Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3132313a3a2f34382d3438203d3e203532333034.roa
File:                     323030313a313339383a3132313a3a2f34382d3438203d3e203532333034.roa (raw, json)
Hash identifier:          WOBNaSw38e2H3EK21KeeZtT2IoIZ1N2Zg1dUdCwBt8c=
Subject key identifier:   F4:91:43:1B:64:96:A5:38:E8:6A:3C:66:CC:54:CB:F2:8D:2D:E1:00
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       3BE673268B249AC35DD1FB408059390DB3CC1746
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3132313a3a2f34382d3438203d3e203532333034.roa
Signing time:             Tue 05 Mar 2024 18:13:04 +0000
ROA not before:           Tue 05 Mar 2024 18:08:04 +0000
ROA not after:            Tue 04 Mar 2025 18:13:04 +0000
asID:                     52304
IP address blocks:        2001:1398:121::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e6:73:26:8b:24:9a:c3:5d:d1:fb:40:80:59:39:0d:b3:cc:17:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Mar  5 18:08:04 2024 GMT
            Not After : Mar  4 18:13:04 2025 GMT
        Subject: CN=F491431B6496A538E86A3C66CC54CBF28D2DE100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:ba:00:28:91:5f:dd:01:1e:d3:9e:1c:11:
                    9c:13:5f:80:7e:d1:80:c6:94:28:1c:f7:c6:d3:84:
                    ac:f5:cc:fd:21:9d:73:b9:db:8c:f0:98:9f:53:8b:
                    33:3a:84:61:17:1b:ad:7f:3a:ba:b1:89:29:14:cf:
                    59:57:e4:1b:dc:cd:21:b3:f4:d3:f5:2c:4f:18:53:
                    d4:cf:c8:02:83:ca:d4:98:3c:08:5f:8c:cd:8f:9d:
                    82:46:a3:0e:8b:f5:5a:fd:ee:1b:c9:07:f2:04:aa:
                    7d:9c:93:f1:ce:b8:75:13:73:25:7d:fd:7e:77:29:
                    f0:5c:8e:ed:51:66:9c:c7:27:f0:93:ac:77:27:a8:
                    12:a9:33:69:88:a8:89:7c:13:49:ca:1d:ef:f5:6b:
                    28:08:80:8f:23:3a:8c:0e:1f:59:38:cd:0f:c4:fe:
                    e3:b6:84:c2:f4:27:5c:9e:7d:9c:43:81:26:d0:31:
                    88:70:66:fd:28:56:b5:83:db:f7:6a:a8:92:55:d6:
                    10:e3:22:fd:fe:bd:91:61:a9:92:66:5d:44:1a:0b:
                    fd:2e:aa:31:b8:07:37:d3:63:7d:62:b2:ac:b8:b2:
                    6b:4a:16:34:96:36:f2:cd:4b:49:58:b6:b7:37:41:
                    c6:41:50:4d:4d:75:77:fe:0c:90:c7:14:b4:eb:c4:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:91:43:1B:64:96:A5:38:E8:6A:3C:66:CC:54:CB:F2:8D:2D:E1:00
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a3132313a3a2f34382d3438203d3e203532333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:22:3b:5f:05:b8:65:00:16:74:86:12:1c:6a:2c:9a:ef:8b:
         56:07:60:74:88:16:ec:46:6b:a1:db:9e:e5:b1:aa:e9:32:df:
         7e:e1:f4:c0:ba:78:6f:dd:bb:1e:48:46:c4:f2:2f:9f:5a:c0:
         3b:20:81:38:0a:53:4f:88:45:e0:fc:b1:db:74:dd:ca:4b:69:
         a3:49:79:f8:4b:a1:a8:ad:60:62:b8:0e:f1:38:b9:ff:47:33:
         2c:62:17:72:1d:85:2a:2d:1e:3a:8b:2e:fb:14:4d:bf:01:71:
         44:18:68:f7:cd:b3:cd:a4:4f:d6:51:9b:88:00:e7:ee:20:fc:
         96:1e:c5:60:7d:38:2f:78:9b:ad:6d:e5:20:6a:f3:47:50:c7:
         22:c9:cc:8d:d4:d6:bd:08:67:5a:5a:c6:ac:52:07:ed:b3:12:
         a9:f1:34:ef:93:46:41:36:ff:be:a3:3d:43:37:d1:42:08:0d:
         8e:f5:f6:98:f2:39:c1:d2:68:74:4b:33:c2:ee:d2:42:62:62:
         2b:15:b1:c0:81:ee:b4:0f:38:7a:1b:bc:5d:c3:b4:27:8d:77:
         9b:9f:45:42:92:bc:8a:29:9b:d3:63:9d:7e:ae:75:fa:49:8c:
         4c:1e:62:52:d0:c8:62:41:28:46:31:f5:17:ae:a7:f7:84:7d:
         5e:d3:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org