Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a323030303a3a2f33362d3438203d3e203136363239.roa
File:                     323830303a3539303a323030303a3a2f33362d3438203d3e203136363239.roa (raw, json)
Hash identifier:          p9IEI6xa6BDE7uZmdRAafsC8j2C29gYJhvEyjJJOfoY=
Subject key identifier:   5E:12:36:DB:A6:22:E7:E2:44:2B:2C:84:91:76:29:F4:25:68:75:8A
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7E23373E1AA1E421A1CADE9038919E78BE9299EA
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a323030303a3a2f33362d3438203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:16:58 +0000
ROA not before:           Tue 05 Mar 2024 18:11:58 +0000
ROA not after:            Tue 04 Mar 2025 18:16:58 +0000
asID:                     16629
IP address blocks:        2800:590:2000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:23:37:3e:1a:a1:e4:21:a1:ca:de:90:38:91:9e:78:be:92:99:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:58 2024 GMT
            Not After : Mar  4 18:16:58 2025 GMT
        Subject: CN=5E1236DBA622E7E2442B2C84917629F42568758A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:06:5b:16:0d:75:00:52:40:c2:39:bf:89:
                    f1:7e:a4:92:65:d2:ce:5d:ea:60:8a:11:81:8f:62:
                    dd:cc:45:03:ee:9b:f8:b8:e5:5c:1b:ad:05:33:3d:
                    4c:db:b8:c2:8c:57:21:96:1b:26:97:1d:5d:c3:56:
                    54:c0:9d:8c:d4:09:97:10:6b:ae:e8:79:17:07:d1:
                    24:e8:e8:90:60:ec:d5:e5:40:94:5f:f2:f0:b1:ae:
                    8f:6d:ab:68:88:48:c4:a3:eb:1f:16:19:dc:4e:5f:
                    87:f4:71:85:6f:d5:11:54:37:b2:47:08:e4:4b:66:
                    18:b4:06:a0:6f:78:2e:e4:1f:02:f3:de:ee:e5:c0:
                    73:ba:bc:95:3c:fa:ec:17:92:3d:45:eb:ba:a3:68:
                    f7:48:3c:4f:ce:d3:74:75:6b:3a:48:ea:49:5b:88:
                    f4:29:92:24:36:61:08:b4:37:ab:70:20:8e:53:d7:
                    b0:3b:a4:93:d4:74:a3:6c:6a:49:38:7a:c8:1e:fc:
                    60:94:e9:d5:37:d6:0d:58:49:d3:1c:cf:56:6f:80:
                    ba:3b:f7:dc:f8:2e:e8:ec:b4:34:f5:f1:f0:b7:9d:
                    c1:83:22:01:89:44:33:25:a9:78:0a:d0:af:25:fd:
                    28:c3:f1:2e:a4:ab:56:78:af:6f:c5:72:00:9a:22:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:12:36:DB:A6:22:E7:E2:44:2B:2C:84:91:76:29:F4:25:68:75:8A
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/323830303a3539303a323030303a3a2f33362d3438203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:590:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:8c:9b:50:77:ab:c8:df:a8:1a:ad:d7:1c:23:03:79:01:
         a1:6b:24:ab:73:d7:46:5b:3c:d8:88:4d:7a:5d:c7:04:ce:a5:
         41:22:e3:38:6e:3e:11:ec:43:d3:0c:74:e0:6f:a1:45:43:e2:
         96:2f:3c:5a:86:0c:c5:e8:a5:d2:d1:6d:9a:90:98:dd:96:a4:
         2f:d2:29:d7:4b:66:d5:ef:56:1a:33:65:37:ab:bd:56:80:96:
         2a:c4:70:e9:3a:45:ac:c2:9c:31:4a:53:0a:64:90:d9:ec:12:
         61:79:2d:6c:83:43:ab:3f:b7:41:dd:a2:d3:3b:8e:61:5d:4f:
         12:4f:35:28:b5:bb:9e:dc:c3:6d:4a:8d:6e:48:7a:ab:d1:4f:
         2d:4a:00:98:56:c5:65:b0:18:62:6d:9f:8e:d5:85:e4:cf:87:
         0f:2b:0d:6e:98:a7:49:3b:3f:3c:10:05:2d:4f:1e:46:69:c6:
         cc:74:df:0e:aa:82:76:92:ce:53:e0:3f:8f:45:e8:c1:4e:d0:
         dd:da:cb:07:5e:e3:fd:77:9d:73:76:2f:18:87:c8:4c:aa:72:
         48:d7:3b:72:49:96:00:a1:9a:c0:69:b1:b5:6f:de:f6:06:2a:
         57:c1:83:72:1a:7b:b9:50:77:a2:a2:85:f4:fc:b5:29:e9:a4:
         80:d0:2a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org