Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3330203d3e203133343839.roa
File:                     323830303a65303a3a2f32382d3330203d3e203133343839.roa (raw, json)
Hash identifier:          7uUowrqLoMSgLgWJLvIkqYdbxz0n4UqLMYvl2tgBQqk=
Subject key identifier:   C3:23:D0:85:BA:11:6D:90:38:BE:2D:6C:55:12:75:15:46:89:6F:AD
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       593048986147A6431E744D019DF412209E334DB3
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3330203d3e203133343839.roa
Signing time:             Mon 30 Sep 2024 22:45:00 +0000
ROA not before:           Mon 30 Sep 2024 22:40:00 +0000
ROA not after:            Mon 29 Sep 2025 22:45:00 +0000
asID:                     13489
IP address blocks:        2800:e0::/28 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:30:48:98:61:47:a6:43:1e:74:4d:01:9d:f4:12:20:9e:33:4d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep 30 22:40:00 2024 GMT
            Not After : Sep 29 22:45:00 2025 GMT
        Subject: CN=C323D085BA116D9038BE2D6C5512751546896FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:17:fa:2f:04:c1:fa:0d:dd:62:75:b9:86:
                    3b:87:1b:d6:4f:4d:a9:c7:e9:0f:e5:7c:85:2d:72:
                    ca:dd:10:18:0a:fd:bf:fb:cc:5d:b0:5a:1d:1c:25:
                    c6:c3:9f:29:36:55:a9:ad:ec:33:ad:c0:77:7f:d1:
                    0a:c7:a2:4d:67:bc:11:17:eb:07:d8:b5:6f:f5:0c:
                    1e:63:eb:50:cc:61:b1:db:6c:09:dd:f6:53:00:57:
                    83:00:90:bc:6e:f7:43:b9:44:51:37:ef:58:0a:ea:
                    09:9e:a3:1e:47:5f:df:0a:bc:f7:74:6e:06:c2:a2:
                    ae:52:63:e9:6e:47:c7:72:0f:e5:1a:25:ef:e5:29:
                    66:06:99:10:aa:84:e5:c5:0f:56:7e:93:1c:03:8e:
                    0c:5b:43:57:da:14:d2:1d:69:4a:3a:19:ab:9f:6d:
                    7f:dd:df:19:31:74:89:a3:d8:74:91:da:9b:fd:1c:
                    08:3c:5f:bb:78:80:d9:69:09:72:60:ca:05:ae:88:
                    de:b6:fe:16:c9:51:36:25:4e:a8:01:00:14:f1:30:
                    eb:8d:c8:ae:92:8e:9f:2f:61:a6:bb:82:a8:22:f0:
                    17:15:86:a7:b4:12:2a:75:c4:26:d8:0d:09:6a:e1:
                    64:7a:91:46:40:d9:7b:8b:e6:1c:6b:73:8a:9f:19:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:D0:85:BA:11:6D:90:38:BE:2D:6C:55:12:75:15:46:89:6F:AD
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3330203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:e0::/28

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:ee:e3:a1:a2:4e:4f:b2:15:84:dc:e8:0f:d8:d1:a9:2a:
         9d:2d:d6:d9:bd:60:dc:b8:d9:e0:37:7b:bf:23:17:33:60:0d:
         bb:6b:3e:c2:b7:62:d5:cb:42:b8:e3:ae:5c:68:10:24:af:fc:
         64:ef:5c:f8:0e:da:38:dc:3d:8f:27:81:9b:7f:57:ce:de:89:
         05:df:b8:c5:b7:e6:b8:67:da:6b:a9:ad:ae:48:13:ab:49:eb:
         98:8e:68:9d:15:a2:30:25:9a:ce:88:82:6a:88:03:3b:35:41:
         52:0b:cf:15:75:d2:a2:58:1b:ee:c5:04:1e:88:31:f5:97:0b:
         c6:36:3d:da:39:45:ca:f6:88:46:ab:9c:41:9b:49:06:8e:d3:
         cc:a4:a8:c9:43:d5:e4:e9:41:d8:46:2a:10:b5:a8:63:12:4b:
         85:ad:55:60:bc:61:42:1e:76:79:6f:64:9d:5c:b7:b0:eb:a0:
         93:89:a3:8e:06:5c:a0:bd:a1:1e:0d:67:89:bf:01:58:33:1b:
         33:1c:88:1a:b0:48:ec:ec:df:8b:f6:c7:b3:57:7d:c4:a9:a0:
         bf:87:66:5c:19:27:bb:c9:af:67:da:e3:a6:0f:41:f4:65:05:
         bb:36:d3:32:f9:ec:cd:90:e1:5f:7b:0b:6b:df:57:df:33:41:
         7e:2c:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org