Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa
File:                     323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa (raw, json)
Hash identifier:          WmVCHpXw3vW2PuAyf4nulTmjmbCx9Lnva6+uMOg+w1w=
Subject key identifier:   83:45:A9:27:B2:4F:9C:5C:57:97:73:95:B5:1E:2A:89:92:A3:3A:7D
Certificate issuer:       /CN=4A21846C50E619589B04A94E63EC535C6F77C010
Certificate serial:       1E94A160E0D73DEC4909410CAA88B4387643BD24
Authority key identifier: 4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa
Signing time:             Tue 05 Mar 2024 17:51:26 +0000
ROA not before:           Tue 05 Mar 2024 17:46:26 +0000
ROA not after:            Tue 04 Mar 2025 17:51:26 +0000
asID:                     15169
IP address blocks:        2800:3f0:4002::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:94:a1:60:e0:d7:3d:ec:49:09:41:0c:aa:88:b4:38:76:43:bd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A21846C50E619589B04A94E63EC535C6F77C010
        Validity
            Not Before: Mar  5 17:46:26 2024 GMT
            Not After : Mar  4 17:51:26 2025 GMT
        Subject: CN=8345A927B24F9C5C57977395B51E2A8992A33A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c8:3c:07:e7:9c:00:72:3b:80:97:cd:7d:81:
                    65:c1:53:a4:16:16:17:c7:db:7a:48:08:f6:43:6b:
                    c2:0a:9f:db:94:aa:08:83:82:4a:3d:a9:d3:e9:0f:
                    5f:e5:08:b6:99:cd:4a:01:70:1e:6d:57:99:d9:81:
                    d4:6a:5a:f0:55:11:f5:b5:34:f4:6a:33:23:f4:0a:
                    7e:3e:a5:05:74:a5:a4:e3:72:63:01:56:2e:de:d2:
                    6b:89:20:84:77:09:b9:39:ec:d4:61:ff:98:7f:b0:
                    ed:31:6b:54:ec:0f:31:a8:a9:b4:74:06:74:12:87:
                    3e:fa:82:d5:51:40:79:17:f2:24:ae:1c:a5:cd:53:
                    21:d7:3d:31:fa:42:13:f5:87:ff:34:e0:7f:1d:ba:
                    71:f1:4c:0d:08:49:f1:ff:32:06:3e:f7:2b:f5:f1:
                    96:11:3d:ba:80:79:25:a4:c2:4b:eb:24:79:4f:c2:
                    00:1b:13:9a:3a:16:de:44:9f:ed:36:55:93:fd:2c:
                    0c:a6:d5:26:aa:c8:2b:8c:71:47:53:72:78:b4:10:
                    69:55:52:58:d2:75:7c:d7:dd:e1:c6:87:f2:ed:8c:
                    c4:5f:9d:18:0d:ab:84:33:70:50:9c:f6:6c:f9:ce:
                    52:a0:8d:c6:c5:fe:fc:af:9f:f9:92:bc:be:73:eb:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:45:A9:27:B2:4F:9C:5C:57:97:73:95:B5:1E:2A:89:92:A3:3A:7D
            X509v3 Authority Key Identifier:
                keyid:4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3f0:4002::/47

    Signature Algorithm: sha256WithRSAEncryption
         2b:c0:d2:db:bc:8d:03:64:7e:48:67:c3:d8:c3:ca:18:15:d9:
         a3:ad:d4:4c:03:ff:f7:9f:22:ce:7a:c7:75:0d:98:a8:22:b9:
         71:3c:ea:f5:58:a2:77:7b:9d:72:da:95:28:0f:f2:d5:4d:73:
         9f:e8:90:90:ee:7a:93:3f:ab:fb:ab:ed:0a:4a:10:f1:32:9a:
         f9:e5:6e:48:ae:4b:66:56:d6:e3:aa:57:ef:c1:ee:e9:70:25:
         fc:76:15:b8:f7:f1:7e:ac:1d:50:34:2c:03:c7:de:d5:cf:1d:
         a8:cc:d3:6d:c8:4b:12:e6:f3:ec:a8:d6:ef:3a:df:cc:46:a0:
         b3:fe:58:af:36:42:5e:a5:13:72:ff:1b:9c:23:79:29:33:4a:
         c3:04:b5:42:c4:50:ad:ca:14:53:02:cb:35:60:c3:0e:77:60:
         3a:e9:7b:d1:c2:b9:73:f0:6d:57:e4:8f:b8:7c:a9:ce:22:42:
         69:7b:56:12:d0:e1:07:8a:a0:51:c8:e0:df:c2:46:f6:d1:07:
         ff:9b:d4:9a:47:3c:a5:e1:c1:6c:8e:a2:9b:33:3b:d6:5e:d6:
         05:02:89:b7:a9:e1:fe:a4:3c:77:65:bf:6d:89:71:e5:a6:13:
         20:73:6d:14:fa:26:dc:4e:98:19:d7:3c:ce:3b:3b:67:44:65:
         2e:49:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org