Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/323830333a636636303a3a2f33322d3332203d3e20323639383333.roa
File:                     323830333a636636303a3a2f33322d3332203d3e20323639383333.roa (raw, json)
Hash identifier:          Y+FYHanrB2sHUaoi7eGINPLJzQPPMU8clbMvy+Mvau4=
Subject key identifier:   03:07:30:54:7E:68:D1:65:AD:BA:D0:EA:DF:17:BC:32:61:97:19:0C
Certificate issuer:       /CN=CDE9A086136079BC935532C1329B043B4912BF62
Certificate serial:       4E7355DC2E34B6C7BEB882A39A6C8EF767D4AB2F
Authority key identifier: CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/323830333a636636303a3a2f33322d3332203d3e20323639383333.roa
Signing time:             Tue 05 Mar 2024 17:57:29 +0000
ROA not before:           Tue 05 Mar 2024 17:52:29 +0000
ROA not after:            Tue 04 Mar 2025 17:57:29 +0000
asID:                     269833
IP address blocks:        2803:cf60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:73:55:dc:2e:34:b6:c7:be:b8:82:a3:9a:6c:8e:f7:67:d4:ab:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE9A086136079BC935532C1329B043B4912BF62
        Validity
            Not Before: Mar  5 17:52:29 2024 GMT
            Not After : Mar  4 17:57:29 2025 GMT
        Subject: CN=030730547E68D165ADBAD0EADF17BC326197190C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:f5:a5:b0:f8:d6:26:96:e9:b5:58:9b:e0:
                    c3:cc:2d:8d:2a:c3:9a:97:9b:dd:0f:a7:9e:f2:be:
                    17:32:6b:a0:10:10:45:c7:c2:2c:70:ff:ad:63:a9:
                    f8:54:9e:3a:8e:78:b4:d7:20:17:4e:2e:3a:a4:09:
                    46:05:8d:20:9e:5d:93:5e:a6:a0:2a:08:ec:c3:a9:
                    10:45:eb:ad:34:21:32:aa:4d:93:6b:9e:bf:c0:be:
                    7a:9b:a6:dc:d2:c9:d2:7f:00:6c:0b:5e:e1:d1:ef:
                    b1:73:f9:ce:c8:de:10:d6:90:92:73:99:27:94:9f:
                    fc:51:b6:45:e4:0a:21:67:24:da:41:23:b5:72:11:
                    13:d2:7d:62:dc:6c:69:59:a1:26:95:6a:49:80:f2:
                    15:d6:5e:c3:42:11:5b:ab:ba:47:50:36:ce:5b:da:
                    2a:ff:16:3c:5d:d0:4c:67:5c:b1:df:63:84:15:0a:
                    d6:af:58:9f:3d:d2:f9:6b:e2:18:bd:0c:76:8c:8f:
                    12:e6:a8:8e:54:55:bd:b6:15:e4:31:e9:2a:8a:57:
                    b1:70:50:53:38:1e:1b:69:cc:50:e4:9c:c3:ee:96:
                    49:f6:96:07:07:4f:67:9d:dd:e1:25:85:70:71:df:
                    4c:80:64:e3:97:48:a6:42:50:83:41:6f:95:a6:55:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:07:30:54:7E:68:D1:65:AD:BA:D0:EA:DF:17:BC:32:61:97:19:0C
            X509v3 Authority Key Identifier:
                keyid:CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/323830333a636636303a3a2f33322d3332203d3e20323639383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf60::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:66:a6:d9:de:4b:1d:ea:c0:7b:20:0b:27:97:07:27:04:
         09:17:fe:0f:76:2d:b7:67:ed:ff:7a:c8:c4:fe:ed:88:80:ff:
         c4:8d:2c:32:d1:da:45:93:ba:22:e7:25:80:74:50:73:93:02:
         ae:ce:1e:83:cf:16:16:39:1b:12:b1:99:2b:00:a3:38:5a:df:
         62:75:c8:1a:1a:9d:5e:3a:5c:a5:a4:96:e5:ba:d3:5c:96:d6:
         d9:4d:45:69:01:04:ba:e7:32:93:07:0e:cd:b5:77:68:e0:fa:
         7f:d3:1e:9b:26:2b:3f:88:e9:af:81:06:3e:0c:5f:d9:5f:3e:
         94:6c:11:b8:b9:4e:29:2c:11:5e:1e:d5:1d:7a:e0:cf:5d:bb:
         fb:d0:3a:d3:92:7f:1f:4d:a6:26:07:2b:01:b6:58:c9:bc:06:
         38:39:bc:7a:d7:62:52:7c:6f:bd:f3:47:08:87:bf:d5:24:05:
         1c:fa:26:43:b6:5b:b8:21:36:9e:13:49:c4:6a:b9:1d:c6:27:
         60:1e:de:f0:1e:3a:93:fe:d9:8f:2f:61:a1:2c:7c:76:e7:fe:
         b5:0a:b4:85:f7:57:6a:9a:e2:b8:89:0b:2d:47:a7:f4:20:56:
         67:e0:e2:9e:f9:2e:cd:5d:a1:68:62:d2:4b:67:a4:44:06:f3:
         aa:f5:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org