Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/323830333a343634303a3a2f33322d3438203d3e203631353036.roa
File:                     323830333a343634303a3a2f33322d3438203d3e203631353036.roa (raw, json)
Hash identifier:          kllkjVcg6ldUMYhTSqtxULLK4effDy8sdNIXVQGO6Xk=
Subject key identifier:   30:B0:C7:ED:E3:5E:12:8E:8D:FE:CE:F7:8B:EE:BC:3C:75:F6:67:A9
Certificate issuer:       /CN=30293EE5309A01535DED2E8C83D8043CC3C407D5
Certificate serial:       3F89BDC38CCBB453B13C26CE1E2AEB0FFE8AB249
Authority key identifier: 30:29:3E:E5:30:9A:01:53:5D:ED:2E:8C:83:D8:04:3C:C3:C4:07:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/323830333a343634303a3a2f33322d3438203d3e203631353036.roa
Signing time:             Tue 05 Mar 2024 18:03:20 +0000
ROA not before:           Tue 05 Mar 2024 17:58:20 +0000
ROA not after:            Tue 04 Mar 2025 18:03:20 +0000
asID:                     61506
IP address blocks:        2803:4640::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:89:bd:c3:8c:cb:b4:53:b1:3c:26:ce:1e:2a:eb:0f:fe:8a:b2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30293EE5309A01535DED2E8C83D8043CC3C407D5
        Validity
            Not Before: Mar  5 17:58:20 2024 GMT
            Not After : Mar  4 18:03:20 2025 GMT
        Subject: CN=30B0C7EDE35E128E8DFECEF78BEEBC3C75F667A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:4e:e8:8c:cf:05:2e:5b:27:10:9a:16:16:
                    da:b5:8e:11:50:8b:50:01:90:3f:66:e2:d3:34:ad:
                    0c:21:c0:1d:fd:1b:5f:ae:9f:36:2e:45:f0:91:ed:
                    74:9f:64:1b:e5:35:55:1a:24:27:44:53:f3:92:38:
                    45:55:d4:f7:62:4b:07:bb:0d:5b:4d:55:3f:8a:bd:
                    9f:f0:a0:20:52:8d:a4:e7:f2:14:71:d4:cd:7d:90:
                    fd:e6:a4:8e:e2:98:cb:8f:b1:48:1d:26:f0:54:38:
                    1e:6f:ba:03:f0:af:05:e1:c3:a4:51:9f:20:20:c1:
                    a6:b3:6c:ae:a6:37:d4:a0:6f:5d:0f:95:d3:35:64:
                    0c:25:1b:50:14:39:4d:79:40:8d:b9:ae:e9:f8:c7:
                    ad:0e:b3:c7:8d:fd:67:43:8c:e5:58:ab:eb:e4:37:
                    35:31:a1:ee:f8:c1:00:bd:b8:98:f3:4b:fc:58:75:
                    d6:4a:24:e9:84:fc:94:69:75:70:54:84:08:e9:90:
                    e1:22:6d:f9:19:38:9c:0e:e7:a9:8d:5c:75:7e:0e:
                    3d:74:90:a7:19:8a:67:17:1d:7d:c5:83:48:14:f8:
                    fc:8f:3a:ff:27:7f:ff:23:84:d7:24:51:79:c3:2a:
                    18:bc:b7:77:e1:2a:22:82:39:30:7b:5f:6d:c4:87:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:C7:ED:E3:5E:12:8E:8D:FE:CE:F7:8B:EE:BC:3C:75:F6:67:A9
            X509v3 Authority Key Identifier:
                keyid:30:29:3E:E5:30:9A:01:53:5D:ED:2E:8C:83:D8:04:3C:C3:C4:07:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/323830333a343634303a3a2f33322d3438203d3e203631353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:69:23:51:94:2e:9a:1a:e9:12:1a:12:05:89:e9:92:44:38:
         ba:90:b3:03:96:b1:61:85:cb:5d:e0:86:24:35:ba:00:28:42:
         46:35:9f:06:8a:36:da:b5:3e:9f:d4:b6:48:d6:96:0b:5e:6f:
         7b:14:42:3c:73:04:e4:e4:f7:25:00:9e:ae:a1:b4:9a:d4:f5:
         20:dc:83:08:77:f1:4b:be:14:62:68:ac:a9:d2:31:1e:c5:41:
         76:93:48:f6:f5:20:d9:2d:ca:45:c0:09:62:fb:42:99:62:79:
         3d:41:db:79:32:18:fb:38:8f:a4:13:d8:35:29:5e:8e:4a:a9:
         85:49:53:72:09:78:e3:1f:0f:64:77:41:ac:ac:88:df:85:50:
         57:2a:b2:ec:77:b3:f8:c7:d9:4b:57:a2:b1:da:3a:72:c6:10:
         71:97:01:6e:6a:c6:26:0b:1b:2a:9a:21:fc:c6:ab:b7:ee:2b:
         c8:91:5a:f6:d9:2a:a7:5b:5c:43:d9:cf:9f:4e:a7:df:d6:99:
         01:ca:40:c5:96:ed:3d:d9:ea:9a:39:0c:ba:6b:dc:73:cc:52:
         ad:2f:2d:3c:94:e7:c8:52:f5:78:d2:46:5a:d6:5c:7e:a4:e2:
         13:62:41:d8:23:11:48:6d:7a:72:1c:99:a9:b8:11:8c:e2:6d:
         47:36:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org