Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830303a3331303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          YYP81SxkYLqOsKB5cuYVITiMoJuAefRcJDfIEpdYOB0=
Subject key identifier:   F2:82:79:C6:02:0F:9E:E6:A6:A8:21:73:BB:7B:1E:CE:68:D1:E1:80
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       24DDEDDB357CE597D81C2A7A58F0CE4B58651A35
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:48 +0000
ROA not before:           Tue 05 Mar 2024 17:55:48 +0000
ROA not after:            Tue 04 Mar 2025 18:00:48 +0000
asID:                     262589
IP address blocks:        2800:310::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dd:ed:db:35:7c:e5:97:d8:1c:2a:7a:58:f0:ce:4b:58:65:1a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:48 2024 GMT
            Not After : Mar  4 18:00:48 2025 GMT
        Subject: CN=F28279C6020F9EE6A6A82173BB7B1ECE68D1E180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:53:14:b5:72:09:79:b8:00:aa:1c:aa:f6:43:
                    39:41:a8:2f:e0:1c:15:a7:3c:18:f5:95:e7:b5:4a:
                    ae:aa:76:34:52:75:66:3e:05:ea:50:32:47:89:9d:
                    bb:9f:e7:c1:7e:10:ae:70:80:38:24:be:f8:c8:44:
                    81:55:3e:f1:4a:9a:77:57:a4:7c:2c:b1:33:7a:a8:
                    86:95:c7:27:5f:39:6b:1c:fc:04:b3:8f:d8:ea:e0:
                    32:2b:5a:1d:e4:07:65:a3:d6:45:b4:bf:e4:30:4f:
                    ff:5d:18:a8:e7:10:13:cf:aa:4a:f2:ba:3f:5c:2c:
                    ca:c3:dc:a1:2e:79:51:e0:31:44:5c:4f:4c:04:41:
                    fb:30:b0:34:95:b5:d9:bb:96:b1:5d:7c:c1:66:12:
                    78:4b:1e:4c:e8:92:8d:4c:82:09:77:d8:8d:38:a7:
                    bb:7d:89:d9:7e:30:93:92:32:dc:27:5a:e2:fa:97:
                    07:1c:4a:e1:bc:9a:73:a2:2c:0d:b8:96:9a:4b:76:
                    9f:55:31:0e:29:dd:85:a7:f3:81:57:a4:6a:4f:61:
                    d5:86:92:7a:26:ed:5e:78:7c:d4:ff:0c:20:18:1a:
                    8d:73:16:9b:d9:19:a7:0a:f3:b7:78:7b:a1:db:34:
                    64:f7:e4:c9:c1:03:3c:27:e9:32:34:1f:ea:9a:19:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:79:C6:02:0F:9E:E6:A6:A8:21:73:BB:7B:1E:CE:68:D1:E1:80
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:cf:88:aa:2a:8e:1f:7b:78:7b:4a:88:d0:2b:8c:10:3b:
         19:6f:2b:95:4b:1b:2a:a0:cd:bb:21:c5:48:12:59:c3:68:fe:
         95:76:23:61:fe:35:6a:4c:34:32:d9:b3:61:4f:97:00:af:c7:
         24:03:b6:4d:43:76:23:de:f7:8d:03:34:7c:b0:ad:d2:e3:f7:
         46:14:f7:be:81:d1:f3:e6:33:1b:77:ad:52:b1:88:7a:0a:a6:
         fa:c4:1c:b7:fb:57:e7:0f:98:5d:a5:f0:ce:a8:55:bd:b5:ec:
         64:c0:13:e6:00:ff:ad:55:de:09:99:9a:26:f6:c1:ab:fc:7c:
         79:d2:01:dd:c8:47:3e:cc:2d:be:c3:ab:ba:0a:57:5c:14:41:
         07:de:15:bf:cb:86:b8:30:0b:cd:22:dc:8c:fc:9c:17:73:d0:
         e7:18:d5:09:ac:97:6a:50:a3:9f:e0:a6:92:13:50:01:7f:6b:
         7d:a4:1f:d0:da:3d:cb:c5:48:b4:93:1b:24:fe:b2:0c:69:f2:
         ee:40:d5:35:f1:1f:a1:7d:89:b9:8b:e8:e2:7c:37:3c:a8:da:
         d9:e7:f6:b0:f2:b5:83:82:97:df:cc:65:6b:bf:d7:19:bb:f1:
         cf:68:e8:07:68:48:8c:da:40:b8:d3:83:5e:18:99:61:c9:aa:
         ce:fd:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:35 2024 by rpki-client on console-ams.rpki-client.org