Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/323830303a6362303a3a2f33322d3332203d3e20323633323434.roa
File:                     323830303a6362303a3a2f33322d3332203d3e20323633323434.roa (raw, json)
Hash identifier:          8qnwbU2z0tofMCegqKTdVSUvey8xOpPM8++2fB66yvc=
Subject key identifier:   AD:BA:F0:22:24:69:4E:8E:43:28:6E:3F:95:9C:E1:3A:36:B3:D3:5B
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       437B0FC6266362C7ED38E3CF073809821986FE29
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/323830303a6362303a3a2f33322d3332203d3e20323633323434.roa
Signing time:             Tue 05 Mar 2024 17:55:35 +0000
ROA not before:           Tue 05 Mar 2024 17:50:35 +0000
ROA not after:            Tue 04 Mar 2025 17:55:35 +0000
asID:                     263244
IP address blocks:        2800:cb0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7b:0f:c6:26:63:62:c7:ed:38:e3:cf:07:38:09:82:19:86:fe:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Mar  5 17:50:35 2024 GMT
            Not After : Mar  4 17:55:35 2025 GMT
        Subject: CN=ADBAF02224694E8E43286E3F959CE13A36B3D35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:f1:37:bf:68:aa:9d:25:1b:43:18:94:a7:
                    26:27:5e:83:43:2c:2e:4c:d7:16:85:3c:2d:d3:c4:
                    0f:ec:29:4e:13:6b:d4:7e:c0:94:eb:74:2a:5e:9c:
                    eb:03:e1:c4:ec:1d:eb:bc:ea:b9:fd:a6:a2:cf:62:
                    e9:8e:b2:78:d8:30:77:82:c4:5d:a0:ee:ca:95:02:
                    87:d5:89:98:70:ae:88:fd:93:93:9c:f8:27:d4:bf:
                    a3:77:4a:4d:a3:41:27:a7:0e:b6:b1:c8:b4:bd:8f:
                    69:26:e4:5d:c5:0d:a8:ae:56:3a:aa:7d:bf:fb:a9:
                    c0:58:3e:0e:3e:0c:25:03:85:8f:13:3f:45:1d:55:
                    8c:25:91:76:93:7a:d3:1f:16:24:ac:8c:5c:52:fe:
                    ef:bf:9c:1e:5f:4e:f6:0e:47:11:42:67:ec:ee:f5:
                    f4:9c:d9:18:7f:2f:5e:18:9f:d1:07:e0:ab:22:c0:
                    2e:c8:4c:62:94:89:1f:c1:f3:7e:9f:a9:55:4a:d8:
                    02:c8:51:df:01:db:c5:3c:d4:90:02:38:c1:b7:5f:
                    97:0e:9c:14:39:08:80:ad:c7:b1:c9:97:13:68:4f:
                    3c:6d:c0:98:90:39:4e:1e:41:37:44:9f:0f:ac:a2:
                    cd:9a:94:f1:83:9a:3b:bd:9b:e3:87:36:76:ed:e7:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BA:F0:22:24:69:4E:8E:43:28:6E:3F:95:9C:E1:3A:36:B3:D3:5B
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/323830303a6362303a3a2f33322d3332203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:eb:e9:d7:e4:80:75:72:2e:a4:df:96:95:bd:6c:83:94:8a:
         1f:19:42:7a:90:1d:20:63:7a:aa:1f:7f:bd:09:d9:eb:12:59:
         6a:30:bf:28:3a:b7:8a:47:bd:11:c8:fe:d6:9a:81:ce:b6:51:
         cc:79:c6:95:fc:11:cb:c5:b8:f8:e0:ff:d3:ce:1b:15:1e:45:
         32:1e:f7:2a:ea:50:03:1b:3f:7a:d5:15:b5:65:98:c3:f7:79:
         28:82:2d:ca:c8:c5:29:31:26:1b:99:d8:b2:51:8e:43:b3:1b:
         e8:fb:5f:8c:37:c6:fa:0a:49:d2:8c:28:51:65:6d:0b:39:2a:
         22:57:10:7a:a8:2a:81:e2:9a:45:64:8b:c5:79:05:c6:c9:78:
         8d:ee:7f:8f:73:c7:2d:b1:bc:a7:d6:c4:d3:6e:d2:6b:42:84:
         c6:63:12:5b:a6:f1:59:fe:04:e6:bc:91:0e:a1:4f:1a:66:27:
         c8:76:c3:7d:93:0f:20:7d:93:d5:63:3f:c7:ff:5e:2c:5f:6b:
         42:8e:ee:4a:8c:95:19:d6:24:b1:e3:03:fb:81:e6:b5:86:c5:
         35:32:1e:40:a7:0b:ad:ee:6b:bf:08:da:70:c5:f0:1c:4f:48:
         5b:9c:be:e0:50:dc:5d:34:d3:a6:0d:84:c6:40:0c:d2:dc:84:
         23:ed:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:48 2024 by rpki-client on console-fra.rpki-client.org