Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/323830303a3832303a3a2f33322d3438203d3e203130363937.roa
File:                     323830303a3832303a3a2f33322d3438203d3e203130363937.roa (raw, json)
Hash identifier:          ZLnJnP9FN9U0Vu9CyWPTMF5konVZq5/kv18/hCvKauw=
Subject key identifier:   9C:C2:E5:AD:CD:20:C6:FA:5C:8A:B1:32:77:23:67:76:DB:80:CB:72
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       26C508D6F4D83823F4E7F3501DE11F0B745392F1
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/323830303a3832303a3a2f33322d3438203d3e203130363937.roa
Signing time:             Tue 05 Mar 2024 18:22:07 +0000
ROA not before:           Tue 05 Mar 2024 18:17:07 +0000
ROA not after:            Tue 04 Mar 2025 18:22:07 +0000
asID:                     10697
IP address blocks:        2800:820::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:08:d6:f4:d8:38:23:f4:e7:f3:50:1d:e1:1f:0b:74:53:92:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:07 2024 GMT
            Not After : Mar  4 18:22:07 2025 GMT
        Subject: CN=9CC2E5ADCD20C6FA5C8AB13277236776DB80CB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:6b:a6:69:c8:4c:ae:6b:22:92:ec:25:5d:
                    65:b1:6a:f0:1c:26:d3:94:3f:b2:d7:f7:1a:cf:57:
                    7f:d8:f0:dc:6f:27:2b:17:a1:27:74:43:f6:52:67:
                    f2:08:08:52:0d:04:1c:5e:85:60:28:de:bf:4f:32:
                    f1:56:f9:3c:ed:69:43:87:57:8e:2f:4a:12:01:67:
                    f6:48:a0:d4:1c:9d:45:25:73:7d:47:48:88:69:11:
                    17:f6:af:c4:fd:02:a9:14:c5:ad:22:47:e8:0b:d6:
                    2b:06:04:52:8d:f9:b1:1d:7a:64:69:5f:d6:ed:b2:
                    ca:46:49:04:e2:31:b5:a6:72:43:44:2c:2d:d0:da:
                    d4:53:60:b9:8b:fb:9e:c9:4f:32:be:31:56:af:cc:
                    54:a5:0c:27:72:d4:72:bd:5f:56:66:35:d5:33:05:
                    27:9f:e8:5b:00:47:0b:0b:f8:00:af:14:c5:6a:3f:
                    40:02:e0:22:b9:93:25:d1:ce:ee:7c:0a:54:15:27:
                    66:0a:88:78:69:74:25:b4:6f:b1:9e:c3:ef:ef:0f:
                    1f:94:aa:ca:06:37:9f:ca:89:c8:74:57:8b:10:c5:
                    f6:aa:61:8a:51:58:e6:ca:6c:a2:ab:0a:37:01:16:
                    eb:d5:3f:7a:79:fa:80:c9:a0:eb:2e:41:5a:75:f5:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C2:E5:AD:CD:20:C6:FA:5C:8A:B1:32:77:23:67:76:DB:80:CB:72
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/323830303a3832303a3a2f33322d3438203d3e203130363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:46:2d:a2:7a:15:9a:b4:91:08:3e:41:df:43:18:11:32:
         28:1f:b2:3f:fe:3c:ea:0c:1a:35:3c:ba:1c:d1:1c:42:de:a2:
         27:67:62:75:2d:5a:24:40:98:7d:f2:79:2d:6a:99:10:0a:dd:
         8c:4a:f4:fa:24:c5:3d:88:8c:b7:c6:cf:fc:ea:99:a2:9c:9c:
         ad:b3:96:3b:ab:32:31:3b:75:3c:8c:9a:17:b9:f3:53:75:b8:
         a8:e8:d8:dc:77:db:04:4e:12:d9:84:e8:4e:78:aa:51:42:89:
         de:49:f7:ab:fb:f3:fc:84:50:ee:f2:ac:05:70:91:9f:2f:ac:
         44:5c:c8:9b:37:83:19:de:e0:7a:d8:52:88:7e:47:6e:3e:c4:
         e8:0e:6d:6c:bc:9a:e6:d6:6e:a1:f7:5f:56:7c:d4:56:2f:93:
         82:a7:15:5e:76:c4:f7:fa:6b:ac:9b:b9:5a:a8:79:f1:11:3c:
         87:23:57:43:8f:57:09:f2:31:3d:96:d4:76:13:81:85:9c:7d:
         23:9f:42:d0:5c:48:28:d1:a0:83:8a:60:82:3f:c0:71:64:5e:
         eb:d8:1b:26:f9:d5:5f:e3:7c:18:6f:ce:a9:87:51:ac:5c:0f:
         6f:cb:53:0f:14:53:04:9d:d3:3c:0c:51:49:ab:04:17:d3:2f:
         d3:af:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org