Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36333a3a2f34382d3438203d3e203532323734.roa
File:                     323830313a303a36333a3a2f34382d3438203d3e203532323734.roa (raw, json)
Hash identifier:          h5m8eQpp4EK59KtnpUJlcdFlJfMALxxgOlG5GVD3lio=
Subject key identifier:   3E:23:2B:E4:24:B1:19:EC:BC:DB:8A:43:EA:78:AA:E2:60:03:FE:A3
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       7417EF38BD64C115B9FFE50994A49BC94F452C90
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36333a3a2f34382d3438203d3e203532323734.roa
Signing time:             Tue 05 Mar 2024 17:39:51 +0000
ROA not before:           Tue 05 Mar 2024 17:34:51 +0000
ROA not after:            Tue 04 Mar 2025 17:39:51 +0000
asID:                     52274
IP address blocks:        2801:0:63::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 10:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:17:ef:38:bd:64:c1:15:b9:ff:e5:09:94:a4:9b:c9:4f:45:2c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Mar  5 17:34:51 2024 GMT
            Not After : Mar  4 17:39:51 2025 GMT
        Subject: CN=3E232BE424B119ECBCDB8A43EA78AAE26003FEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:b2:61:e9:85:f2:52:fd:e4:a4:87:99:d2:
                    24:78:dc:39:a2:0a:db:65:b5:3c:19:64:58:52:24:
                    33:ac:9d:17:03:ec:32:78:77:d3:c8:2c:cc:cd:20:
                    9d:72:a7:cf:e7:83:3a:c5:f0:a9:f1:5e:aa:c0:a0:
                    2a:e7:dc:b4:7f:03:bc:cb:8e:de:d5:f6:58:70:f6:
                    16:67:62:59:b7:51:69:cf:dc:6e:03:8e:67:3f:ea:
                    55:68:b2:19:8d:91:d4:89:21:90:98:38:20:ac:e7:
                    62:5c:63:4b:de:b3:19:b7:57:e4:fa:0c:91:c1:e3:
                    11:6a:9d:79:f5:31:7e:f6:4a:99:bb:40:61:ec:6e:
                    79:61:16:3b:23:a1:97:41:03:e4:bf:3a:69:a5:03:
                    e7:f3:ae:f8:d6:b6:12:c5:bd:1a:ac:ad:19:2c:30:
                    1f:55:8e:4c:cd:5b:a6:5a:c4:47:58:40:ec:c2:8e:
                    bf:b9:36:9d:c8:98:eb:05:f1:80:5a:20:0c:90:22:
                    a4:1e:da:04:84:65:51:e4:7c:66:61:c5:2a:f9:69:
                    9d:8a:50:9a:ba:ca:75:3d:e0:84:99:04:91:b6:65:
                    72:24:5b:0f:58:ac:59:d5:ec:17:60:b6:24:4f:2c:
                    a6:c6:1d:ab:99:21:50:bd:49:4c:20:14:13:6f:39:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:23:2B:E4:24:B1:19:EC:BC:DB:8A:43:EA:78:AA:E2:60:03:FE:A3
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36333a3a2f34382d3438203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:63::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:70:47:86:bb:d6:87:20:8f:9e:14:e1:3a:93:78:19:fc:2f:
         cd:84:73:f2:37:ab:23:aa:51:f5:e3:c2:34:e5:7d:4f:3b:c6:
         7a:55:8e:af:3e:2d:f8:71:0e:66:16:45:05:0a:fb:c5:a1:22:
         f1:b0:84:b7:d9:db:16:0b:ea:47:b9:31:be:38:5a:9b:d4:09:
         f5:d5:b9:7e:f6:04:64:21:7c:fa:b9:ee:ca:26:00:95:00:bf:
         d9:cd:1b:e8:84:03:24:78:df:e9:41:54:9c:4e:4a:74:6a:ee:
         4f:2b:c3:c8:1e:fb:7d:8c:64:01:6d:90:97:93:44:e5:28:e0:
         36:91:6c:c0:9b:d2:48:c8:eb:56:85:d6:2e:4d:3e:7b:88:2d:
         be:87:30:8c:96:be:82:f1:b4:89:23:de:a6:f5:37:9e:b5:e9:
         32:36:d1:1e:38:ba:8f:3b:e6:a5:cc:26:d2:9b:1f:a2:22:2c:
         eb:c0:84:6e:17:89:72:34:85:06:fc:47:be:26:5d:79:53:d5:
         8a:2a:20:ed:eb:22:f8:74:7c:62:64:f6:0f:e2:ab:33:ff:cb:
         50:d0:f4:72:88:17:69:54:8f:6b:f3:5f:f7:90:d7:d1:d1:8e:
         00:43:fc:94:a4:35:79:bd:81:ae:fa:b5:52:68:34:a0:9b:af:
         55:d2:b1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 19:23:44 2024 by rpki-client on console-fra.rpki-client.org