Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa
File:                     323830303a3835303a3a2f33322d3438203d3e203237393833.roa (raw, json)
Hash identifier:          TghFwMadiZQDkh57r6SMCRR/k+0l3+Nh8ByePpt7Qhk=
Subject key identifier:   4C:0E:7F:38:EC:81:FD:96:31:40:02:0A:8B:A9:06:D9:78:3C:EF:2D
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       0907B244237638C367261EAB5500ED50D2F23A1E
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa
Signing time:             Tue 05 Mar 2024 17:47:40 +0000
ROA not before:           Tue 05 Mar 2024 17:42:40 +0000
ROA not after:            Tue 04 Mar 2025 17:47:40 +0000
asID:                     27983
IP address blocks:        2800:850::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:07:b2:44:23:76:38:c3:67:26:1e:ab:55:00:ed:50:d2:f2:3a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:40 2024 GMT
            Not After : Mar  4 17:47:40 2025 GMT
        Subject: CN=4C0E7F38EC81FD963140020A8BA906D9783CEF2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:6b:62:72:5f:45:52:f1:a3:a9:b1:f7:5a:
                    99:8b:f4:2d:6c:9d:20:17:19:7c:19:03:e5:4e:c6:
                    c0:04:82:08:0d:45:d4:3a:25:f8:90:d9:64:c8:c2:
                    76:aa:65:fa:05:6b:f5:95:e4:67:cc:f3:19:d4:6d:
                    07:88:2f:86:75:e8:21:69:21:33:bb:92:56:b2:b3:
                    bb:e7:3f:ff:dc:e3:e2:dd:9b:97:ef:d7:63:22:91:
                    b6:72:88:73:1c:92:48:59:31:58:2e:c5:62:c9:9a:
                    1e:e1:bd:39:f3:16:7a:bf:43:6f:9f:4a:5e:ff:e8:
                    a4:6f:9f:16:11:75:12:ab:a2:ea:9b:d9:50:56:67:
                    75:48:72:b0:5e:f0:20:73:3d:79:48:91:f3:7e:e2:
                    ca:a1:d3:6e:2d:a8:a4:e1:54:a9:08:61:7a:45:b6:
                    41:2c:32:b1:9a:8e:5e:a1:a0:45:86:04:60:11:12:
                    5c:57:24:35:f4:ae:92:0d:c7:57:5a:14:24:f7:3d:
                    85:16:9a:87:31:2a:18:0e:28:1e:ea:5c:16:f0:7a:
                    51:2e:56:83:ac:03:de:cc:cd:21:46:19:49:ef:2f:
                    07:26:9a:74:12:d1:f3:12:ee:80:60:86:6e:b9:5c:
                    d0:4c:3b:99:ab:da:58:50:86:3a:53:70:74:97:33:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0E:7F:38:EC:81:FD:96:31:40:02:0A:8B:A9:06:D9:78:3C:EF:2D
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/323830303a3835303a3a2f33322d3438203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:850::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:64:43:61:7f:83:7e:ac:e7:ae:b9:5a:39:42:eb:c5:19:3b:
         da:a8:ad:00:71:21:d3:3c:80:30:f0:eb:62:a7:86:9d:9f:a6:
         d3:b6:2d:d2:5a:cd:89:2a:df:9a:3c:95:b1:dc:31:e6:b6:71:
         ba:ec:92:45:41:0c:29:e4:8f:d4:57:f3:e9:a6:39:9d:da:ea:
         c0:28:d1:d5:0f:64:e5:eb:10:5f:4c:d4:08:cf:a0:13:04:65:
         d3:86:b8:4d:f9:f8:85:c3:15:85:86:b1:19:ee:0b:30:31:ae:
         e7:21:b5:ba:9e:62:26:e3:e4:d1:10:c1:a8:6e:c6:48:7e:13:
         c3:c1:2d:24:ab:44:92:a2:0f:8a:50:b9:68:87:e5:75:2f:cc:
         7b:30:17:89:d1:03:d6:0b:f7:03:a7:ac:81:5c:52:9f:53:59:
         f2:c5:5d:a0:44:7d:1f:c9:55:a8:95:6e:6f:16:a9:0a:37:fd:
         99:46:7c:8d:e5:24:da:96:58:e2:07:97:6b:fd:41:0d:9e:94:
         7a:ea:70:fa:c6:3b:ab:21:b1:79:1e:71:a2:94:f2:39:ba:9a:
         20:ff:fe:39:ee:48:00:03:5f:9b:95:6a:d8:fa:ed:0c:7c:4a:
         44:65:48:53:79:27:e9:d2:b0:8a:52:3e:47:55:54:3a:0a:59:
         d0:41:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:44:42 2024 by rpki-client on console-ams.rpki-client.org