Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/323830333a323030303a3a2f33322d3332203d3e203532343930.roa
File:                     323830333a323030303a3a2f33322d3332203d3e203532343930.roa (raw, json)
Hash identifier:          ZctQXNUoYWjXBKneM2eotfquBk4YcQiSe+UvuUWemTY=
Subject key identifier:   CD:83:F2:70:8F:0E:90:2C:8E:D1:17:08:B9:2C:9D:70:DB:C6:DD:62
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       51AAEF6CFFEB96F2454CD76700C419F682993ADC
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/323830333a323030303a3a2f33322d3332203d3e203532343930.roa
Signing time:             Tue 05 Mar 2024 18:16:45 +0000
ROA not before:           Tue 05 Mar 2024 18:11:45 +0000
ROA not after:            Tue 04 Mar 2025 18:16:45 +0000
asID:                     52490
IP address blocks:        2803:2000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:aa:ef:6c:ff:eb:96:f2:45:4c:d7:67:00:c4:19:f6:82:99:3a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Mar  5 18:11:45 2024 GMT
            Not After : Mar  4 18:16:45 2025 GMT
        Subject: CN=CD83F2708F0E902C8ED11708B92C9D70DBC6DD62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:55:38:0f:9e:5c:5c:bb:d7:01:ed:89:19:
                    43:d4:1b:5c:d2:1b:46:4a:fa:9c:e5:49:10:14:15:
                    fc:1c:4c:fb:97:df:9a:ef:71:e3:34:4a:25:d3:7a:
                    70:1b:d5:59:51:02:96:b1:9f:10:73:43:c5:e3:18:
                    71:c9:24:54:bd:c5:1b:65:41:86:59:aa:99:71:d9:
                    df:42:d0:88:ee:6b:ac:e8:24:2d:e3:de:e3:76:74:
                    e2:02:b1:d7:d0:9b:c9:2e:15:be:d5:4f:24:13:bc:
                    b0:95:f4:c2:9a:0e:4d:11:61:a6:8c:23:40:4a:81:
                    f3:a4:0b:b6:26:97:0b:1a:ee:71:9a:dd:8d:0f:3f:
                    0e:33:bd:8f:b5:02:51:44:9a:0a:66:05:d2:e3:aa:
                    77:29:e0:87:7e:11:00:df:11:e7:0b:c1:6f:1c:9c:
                    99:2e:36:69:05:f3:1a:18:b9:db:0f:ac:25:95:f2:
                    44:f3:b6:b1:01:c5:c4:8c:c3:fa:77:f0:57:63:81:
                    d3:ba:30:e7:77:20:c9:4d:0a:1b:00:51:9b:c2:a4:
                    89:53:8f:d2:55:ba:78:38:2f:4b:38:29:49:a8:07:
                    01:44:a6:dc:a1:58:0e:11:49:35:bb:bf:17:26:36:
                    77:23:62:66:ed:02:d8:cd:7a:e6:d5:df:ed:af:c4:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:83:F2:70:8F:0E:90:2C:8E:D1:17:08:B9:2C:9D:70:DB:C6:DD:62
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/323830333a323030303a3a2f33322d3332203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2000::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:91:84:27:8e:7a:8c:63:be:3b:ed:b9:69:cb:15:7a:bd:84:
         bd:8e:52:2a:1b:f9:14:cf:70:3f:e2:ac:69:d4:46:a5:df:86:
         2e:f0:48:b1:83:0f:0d:1c:4c:44:8e:10:57:69:9f:3f:9e:f3:
         71:be:b8:20:5b:c2:5b:ff:2b:2d:e5:53:1a:f1:4c:b2:fb:20:
         22:14:37:86:d5:ba:cb:fe:71:6b:83:2a:11:68:30:44:2b:73:
         f1:77:d5:e9:f5:7a:fa:eb:1a:82:00:bf:26:36:67:5d:ca:b3:
         70:5f:af:9b:e7:54:89:24:e2:bd:70:fa:e5:dc:4a:59:c6:1b:
         f7:a6:b3:ec:9e:9e:c8:20:89:a0:22:3a:0e:c4:9b:2f:a9:e4:
         95:cc:78:19:df:ea:ac:65:2c:a7:89:0d:54:ae:e6:82:fc:a2:
         e0:74:8b:53:a1:cc:17:82:99:2a:c9:b3:38:65:bd:b2:98:26:
         a0:13:ad:78:b9:6b:ca:b8:76:ef:2b:32:71:ae:10:cc:fe:d8:
         52:4a:1d:72:7b:cf:b5:c1:e4:d2:73:cf:d3:1c:ea:32:b8:6e:
         f4:00:4e:00:44:50:04:f0:f1:5f:e5:c6:07:b3:fa:7c:5a:fb:
         49:3e:bb:f1:06:b4:70:a8:ab:76:1b:bd:9d:7a:ca:bf:bb:c2:
         3b:d4:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:05 2024 by rpki-client on console-ams.rpki-client.org