Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          URAvu3pyv8uKT+bCOxmAa3Devt6RuD+E92HYH++qYT4=
Subject key identifier:   30:FB:4A:67:B5:A0:61:38:72:62:76:DA:6E:53:A2:C4:C7:FB:A5:16
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       3DB5F621BD93E6E7EA21D9C71401D7DEF7C564AE
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:11 +0000
ROA not before:           Tue 05 Mar 2024 18:12:11 +0000
ROA not after:            Tue 04 Mar 2025 18:17:11 +0000
asID:                     27818
IP address blocks:        2803:3380:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b5:f6:21:bd:93:e6:e7:ea:21:d9:c7:14:01:d7:de:f7:c5:64:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:11 2024 GMT
            Not After : Mar  4 18:17:11 2025 GMT
        Subject: CN=30FB4A67B5A06138726276DA6E53A2C4C7FBA516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:55:97:f8:67:d4:9b:6b:c3:1a:64:db:fc:
                    4c:dc:ac:af:57:76:f6:f4:ae:ec:7c:ee:6e:67:51:
                    a5:68:4d:df:df:dc:84:1b:36:ea:b6:38:0b:be:04:
                    8f:6d:f4:15:bc:cd:82:44:a2:49:2d:33:f0:65:d0:
                    74:74:e3:16:7c:06:1e:2b:8b:36:71:04:1f:a7:bb:
                    4d:2c:11:a9:46:0d:b6:05:fe:a3:46:1f:bf:13:3d:
                    90:20:10:d1:fe:ae:c3:17:53:ca:62:a8:c1:c2:6f:
                    71:b9:5f:26:a0:94:e6:55:5c:a6:ac:4e:c3:b0:d0:
                    34:9a:a5:47:c4:e1:60:29:57:41:90:49:d9:15:34:
                    32:ea:33:d7:64:b6:4c:7e:fa:3d:c9:2f:1e:2b:40:
                    51:93:a1:ed:4e:95:2c:b6:f5:38:5d:d9:a2:2e:cc:
                    b1:e2:92:c2:a0:b1:ff:36:e8:6c:72:57:8a:72:16:
                    8e:09:7f:8c:1d:68:e5:55:48:81:af:f8:1a:a0:e2:
                    c7:31:1c:da:be:c5:54:9c:83:b4:40:4d:b7:37:24:
                    82:4a:40:f1:1e:46:cd:fb:c0:5f:c9:de:20:12:0d:
                    fb:75:12:94:53:19:7e:e3:0e:2a:2c:fe:99:12:0d:
                    0c:02:cf:0f:61:ac:7e:47:c9:0a:d9:59:25:1d:1a:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FB:4A:67:B5:A0:61:38:72:62:76:DA:6E:53:A2:C4:C7:FB:A5:16
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:22:e3:13:aa:f7:9c:ad:94:93:bf:4b:dd:7f:23:18:97:76:
         84:df:33:fd:69:c4:1f:73:65:23:b4:46:6a:31:27:6c:a7:50:
         ed:7e:68:81:bf:12:ec:62:40:fb:e8:33:61:2b:84:fa:a3:e3:
         86:78:81:5b:97:f5:af:6d:84:e0:26:dd:2b:9d:5a:47:d8:e0:
         e8:64:b6:04:d1:ee:5f:92:f2:43:b6:1b:0f:98:53:11:24:44:
         62:ee:7b:ef:0a:39:79:b0:2b:56:c5:36:f7:49:9b:2b:19:df:
         47:1f:dc:5e:d1:97:f8:12:41:66:0c:2f:a7:f1:6b:e2:a7:22:
         bf:f3:95:98:4e:61:38:a5:f6:7e:c3:89:88:ac:5d:ef:d4:bd:
         3a:1f:ce:89:0c:0c:21:31:bd:77:69:91:4c:cd:1e:d9:15:9b:
         1b:fd:96:a0:30:6d:47:fe:dd:2c:19:d2:a9:98:e9:a2:92:b8:
         de:88:8c:15:26:82:10:57:48:ed:24:c1:58:4a:a9:4c:fe:d0:
         ac:a9:f3:f2:13:20:ce:a6:aa:4b:6a:ca:73:a6:3d:80:c9:4b:
         7d:de:02:40:76:db:7e:a4:4a:07:fc:15:2a:4e:a3:ea:34:a8:
         cc:0b:f2:20:42:5a:b8:33:7d:47:d1:7b:16:bf:bf:20:c4:c6:
         e4:21:06:86
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUPbX2Ib2T5ufqIdnHFAHX3vfFZK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEREI0NjVGMDdFMEM0Q0Y4MjQ0RTNBMjYwNTE5NUI0
MUFEQTNCQjAeFw0yNDAzMDUxODEyMTFaFw0yNTAzMDQxODE3MTFaMDMxMTAvBgNV
BAMTKDMwRkI0QTY3QjVBMDYxMzg3MjYyNzZEQTZFNTNBMkM0QzdGQkE1MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqlWX+GfUm2vDGmTb/EzcrK9X
dvb0rux87m5nUaVoTd/f3IQbNuq2OAu+BI9t9BW8zYJEokktM/Bl0HR04xZ8Bh4r
izZxBB+nu00sEalGDbYF/qNGH78TPZAgENH+rsMXU8piqMHCb3G5XyaglOZVXKas
TsOw0DSapUfE4WApV0GQSdkVNDLqM9dktkx++j3JLx4rQFGToe1OlSy29Thd2aIu
zLHiksKgsf826GxyV4pyFo4Jf4wdaOVVSIGv+Bqg4scxHNq+xVScg7RATbc3JIJK
QPEeRs37wF/J3iASDft1EpRTGX7jDios/pkSDQwCzw9hrH5HyQrZWSUdGhM1AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUMPtKZ7WgYThyYnbablOixMf7pRYwHwYDVR0j
BBgwFoAUIN20ZfB+DEz4JE46JgUZW0Gto7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTY2MzVGQTIxNjJENzMzQUU2NTYzMzkzRkEyMzM0MzYz
NzdCMERDNTRFMzJDRUEyODFDMzAxRjcxMzRGRkQ0LzAvMjBEREI0NjVGMDdFMEM0
Q0Y4MjQ0RTNBMjYwNTE5NUI0MUFEQTNCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEREQjQ2NUYwN0UwQzRDRjgy
NDRFM0EyNjA1MTk1QjQxQURBM0JCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U2NjM1RkEyMTYyRDczM0FFNjU2MzM5M0ZBMjMzNDM2Mzc3QjBEQzU0
RTMyQ0VBMjgxQzMwMUY3MTM0RkZENC8wLzMyMzgzMDMzM2EzMzMzMzgzMDNhNjYz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzgzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAMzgPAwDQYJKoZIhvcNAQELBQADggEBAC4i4xOq95ytlJO/S91/IxiXdoTf
M/1pxB9zZSO0RmoxJ2ynUO1+aIG/EuxiQPvoM2ErhPqj44Z4gVuX9a9thOAm3Sud
WkfY4OhktgTR7l+S8kO2Gw+YUxEkRGLue+8KOXmwK1bFNvdJmysZ30cf3F7Rl/gS
QWYML6fxa+KnIr/zlZhOYTil9n7DiYisXe/UvTofzokMDCExvXdpkUzNHtkVmxv9
lqAwbUf+3SwZ0qmY6aKSuN6IjBUmghBXSO0kwVhKqUz+0Kyp8/ITIM6mqktqynOm
PYDJS33eAkB2236kSgf8FSpOo+o0qMwL8iBCWrgzfUfRexa/vyDExuQhBoY=
-----END CERTIFICATE-----
Generated at Wed May 22 05:56:58 2024 by rpki-client on console-ams.rpki-client.org