Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa
File:                     323830303a3831303a3a2f32382d3634203d3e203237373437.roa (raw, json)
Hash identifier:          g+8vAThyUF/GV7IxZLLLQRetffahHIjDqXqzmANXL0w=
Subject key identifier:   DB:5C:01:E7:C8:E6:24:D3:D6:C3:1E:11:A1:7B:AD:55:27:32:F1:93
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       0DB3C3141E9F15AFB8ACD274FD380243EC766421
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa
Signing time:             Tue 05 Mar 2024 17:52:53 +0000
ROA not before:           Tue 05 Mar 2024 17:47:53 +0000
ROA not after:            Tue 04 Mar 2025 17:52:53 +0000
asID:                     27747
IP address blocks:        2800:810::/28 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b3:c3:14:1e:9f:15:af:b8:ac:d2:74:fd:38:02:43:ec:76:64:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Mar  5 17:47:53 2024 GMT
            Not After : Mar  4 17:52:53 2025 GMT
        Subject: CN=DB5C01E7C8E624D3D6C31E11A17BAD552732F193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:f0:7f:af:88:39:eb:25:de:51:18:0a:e4:
                    fd:7a:d7:b3:1a:67:67:fa:4f:a9:c8:0c:f3:0d:38:
                    d6:de:57:fb:05:34:2e:54:09:73:34:a8:a6:8d:ec:
                    13:68:b6:1b:d3:fa:e8:91:79:5b:c8:11:dd:06:74:
                    af:9d:51:c4:4a:24:6d:79:ff:dc:18:27:e1:89:80:
                    25:c3:18:4e:c4:d4:67:18:13:0a:98:05:bd:bf:a6:
                    84:e2:39:9c:39:79:32:4e:e9:0b:58:41:bc:c5:87:
                    4b:ba:c0:97:f3:3d:98:aa:5f:e0:75:f0:84:c5:48:
                    15:df:53:bd:8f:a2:88:3e:ed:5a:b5:e4:a3:42:2c:
                    0b:5e:28:12:6a:72:a2:31:a6:3b:63:14:1b:06:07:
                    74:81:09:4b:32:00:38:01:0a:d8:96:90:6a:ef:44:
                    a5:e8:df:57:53:2d:7d:72:e8:b2:c8:b6:f7:15:a6:
                    95:5c:26:a3:52:37:1c:78:5c:7a:31:82:9a:97:60:
                    48:0e:6f:50:a3:e0:c1:75:05:eb:85:9a:39:5b:60:
                    a9:25:45:49:d7:8e:d0:44:c6:bb:54:10:4a:13:c6:
                    12:cc:ab:34:e5:0f:dc:a8:f3:0d:2f:ab:05:ac:be:
                    83:fe:0f:48:9b:73:25:3d:b9:7f:29:1e:58:88:37:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5C:01:E7:C8:E6:24:D3:D6:C3:1E:11:A1:7B:AD:55:27:32:F1:93
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/323830303a3831303a3a2f32382d3634203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:810::/28

    Signature Algorithm: sha256WithRSAEncryption
         60:bf:13:6c:a4:15:b4:d0:12:9a:b0:92:af:5c:95:90:cc:99:
         3e:7b:10:d9:ff:1b:9a:36:1f:b4:fd:93:6e:7a:19:7f:23:39:
         53:41:ec:d8:49:f6:df:c8:4f:02:0b:28:6b:d2:6b:78:ec:da:
         b4:ec:d9:a2:e0:61:07:7c:f6:65:61:69:7d:b1:cf:2d:a3:a8:
         22:31:b3:37:2f:d9:91:f8:c3:82:7d:8a:ab:ec:fe:9a:76:4a:
         ea:57:d8:0e:4f:2f:4f:82:e2:8c:b9:25:5d:3f:6f:f8:49:43:
         79:4f:6d:94:5e:39:18:e6:82:99:41:e4:ca:ab:8f:fe:db:18:
         cb:00:af:f0:9f:56:02:77:84:07:ed:d3:81:9b:7b:55:11:79:
         80:61:5f:ea:2c:ce:49:38:5c:93:0a:4c:30:9f:f5:60:3a:56:
         43:54:36:4a:f8:56:d6:15:ba:cd:a4:be:08:1a:4b:c2:af:b0:
         5f:0f:aa:f9:23:cd:d3:20:9e:85:43:28:60:af:a0:46:dc:50:
         ce:95:6d:47:da:cb:9d:a3:f4:f8:e7:46:19:eb:0a:ea:3f:90:
         fb:09:78:33:94:e8:f1:0e:9a:6e:63:c5:c9:79:ab:37:51:f5:
         12:1e:c4:48:70:a8:be:6b:92:11:39:cc:37:35:18:6d:3c:b5:
         45:58:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org