Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/323830303a6339303a3a2f33322d3438203d3e20323633363839.roa
File:                     323830303a6339303a3a2f33322d3438203d3e20323633363839.roa (raw, json)
Hash identifier:          Etf0OJlpVKOD/p97fsTMOJzsikxDe9I0kuXemxc2y8I=
Subject key identifier:   0E:92:2F:34:94:5B:DA:12:F4:3C:47:48:FC:FF:54:DB:2C:61:3B:62
Certificate issuer:       /CN=EB77D3E7DB16B730477067431EBB6F0C28C23852
Certificate serial:       19B129F36FE82C9087C26AC29A9BDFA1F8648B27
Authority key identifier: EB:77:D3:E7:DB:16:B7:30:47:70:67:43:1E:BB:6F:0C:28:C2:38:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/323830303a6339303a3a2f33322d3438203d3e20323633363839.roa
Signing time:             Tue 05 Mar 2024 17:43:24 +0000
ROA not before:           Tue 05 Mar 2024 17:38:24 +0000
ROA not after:            Tue 04 Mar 2025 17:43:24 +0000
asID:                     263689
IP address blocks:        2800:c90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b1:29:f3:6f:e8:2c:90:87:c2:6a:c2:9a:9b:df:a1:f8:64:8b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB77D3E7DB16B730477067431EBB6F0C28C23852
        Validity
            Not Before: Mar  5 17:38:24 2024 GMT
            Not After : Mar  4 17:43:24 2025 GMT
        Subject: CN=0E922F34945BDA12F43C4748FCFF54DB2C613B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:db:61:4f:ac:d3:6b:94:00:38:5c:21:1d:
                    03:c5:26:24:26:d9:11:55:d4:14:ae:5c:79:92:c6:
                    64:76:32:22:7c:d2:2f:24:e5:a7:9e:89:77:30:66:
                    c5:6d:9a:1a:a1:7c:27:85:97:cd:43:50:38:02:34:
                    be:cc:db:aa:90:d3:f4:1d:ec:fd:d2:91:0e:75:92:
                    3b:fe:65:85:50:11:9b:1e:42:11:c5:a6:f0:c1:a5:
                    a6:00:4b:8f:55:ca:0b:c9:f5:47:df:90:ad:14:11:
                    4d:68:c0:b6:0b:cc:76:07:dd:d9:81:c3:4a:6c:8d:
                    2f:39:91:e2:fa:d5:cc:97:3c:85:5c:09:fd:ed:8a:
                    e2:fd:48:20:33:90:51:8a:67:15:3b:77:14:84:5d:
                    28:68:ce:9f:8a:a3:2c:2c:2a:e5:2b:7e:7f:d7:56:
                    04:c2:dc:f6:21:e4:26:d1:ab:0c:05:31:47:bd:5e:
                    08:fe:05:a1:c3:7b:7e:7a:a0:12:db:e2:dc:14:a0:
                    49:20:cb:da:e0:d9:13:fa:76:17:73:30:0c:b3:22:
                    b9:0a:25:dc:f1:40:e1:84:85:03:e9:77:c3:cc:34:
                    cf:3f:f6:08:ca:00:05:d8:6d:bb:54:e2:18:3f:85:
                    35:cd:fb:47:c4:55:20:74:15:67:d4:23:1f:cc:d5:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:92:2F:34:94:5B:DA:12:F4:3C:47:48:FC:FF:54:DB:2C:61:3B:62
            X509v3 Authority Key Identifier:
                keyid:EB:77:D3:E7:DB:16:B7:30:47:70:67:43:1E:BB:6F:0C:28:C2:38:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/323830303a6339303a3a2f33322d3438203d3e20323633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:10:ab:bf:38:00:5f:35:2d:bf:ed:ad:c0:1f:88:c7:d4:99:
         32:cf:19:4d:6c:77:6d:9b:87:83:e0:d6:e8:10:22:86:c6:b8:
         6b:59:bc:ce:a0:34:f8:3a:8e:27:1e:ce:fd:9e:0d:d6:51:32:
         8a:f7:32:a2:46:08:1e:27:9e:33:1b:a3:41:01:df:8b:80:56:
         a9:0f:85:e4:4d:6c:be:f9:2d:63:92:bf:11:b1:69:ab:45:93:
         d4:52:ac:f4:82:06:cd:89:d1:8a:a6:1f:37:41:e4:2f:c1:21:
         d8:53:a0:75:3d:8d:8e:d7:4b:03:49:10:2d:d0:9a:96:6b:19:
         45:b6:18:63:44:c7:8a:4d:f9:c4:c7:4e:87:a9:0c:68:c3:ea:
         6e:f1:03:12:70:82:d1:c9:9d:8d:ef:8c:74:af:9f:dd:c7:3c:
         b3:e2:4f:a8:e1:50:52:e7:0f:51:74:2d:a1:d2:c0:c2:46:a2:
         4c:37:39:d1:d9:47:52:06:25:64:6a:a0:5a:ea:2e:89:79:9a:
         37:25:90:f2:15:2b:8f:c5:0d:2e:e8:61:89:79:1c:8b:2b:bb:
         43:f9:95:4a:bf:72:dd:ab:ba:a2:4e:cc:50:19:ee:07:f2:0c:
         ba:f1:1a:dc:cc:92:63:f9:23:be:bc:33:37:05:be:92:d0:c2:
         70:82:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org