Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3332203d3e203237393935.roa
File:                     323830303a3534303a3a2f33322d3332203d3e203237393935.roa (raw, json)
Hash identifier:          6KBMq9sro9pOfqaGgdawBysdpOY5N8ni5cmsT/1V6L4=
Subject key identifier:   4C:C6:98:FC:0D:E2:42:E7:81:8A:57:2E:97:55:F5:63:01:F6:05:7C
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4396A5402A22769103DCDA7B562D02A6C9E3B58D
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3332203d3e203237393935.roa
Signing time:             Tue 05 Mar 2024 17:47:51 +0000
ROA not before:           Tue 05 Mar 2024 17:42:51 +0000
ROA not after:            Tue 04 Mar 2025 17:47:51 +0000
asID:                     27995
IP address blocks:        2800:540::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:96:a5:40:2a:22:76:91:03:dc:da:7b:56:2d:02:a6:c9:e3:b5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:51 2024 GMT
            Not After : Mar  4 17:47:51 2025 GMT
        Subject: CN=4CC698FC0DE242E7818A572E9755F56301F6057C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:03:d1:46:99:fe:48:12:4b:7f:fb:59:0d:b6:
                    0e:f2:1c:fe:e6:7d:cc:44:88:33:af:53:45:e9:f9:
                    d6:74:6b:d8:27:91:27:5f:de:8a:b3:dc:ba:1c:8e:
                    19:49:e0:2a:f5:17:2f:e2:7c:da:5e:98:33:12:d0:
                    05:a2:37:c2:b1:06:9d:c5:fe:f9:59:e9:4c:c4:b3:
                    ad:4b:61:e0:0b:a0:f1:53:2b:23:25:ba:df:0d:86:
                    29:f7:ee:f7:b0:10:bd:5d:92:ed:a0:1f:6d:7f:31:
                    ca:dc:b5:84:3d:13:a3:08:4e:fd:aa:0b:00:dd:da:
                    d5:82:1a:d6:b1:5b:0b:e5:24:d6:b5:24:cf:5b:6f:
                    11:b3:83:e8:ec:dd:0e:be:1e:05:7e:6e:d6:36:ef:
                    dc:86:c1:34:c8:81:83:6c:58:ee:4b:4e:97:13:a0:
                    62:e5:76:1e:66:78:11:7c:9e:43:17:40:35:23:66:
                    75:e3:12:e9:9f:b6:cf:64:8c:84:95:84:31:6c:29:
                    f3:35:e2:0d:cb:9e:03:d5:df:5d:03:b3:12:5b:47:
                    ef:88:da:37:bc:37:eb:1e:08:14:e1:24:3f:f9:96:
                    89:42:c8:7d:e5:db:4a:50:e9:c0:a7:58:15:c1:2e:
                    0b:70:03:1e:55:da:9e:b0:af:3c:80:0b:1e:0b:3d:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C6:98:FC:0D:E2:42:E7:81:8A:57:2E:97:55:F5:63:01:F6:05:7C
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/323830303a3534303a3a2f33322d3332203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:540::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:0c:84:2d:ec:b6:0c:3b:a0:0e:37:e8:78:9a:da:15:dd:7a:
         f7:e8:e4:f5:86:91:56:56:dd:75:58:16:44:54:a3:b2:15:46:
         d1:61:3e:34:39:75:f1:78:05:5d:e8:55:10:00:a5:aa:f9:bd:
         93:23:80:df:c4:8b:b3:46:b2:fa:cf:c4:a2:24:b2:f1:f7:5b:
         0b:61:de:3b:e0:12:b6:b2:96:4c:36:12:9f:3d:4b:bb:17:bd:
         87:e0:3f:c9:95:7b:42:e0:86:a9:6e:75:71:67:aa:72:94:3f:
         52:d6:1c:c4:9c:8a:76:ca:cd:33:b9:d2:d4:bf:2f:32:65:0d:
         0b:42:b8:58:53:35:75:a9:34:aa:e5:fe:02:0f:f0:a6:ca:9b:
         22:01:ac:28:95:05:32:0a:e2:e5:87:9b:1b:97:19:1a:66:47:
         a2:7a:da:55:16:b8:27:cc:bd:18:f8:6f:df:cc:2f:06:ea:7b:
         cc:78:94:da:9d:99:2c:e2:df:8c:76:60:87:1f:0a:a4:bd:45:
         d6:0e:07:52:af:42:a7:f4:3d:45:b1:50:2b:6e:c4:c5:6e:2b:
         5a:82:1a:dc:37:d8:e4:08:44:77:99:c2:ca:0c:45:3b:0a:be:
         19:39:52:09:ee:ac:76:58:88:65:9c:6f:7f:b5:83:a0:ec:8b:
         fa:a9:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org