Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/323830303a6163303a3a2f33322d3438203d3e203237383337.roa
File:                     323830303a6163303a3a2f33322d3438203d3e203237383337.roa (raw, json)
Hash identifier:          MaWxn+McYDERhzwM7/alcwzSVLoFFLWaPB3tpxMuyrk=
Subject key identifier:   B1:3C:A4:71:28:F4:04:18:E9:BD:DE:AB:30:14:B2:42:43:3A:36:35
Certificate issuer:       /CN=4C35789BFFFE0B4B4D1B262477AD44AA4723EE20
Certificate serial:       0C951AB0CE7D5E6D8935742CCE53C4448894FD0B
Authority key identifier: 4C:35:78:9B:FF:FE:0B:4B:4D:1B:26:24:77:AD:44:AA:47:23:EE:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/323830303a6163303a3a2f33322d3438203d3e203237383337.roa
Signing time:             Tue 05 Mar 2024 17:54:10 +0000
ROA not before:           Tue 05 Mar 2024 17:49:10 +0000
ROA not after:            Tue 04 Mar 2025 17:54:10 +0000
asID:                     27837
IP address blocks:        2800:ac0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:95:1a:b0:ce:7d:5e:6d:89:35:74:2c:ce:53:c4:44:88:94:fd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C35789BFFFE0B4B4D1B262477AD44AA4723EE20
        Validity
            Not Before: Mar  5 17:49:10 2024 GMT
            Not After : Mar  4 17:54:10 2025 GMT
        Subject: CN=B13CA47128F40418E9BDDEAB3014B242433A3635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:d9:18:3f:b0:b4:f3:ab:be:18:3f:30:99:
                    9f:d2:1a:e5:e9:4f:5a:b2:fc:6b:78:3e:96:85:92:
                    fd:e5:0b:4e:ae:18:db:9f:07:66:4e:c3:4c:7c:79:
                    ec:29:0a:6e:09:d8:c2:27:1b:93:45:61:09:9f:de:
                    ba:ad:e3:f4:23:05:8f:da:e4:d4:14:20:6c:12:98:
                    ec:d7:4f:00:41:06:dd:89:ed:c1:a1:f3:74:51:98:
                    2e:11:be:2c:2c:19:e8:67:7b:c3:2e:7a:d4:0b:ab:
                    57:20:a5:d4:36:04:74:1c:50:90:4c:bb:10:5c:01:
                    a8:08:b5:61:16:ee:65:c6:f3:cf:bf:8d:e7:40:0b:
                    30:6d:89:7a:16:bd:99:ee:dd:eb:2a:7b:15:d9:10:
                    2a:de:77:d1:b6:39:c5:8c:8d:20:19:dd:ed:77:fc:
                    4e:7a:97:37:81:19:88:39:bd:18:b1:f2:18:05:e6:
                    72:9b:bb:a8:a0:e4:05:2f:10:b6:57:8b:cf:e5:73:
                    88:39:c4:7a:9b:49:5b:70:de:39:70:44:7a:e6:f0:
                    b5:21:08:57:21:1b:ad:25:d2:55:ed:d6:0b:a5:e3:
                    fc:11:8d:70:64:91:49:ac:2e:99:5f:b0:38:a6:ed:
                    2e:38:79:59:0c:77:be:d1:ee:86:b5:f3:8f:29:0e:
                    a7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3C:A4:71:28:F4:04:18:E9:BD:DE:AB:30:14:B2:42:43:3A:36:35
            X509v3 Authority Key Identifier:
                keyid:4C:35:78:9B:FF:FE:0B:4B:4D:1B:26:24:77:AD:44:AA:47:23:EE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C35789BFFFE0B4B4D1B262477AD44AA4723EE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E0D5BE304799894BD77C002BE7448335802990E383F54914F9ECF6F379BD98/0/323830303a6163303a3a2f33322d3438203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:9e:93:a9:8e:b9:ba:39:b8:68:3d:41:68:c0:75:e1:20:72:
         2b:37:34:39:2a:c6:de:45:d1:e8:82:c0:45:0a:ec:1f:ff:54:
         d9:df:90:d4:21:9d:1b:02:37:e8:df:fd:91:b1:cb:9e:61:9d:
         01:47:5f:f2:92:0e:c1:80:4e:f6:a3:41:b1:2a:c3:3f:fa:c3:
         6b:57:5d:51:e1:29:37:53:dc:01:58:6c:df:91:34:b5:d9:82:
         27:55:6c:45:bf:90:24:72:1e:95:cb:58:84:1c:6d:cb:c1:86:
         d0:b6:c6:b7:b3:62:90:b9:33:a3:4f:3f:ee:d9:af:24:19:d6:
         cc:d9:a7:1a:b8:39:78:eb:5b:d0:68:5f:19:da:c7:23:42:da:
         df:96:2a:02:5a:bf:5f:60:5c:0e:80:d8:f8:7f:42:24:f9:44:
         26:b4:7a:46:85:d4:fa:71:d8:77:e1:87:24:16:28:44:b3:dd:
         18:26:41:5d:b7:84:c3:dc:58:7b:28:1c:76:db:9b:3f:1b:4c:
         1f:37:2d:e8:9f:d3:d3:6b:62:11:11:3d:4d:66:15:ab:8c:03:
         b6:36:c5:0b:55:39:3b:8b:9f:13:a2:e1:4f:f0:41:48:9f:f7:
         e4:95:c4:d3:92:e9:42:82:a9:fb:ae:08:45:c3:8a:f3:56:43:
         cc:3d:08:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org