Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa
File:                     323030313a313333383a3a2f33322d3332203d3e203237383037.roa (raw, json)
Hash identifier:          oWD8sqXHL983YSqA4At/S1i2LMiQHXMxA9YU8ERQ55U=
Subject key identifier:   46:58:F5:6C:15:D3:30:5E:74:35:D3:C1:67:80:05:DA:68:11:E8:87
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       6B42A412BD8B218F063084D557E861A1A14A93AE
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa
Signing time:             Tue 05 Mar 2024 17:49:27 +0000
ROA not before:           Tue 05 Mar 2024 17:44:27 +0000
ROA not after:            Tue 04 Mar 2025 17:49:27 +0000
asID:                     27807
IP address blocks:        2001:1338::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:42:a4:12:bd:8b:21:8f:06:30:84:d5:57:e8:61:a1:a1:4a:93:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:27 2024 GMT
            Not After : Mar  4 17:49:27 2025 GMT
        Subject: CN=4658F56C15D3305E7435D3C1678005DA6811E887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:73:5b:f5:7a:6b:b1:c3:69:70:6b:26:ce:
                    bd:79:0b:41:60:0f:4e:04:bd:81:cb:11:5b:78:41:
                    e8:5c:a4:bc:df:cd:87:07:38:46:e8:93:46:0c:fc:
                    2a:9e:d3:ff:5c:c0:b5:7a:1b:e3:96:c0:30:6a:02:
                    7b:41:bb:fc:b7:47:01:5d:50:b8:82:e0:48:26:da:
                    e3:70:8a:cf:dc:df:73:e3:f9:8d:91:8a:a0:ad:34:
                    e4:a7:31:fa:40:54:65:d2:3b:2d:79:49:32:f5:3a:
                    cc:c7:37:c9:3e:75:b8:ce:88:78:91:47:fd:04:a8:
                    11:00:ce:31:b5:dc:1a:19:c1:1e:79:56:e6:30:cf:
                    bf:fe:b9:af:4a:82:ba:a0:43:1c:b3:5f:d3:72:5c:
                    90:5c:3e:61:34:2a:02:8f:57:cf:ce:96:71:ab:eb:
                    c8:51:60:34:b0:9b:4a:4a:c4:54:96:ca:84:b6:30:
                    bc:75:3a:87:de:cb:59:a0:19:01:8d:f0:1d:0e:df:
                    49:e4:83:f9:26:c3:1d:2f:49:40:50:cd:66:3d:3f:
                    7e:5b:11:75:d7:6f:e5:c6:c2:1c:a3:13:21:78:6c:
                    ef:4f:81:ab:39:d5:9e:9c:6b:e4:51:c5:ff:43:30:
                    6f:c3:93:d7:04:61:b3:1e:b9:be:06:75:4f:44:32:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:58:F5:6C:15:D3:30:5E:74:35:D3:C1:67:80:05:DA:68:11:E8:87
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1338::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:87:45:97:27:d9:02:b3:b9:c9:fd:77:02:aa:0e:70:8c:99:
         83:fb:20:86:bc:ff:25:c5:7a:d9:6d:9d:11:8e:b8:06:a8:31:
         31:8f:b9:31:bd:c8:ab:8f:87:5a:46:bb:9b:c2:79:20:9f:8d:
         7c:14:f2:9e:73:af:9e:e6:54:82:72:46:a1:13:08:26:bf:54:
         6b:d7:73:36:46:75:d2:b5:b8:be:42:00:3d:d3:2e:2a:70:cc:
         74:28:9a:91:5c:0b:57:1a:bc:96:05:08:5c:93:22:ca:a7:c5:
         69:5a:f1:83:5b:3d:97:e5:46:a9:cb:47:3c:d7:8c:db:62:8c:
         cf:40:07:dd:47:a5:43:34:c0:a2:97:cc:f5:26:87:c6:0a:dc:
         4c:0e:63:28:3e:86:46:e6:d5:99:cd:53:68:38:4e:fb:4b:7a:
         fd:1e:93:50:59:72:c7:d9:ee:f0:05:3b:74:09:a1:a7:5b:b0:
         b9:c2:13:ca:c8:05:00:3a:f7:fe:22:05:97:70:ba:ad:53:48:
         30:ff:48:cd:2b:3f:f6:1c:5e:55:26:f0:a0:46:6a:4a:a4:0d:
         a6:17:6c:b9:e4:20:0f:4a:ea:68:cf:db:b6:b6:65:5b:65:46:
         24:13:3a:a6:65:c2:cd:a9:35:fe:8f:6f:e1:10:41:97:a1:7f:
         81:c1:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org