Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/323030313a313366383a3a2f33322d3438203d3e203237383137.roa
File:                     323030313a313366383a3a2f33322d3438203d3e203237383137.roa (raw, json)
Hash identifier:          OmGwimyhH2ohMAOVHfISUoz2XMURqc+T8rweSjnKGTg=
Subject key identifier:   83:8A:0F:B5:AC:15:63:90:F7:4F:C1:C8:46:62:94:4B:E1:4A:10:7A
Certificate issuer:       /CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
Certificate serial:       0AC27CCCD35EA7C4F1F01F40EA5E5B2A740BF5F8
Authority key identifier: F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/323030313a313366383a3a2f33322d3438203d3e203237383137.roa
Signing time:             Tue 05 Mar 2024 18:16:57 +0000
ROA not before:           Tue 05 Mar 2024 18:11:57 +0000
ROA not after:            Tue 04 Mar 2025 18:16:57 +0000
asID:                     27817
IP address blocks:        2001:13f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c2:7c:cc:d3:5e:a7:c4:f1:f0:1f:40:ea:5e:5b:2a:74:0b:f5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
        Validity
            Not Before: Mar  5 18:11:57 2024 GMT
            Not After : Mar  4 18:16:57 2025 GMT
        Subject: CN=838A0FB5AC156390F74FC1C84662944BE14A107A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:21:0d:ef:c1:50:24:b4:bd:38:e7:81:87:
                    de:02:0e:8e:14:50:38:2a:56:a9:40:85:e0:30:32:
                    29:09:6a:5d:07:78:8f:f1:25:e6:49:be:51:d6:24:
                    e1:5b:76:76:72:c4:31:a5:63:1d:12:54:b7:c7:77:
                    7b:30:71:cb:a5:06:4a:e5:17:79:73:6c:39:69:e2:
                    c2:ca:95:6b:df:21:c6:d1:a8:e6:2c:37:6f:7b:a0:
                    f8:cd:93:de:b5:eb:f2:6c:0c:a3:41:59:3e:cd:c1:
                    69:3e:14:fa:3f:fd:b3:b8:95:57:5a:3e:15:05:96:
                    9f:05:87:74:cd:7d:ad:a2:c0:79:f2:99:28:55:0b:
                    9c:80:3e:5f:2d:29:e5:7e:cb:45:7d:49:df:d2:d7:
                    6b:eb:e5:3e:5a:05:e8:39:77:9c:fd:34:dd:67:b5:
                    86:8e:0c:1a:21:d0:a6:57:bb:6a:f3:ea:af:fc:f9:
                    a8:3a:ce:3e:f6:c2:76:91:dc:48:d9:c0:70:6b:dd:
                    48:5f:ca:90:a1:27:8a:45:20:be:7e:69:d6:05:d1:
                    b2:21:30:56:8b:c3:16:6c:a7:d8:f8:87:b1:30:b6:
                    cb:42:4c:8b:53:b3:c7:30:6d:99:c3:b9:48:b6:da:
                    d1:94:8e:61:2f:ed:71:a4:9c:6a:61:20:76:a8:b6:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8A:0F:B5:AC:15:63:90:F7:4F:C1:C8:46:62:94:4B:E1:4A:10:7A
            X509v3 Authority Key Identifier:
                keyid:F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/323030313a313366383a3a2f33322d3438203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:e1:89:1a:61:08:97:33:91:40:51:f8:a8:59:38:1d:c0:46:
         47:da:df:c7:c4:cb:69:f1:45:c1:c1:cb:13:61:ed:53:23:46:
         b3:95:a3:47:9c:8c:d7:3a:0f:63:8c:be:05:c0:35:ce:b0:77:
         65:f6:29:d9:d2:7b:92:d8:d2:57:41:4b:c7:ec:2e:03:41:dc:
         e6:03:2e:4e:a2:f6:e9:90:32:ea:dc:61:f1:a5:63:0f:ec:f9:
         01:f8:28:b5:35:78:52:a3:0a:e0:c6:bc:11:98:d5:20:89:ac:
         f5:01:17:9e:42:68:1f:71:e1:08:2d:e4:12:aa:e0:60:37:07:
         0f:fd:de:04:8d:55:13:02:92:97:75:37:0c:58:d9:d5:31:bb:
         a3:13:00:d7:37:22:98:45:11:88:96:8a:0d:2d:18:ef:d8:11:
         0b:82:37:15:06:42:b0:fe:34:2e:dc:d9:00:b0:1c:9b:78:b1:
         7b:43:87:35:33:55:ff:fc:b2:cd:ba:69:18:15:00:94:b5:13:
         21:f7:76:32:9f:06:9e:fa:fb:e1:31:47:36:43:d6:d2:57:78:
         fa:20:34:d1:c0:49:47:f8:5d:8d:30:29:2a:dd:a8:58:98:da:
         2c:bd:53:e4:4b:37:43:8e:99:14:3a:f7:2b:00:e6:81:4c:ae:
         1b:e3:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:34 2024 by rpki-client on console-fra.rpki-client.org