b:3c:00:db:d1:32:ea:81:a6:51:40:
                    5e:14:fc:67:25:93:5e:11:e5:0a:0a:41:b9:78:31:
                    ec:d7:3e:fb:40:57:16:0d:5e:8e:9d:22:a9:c2:dd:
                    44:96:d3:fd:06:f9:1c:b0:78:07:86:46:ec:6f:13:
                    c0:eb:1c:8c:80:9e:f1:37:fe:e7:2f:e4:f4:03:b4:
                    b6:ea:4e:08:32:ee:70:96:f6:94:0e:91:b5:59:68:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:33:88:A9:CD:F5:21:7E:A2:B7:E2:CB:81:FA:82:D6:60:A7:B0:BB
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/323830303a3434303a3a2f33322d3438203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:440::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:2d:f2:00:96:f3:c8:8b:f7:5c:ca:4c:bf:6d:b1:d6:51:ed:
         e4:85:e0:83:e5:c2:32:02:75:b6:90:3f:3b:22:98:e1:7a:b6:
         d2:18:7f:55:e5:2c:5d:45:24:f7:54:f5:2b:5b:d6:2d:b0:31:
         13:b9:db:97:c7:3a:8e:38:be:7f:08:7a:c0:f4:ae:e9:15:47:
         b5:81:fa:cb:6a:26:6f:b1:96:ff:47:8b:a2:5a:b8:e0:3d:a5:
         06:06:9f:32:45:42:a1:c4:48:a9:40:09:c6:2b:91:ab:26:40:
         c5:47:d2:02:d5:fa:e0:b7:4d:7f:aa:d2:c1:72:b4:f9:09:02:
         d6:ab:8b:fd:1a:58:39:a8:70:33:15:c9:4a:9c:de:5d:ed:4a:
         88:ad:b6:ae:cc:88:27:1c:1c:01:26:27:f5:59:9e:bd:02:1e:
         2e:c4:73:70:7f:8e:15:64:f8:e6:14:ad:66:c4:3c:74:41:06:
         ee:47:88:b2:2e:26:85:d0:71:25:52:12:01:b2:60:e8:b9:d9:
         ee:25:d6:23:12:91:af:d4:98:dc:84:da:83:ea:ac:2c:54:1a:
         1a:35:b9:a7:0f:9e:65:e2:6b:5f:99:a1:8c:17:60:dc:c9:9d:
         c0:67:aa:30:59:1b:b1:4a:3a:1f:8b:3c:ed:02:f7:f2:5d:19:
         de:4d:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org