Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa
File:                     323830303a383a3a2f33322d3438203d3e203130373738.roa (raw, json)
Hash identifier:          ZLxh471zkbtDb000JjOG7V83eH2WZlj3Ed+6qDNBWpY=
Subject key identifier:   B7:05:DD:33:99:01:02:0D:63:BD:79:5C:3B:A5:99:F2:92:65:4C:73
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       501851BD828651C8C12E1F87DCC725A4A8BAF4E3
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa
Signing time:             Tue 05 Mar 2024 18:08:23 +0000
ROA not before:           Tue 05 Mar 2024 18:03:23 +0000
ROA not after:            Tue 04 Mar 2025 18:08:23 +0000
asID:                     10778
IP address blocks:        2800:8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:51:bd:82:86:51:c8:c1:2e:1f:87:dc:c7:25:a4:a8:ba:f4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:23 2024 GMT
            Not After : Mar  4 18:08:23 2025 GMT
        Subject: CN=B705DD339901020D63BD795C3BA599F292654C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:65:65:ad:d4:7e:14:81:74:6d:52:9a:36:
                    9b:65:e0:3e:45:f7:0c:ae:38:0a:e2:eb:a8:62:40:
                    ed:d7:6a:22:9a:f3:e4:fe:69:e6:52:68:50:10:50:
                    ca:2e:ee:27:b9:9d:f0:7a:f3:c8:da:5b:1f:e3:8c:
                    18:25:5e:a6:4c:69:2e:ee:d8:cc:45:fe:e5:f6:f0:
                    61:25:2f:46:1e:e7:f7:c4:67:9a:2d:a6:37:a5:d6:
                    82:ce:de:7a:97:70:0e:94:f5:e4:f9:6e:dd:1b:69:
                    3e:8b:ec:de:92:fa:a0:65:3d:59:c9:31:43:4f:88:
                    63:3b:26:4c:99:9d:17:0a:2d:f3:de:df:bc:19:40:
                    a8:09:0a:b4:3e:99:01:dc:bc:49:d4:ae:10:15:12:
                    53:53:a6:47:43:d2:4a:5a:2b:d0:5a:65:16:54:d1:
                    24:88:2a:34:b3:6e:03:07:c9:01:69:dd:51:15:33:
                    3c:b7:b0:9c:18:a6:de:36:9a:a3:ff:fc:22:79:2d:
                    32:9d:4f:9f:e2:d6:72:da:87:e5:da:e3:08:cf:0e:
                    90:b8:71:2e:6e:8b:44:61:10:2a:7e:85:03:70:f3:
                    5b:76:c6:8b:a3:02:a1:80:e0:7a:12:5c:fd:90:77:
                    03:88:d3:ea:fa:66:00:67:af:54:fc:5b:ee:42:e3:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:DD:33:99:01:02:0D:63:BD:79:5C:3B:A5:99:F2:92:65:4C:73
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/323830303a383a3a2f33322d3438203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:04:5f:4a:88:7f:14:1b:d8:52:92:2c:b2:a4:28:cc:f1:7c:
         5f:e1:64:60:5a:1b:82:43:dd:15:8c:ad:e7:b5:72:a6:62:b2:
         d2:56:af:6b:80:0c:66:7e:41:eb:d0:3d:30:4d:9e:6b:f0:31:
         88:89:32:5c:6a:45:a4:a5:7c:92:b9:9f:3a:e2:3a:b7:f1:6b:
         54:e4:1f:bc:b5:6c:68:7a:18:01:11:d7:57:46:35:c0:f4:3d:
         36:b2:bf:31:2d:4a:5f:90:17:13:10:64:f6:98:b8:9a:85:ae:
         50:ba:1d:6d:0d:9b:af:7a:0c:79:66:13:51:02:3b:9d:70:2e:
         14:75:c4:f9:24:65:44:7f:85:b1:5d:05:e0:91:cc:17:0c:06:
         83:e4:df:13:31:cd:87:8a:80:ec:61:38:0e:b9:d7:92:3c:3b:
         92:45:7e:da:80:8d:c0:bf:04:18:16:84:f2:6e:e3:d1:64:dd:
         5b:ff:a0:1c:ff:9e:6a:27:99:fd:e1:e1:4e:3e:46:c4:33:f0:
         c6:c3:dd:cb:52:c5:1f:d2:5c:f1:be:37:9b:5d:6f:e3:55:f7:
         21:79:c5:93:ee:e6:0b:53:40:bc:d1:30:52:98:80:85:34:78:
         4c:72:32:aa:83:74:15:0d:bc:92:8e:92:4e:31:20:2c:78:1a:
         ca:4f:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:27 2024 by rpki-client on console-ams.rpki-client.org