Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933303a3a2f32392d3332203d3e203237373137.roa
File:                     323830303a3933303a3a2f32392d3332203d3e203237373137.roa (raw, json)
Hash identifier:          lfmlkHBzm7Xa9pXgWYXGktw5GbdAWXeFMT80lnzLSEM=
Subject key identifier:   31:86:70:AD:04:58:D4:6F:88:76:50:C4:04:53:40:E1:72:99:77:3A
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       1897FCF75B677CEFA685A0A9F894C33DFD9BD23F
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933303a3a2f32392d3332203d3e203237373137.roa
Signing time:             Tue 05 Mar 2024 17:49:51 +0000
ROA not before:           Tue 05 Mar 2024 17:44:51 +0000
ROA not after:            Tue 04 Mar 2025 17:49:51 +0000
asID:                     27717
IP address blocks:        2800:930::/29 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:97:fc:f7:5b:67:7c:ef:a6:85:a0:a9:f8:94:c3:3d:fd:9b:d2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Mar  5 17:44:51 2024 GMT
            Not After : Mar  4 17:49:51 2025 GMT
        Subject: CN=318670AD0458D46F887650C4045340E17299773A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:01:8a:18:44:91:5d:ac:3b:d6:da:f3:0f:
                    4f:24:65:77:91:d0:e1:af:b5:10:27:19:3a:80:45:
                    e3:bb:6c:f5:4a:a6:b9:c6:e6:e5:68:f2:00:94:19:
                    28:1f:05:cf:95:a1:d8:f2:6d:0c:56:05:1e:c9:68:
                    94:b3:a0:77:9f:ea:03:9f:d0:13:f9:fd:6c:09:dd:
                    ba:d7:9d:aa:38:03:2a:99:d6:97:1b:8a:f0:34:c2:
                    e7:3f:6f:15:2a:86:5f:be:1f:2c:20:fc:01:64:08:
                    30:68:c0:c8:cd:24:3a:3f:df:ae:6e:c1:45:59:fa:
                    e6:61:40:85:b4:a5:b3:83:6b:63:5c:c5:62:79:67:
                    69:d2:ef:b9:19:da:ee:c2:a6:d5:16:10:d5:a9:53:
                    b6:72:aa:07:30:c2:6e:a5:60:85:1a:7b:f5:fb:c7:
                    fc:de:bb:c1:cf:5a:8b:16:d5:7a:44:10:3d:f5:91:
                    14:51:d5:1c:95:bc:68:08:67:be:09:a6:68:e5:8c:
                    57:0b:4f:5d:42:1a:15:05:77:a6:c6:52:c0:dc:0d:
                    48:58:b0:63:80:bd:57:8c:c3:fe:e5:62:63:54:d0:
                    b9:09:e5:12:01:79:92:60:b8:f7:ca:81:df:31:99:
                    bf:af:20:a5:bf:40:70:a5:66:c4:93:fd:40:cf:1d:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:70:AD:04:58:D4:6F:88:76:50:C4:04:53:40:E1:72:99:77:3A
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933303a3a2f32392d3332203d3e203237373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:930::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:82:de:34:b8:99:1a:ac:f2:7e:d3:82:04:d5:3c:d9:88:c5:
         5e:3f:a1:70:83:2f:56:10:64:2e:7a:5b:2e:43:c0:c8:31:1f:
         5e:05:9d:6c:a2:d4:b1:d1:c3:bb:8a:aa:1c:e0:7f:4b:42:c5:
         2f:0b:6f:eb:a6:4a:ff:23:e5:bf:4d:8d:55:ed:44:14:72:be:
         be:0e:91:37:fb:76:3d:fd:9c:76:ef:a0:f8:0f:77:42:44:21:
         cd:97:4f:91:92:2d:c4:60:05:a0:ae:58:56:18:a7:ed:25:72:
         0d:34:1c:1b:10:5e:89:de:8c:5f:a3:1d:af:74:e5:62:83:f4:
         92:e2:bf:89:ac:26:5c:c8:18:8a:79:67:15:ed:82:71:78:c9:
         c5:04:b9:18:47:08:2d:4e:61:53:94:f5:56:62:8a:29:a4:14:
         33:52:1d:09:5e:6f:eb:4b:07:68:65:17:a8:81:28:a7:5a:c3:
         59:e5:f4:67:c0:f3:2d:e1:a0:2b:5e:fb:98:99:86:1c:c1:42:
         16:24:60:f1:0b:e5:ef:b6:ad:92:bf:78:3f:92:17:66:17:c5:
         60:f7:3e:f7:d6:fc:ef:4d:df:70:8b:af:93:e9:c6:be:60:f2:
         ac:e0:47:5c:4a:34:48:6d:fb:6b:dc:6b:4b:1d:e1:98:15:0f:
         04:f6:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:33:06 2024 by rpki-client on console-fra.rpki-client.org