Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa
File:                     323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa (raw, json)
Hash identifier:          fdS9yZFdiyGFHeJueI5pF1HLX2ce0ObfKkpFA9S8PyU=
Subject key identifier:   05:71:83:15:7C:4F:C8:73:03:18:63:29:BE:60:A5:8B:BD:48:DA:21
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       5462D991AD599AC48BCFD2344EA86CBCCEE23840
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa
Signing time:             Tue 05 Mar 2024 18:17:10 +0000
ROA not before:           Tue 05 Mar 2024 18:12:10 +0000
ROA not after:            Tue 04 Mar 2025 18:17:10 +0000
asID:                     26210
IP address blocks:        2800:88:12::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:62:d9:91:ad:59:9a:c4:8b:cf:d2:34:4e:a8:6c:bc:ce:e2:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Mar  5 18:12:10 2024 GMT
            Not After : Mar  4 18:17:10 2025 GMT
        Subject: CN=057183157C4FC87303186329BE60A58BBD48DA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e6:2c:01:8f:f1:d2:84:c4:18:d9:06:e7:63:
                    b3:29:91:3a:68:ad:fd:ec:7e:f9:a7:66:6d:90:1f:
                    bb:e1:8e:cb:fe:bd:2e:4c:07:eb:40:2a:f8:0f:75:
                    30:74:db:2e:ff:7f:be:df:d1:71:4d:dc:15:7a:86:
                    2b:58:4a:fd:c4:c9:2d:0b:69:31:70:2f:5b:5e:90:
                    d0:52:39:f8:77:fd:74:93:c4:8f:e1:a9:3e:f6:8b:
                    a5:fd:d4:13:59:9c:44:5f:04:86:5e:98:59:be:23:
                    99:86:68:59:71:21:66:ab:a4:36:ef:ac:56:f0:1b:
                    34:96:7e:0a:e9:0a:dc:43:08:4e:d3:65:09:7f:f7:
                    7d:03:77:c4:0c:b4:3d:86:9c:74:b9:72:f1:81:28:
                    19:af:c4:72:e5:f6:9b:10:3e:39:01:96:72:b6:b8:
                    a0:6f:e1:d6:7b:48:43:1c:7d:cd:8e:c1:d6:e7:20:
                    70:99:d8:00:12:29:2b:4c:77:06:43:07:46:75:55:
                    08:45:02:f5:22:2e:cf:de:7b:a1:e0:69:54:13:f7:
                    c0:dc:59:2b:69:62:fa:31:ae:ef:92:64:30:84:50:
                    64:60:19:ba:70:85:56:d4:ba:d7:4b:c2:41:a4:5e:
                    b0:26:9c:bc:24:ad:94:12:04:26:85:52:df:31:2b:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:71:83:15:7C:4F:C8:73:03:18:63:29:BE:60:A5:8B:BD:48:DA:21
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a31323a3a2f34372d3438203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:bd:72:72:c0:f2:5a:48:a8:48:a9:95:a7:d2:5c:3d:6e:
         af:b2:af:00:cb:4b:1e:b0:4b:1f:20:46:da:bd:ce:8e:e3:00:
         cd:0c:b1:b3:ef:ec:f7:1f:3f:d4:8c:3d:77:e1:36:8b:00:91:
         cc:99:be:04:78:89:6c:ee:ff:a5:ea:48:60:91:66:c7:00:9e:
         66:39:c9:0c:18:70:d8:b3:e4:85:61:ab:e7:fa:d0:1b:57:7e:
         2a:07:d1:9b:33:4e:ae:b6:57:8f:91:e9:c2:4c:dd:6a:10:ae:
         fe:68:79:49:fb:c5:d3:63:a8:ee:31:a9:f6:b6:75:a6:53:ad:
         97:1d:24:45:79:8d:73:40:f9:22:91:ae:9c:8f:18:45:78:ff:
         e0:9a:c5:8a:2c:4d:f1:c0:e9:79:59:48:10:62:49:d6:f5:9e:
         fd:1e:5c:b5:1f:d8:43:51:a7:fe:1e:10:4a:df:c4:96:4d:08:
         35:0a:ad:0b:48:e2:c1:1f:52:20:e4:01:81:79:af:b5:65:f5:
         8d:2a:8b:9c:34:9d:16:b6:88:86:6c:9d:93:84:97:13:69:a1:
         ec:40:66:d9:98:14:db:c6:cb:1c:e5:7b:2d:e3:8f:dd:0d:61:
         e0:93:c2:00:4a:08:58:fe:7e:9a:b5:e2:cd:2a:08:dc:52:1f:
         63:44:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:06 2024 by rpki-client on console-fra.rpki-client.org