Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa
File:                     323830303a3339303a3a2f33322d3333203d3e203235363230.roa (raw, json)
Hash identifier:          mOIcJqVI0t0ARBg1PrZA5Qh6R7IQd2SVjst8uCDq948=
Subject key identifier:   3D:0B:B5:D1:F3:53:6C:92:D7:BD:45:14:86:10:C9:FB:B1:2D:FD:F4
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       72AD672835022BB9E71D3CE06B75A8FCF585224F
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa
Signing time:             Tue 05 Mar 2024 18:16:25 +0000
ROA not before:           Tue 05 Mar 2024 18:11:25 +0000
ROA not after:            Tue 04 Mar 2025 18:16:25 +0000
asID:                     25620
IP address blocks:        2800:390::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ad:67:28:35:02:2b:b9:e7:1d:3c:e0:6b:75:a8:fc:f5:85:22:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Mar  5 18:11:25 2024 GMT
            Not After : Mar  4 18:16:25 2025 GMT
        Subject: CN=3D0BB5D1F3536C92D7BD45148610C9FBB12DFDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:d3:52:ee:77:54:12:a1:ce:71:3a:7b:a9:
                    30:c7:62:b6:15:2d:75:8a:35:c2:1c:bf:f4:a1:53:
                    27:53:cd:ae:ba:de:d8:f3:b7:58:20:0c:4e:2a:45:
                    eb:23:9a:28:23:e1:d7:78:54:37:0d:43:90:f0:58:
                    5b:3f:3d:08:3b:7d:69:df:05:48:46:10:dd:4f:42:
                    a5:37:15:0b:5c:38:b2:da:ee:4a:f4:03:80:2f:6b:
                    61:d7:0a:27:e0:a2:cd:42:7d:6c:2e:ee:c2:6f:37:
                    48:17:3b:c7:d3:09:27:77:4c:da:0a:41:95:ee:5a:
                    c1:aa:72:4b:47:30:9c:fe:e0:08:9e:93:5b:64:c3:
                    83:f9:2e:2b:76:d2:0f:4b:43:31:60:62:dc:a8:8c:
                    07:36:30:b3:38:d0:5d:03:02:38:71:85:92:b5:56:
                    c9:32:c2:92:b6:44:e1:2b:46:d0:7a:b2:72:36:6a:
                    a9:fe:60:2d:52:a0:d0:54:f4:69:0c:5e:ac:97:18:
                    6d:88:9c:0e:0d:f2:35:45:8c:01:a7:8e:c1:70:c4:
                    7f:46:a2:09:7f:b0:11:81:db:54:0b:6c:11:2b:e0:
                    6f:00:47:d6:b3:53:3f:2c:2b:d2:1e:2d:c4:ab:e3:
                    43:c4:65:c0:23:6a:cf:14:a1:6b:0f:40:e8:df:17:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:B5:D1:F3:53:6C:92:D7:BD:45:14:86:10:C9:FB:B1:2D:FD:F4
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/323830303a3339303a3a2f33322d3333203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:390::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:1f:4f:4d:fc:76:d6:9e:98:8a:ee:23:99:3a:e5:1e:f7:bd:
         11:7e:9a:8d:81:d5:d1:52:fb:7f:35:34:91:a6:e8:d0:7e:87:
         30:9d:52:84:92:d3:d1:af:b6:e0:ee:83:dc:59:ea:dc:a8:3e:
         a9:39:a7:fc:ed:88:23:99:9b:8e:ec:6f:f1:f1:8c:ff:03:7d:
         7d:c4:7b:a2:58:ab:95:b6:83:35:e7:e7:75:2b:84:ac:b1:01:
         82:8a:1b:5e:e0:c2:95:fb:0f:be:f7:dc:26:d6:9a:ce:26:96:
         12:5a:e2:89:5f:3b:96:3b:85:b2:c7:af:05:e0:3b:03:27:b2:
         bb:75:95:4b:08:8e:49:65:2f:f2:40:a1:a0:bf:66:75:c7:f7:
         f4:1b:79:34:73:20:bd:80:86:23:6c:09:b8:15:aa:c2:02:cf:
         cc:45:52:4e:e1:93:26:74:19:69:ff:0b:df:30:03:51:02:35:
         82:0b:28:12:ca:38:ac:95:68:1c:34:17:25:0c:1a:df:4c:cf:
         0c:58:0f:63:d2:29:49:6f:95:40:0d:0e:fe:a2:57:03:75:ba:
         62:c4:97:be:45:b5:d6:11:ee:45:3f:7b:5a:a8:ba:39:3e:e8:
         9b:63:a5:5c:09:b8:3e:32:8d:fe:c6:c4:b4:6d:29:59:d4:75:
         95:e3:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org