Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa
File:                     323830303a3863303a3a2f33322d3332203d3e203138383430.roa (raw, json)
Hash identifier:          kmPUZbGtjW0KTqTL7jmBC9MJNKBQi89v6bHAV9wLwNs=
Subject key identifier:   F7:FA:0E:99:43:44:CC:B6:81:E3:B8:02:07:CA:37:87:9D:E3:E5:D6
Certificate issuer:       /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Certificate serial:       7265AAAEEF60C84BFAAC33AB428723BDC7FC5A72
Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa
Signing time:             Tue 05 Mar 2024 17:46:01 +0000
ROA not before:           Tue 05 Mar 2024 17:41:01 +0000
ROA not after:            Tue 04 Mar 2025 17:46:01 +0000
asID:                     18840
IP address blocks:        2800:8c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:65:aa:ae:ef:60:c8:4b:fa:ac:33:ab:42:87:23:bd:c7:fc:5a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
        Validity
            Not Before: Mar  5 17:41:01 2024 GMT
            Not After : Mar  4 17:46:01 2025 GMT
        Subject: CN=F7FA0E994344CCB681E3B80207CA37879DE3E5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:09:ab:b7:38:20:fc:f2:65:a4:35:2e:47:ce:
                    f2:63:39:73:eb:51:6e:67:33:b1:77:10:8c:f1:a2:
                    7f:28:f9:ee:52:44:cd:95:9e:1b:aa:39:bf:cf:17:
                    7b:1d:bc:a0:25:d8:13:51:77:7d:8b:d3:53:dc:1a:
                    9f:4f:a0:19:c1:13:15:f6:f5:0a:7e:fb:6d:87:4b:
                    f9:03:83:c8:0d:5b:40:a5:ad:44:7a:6b:0b:11:75:
                    fd:fb:1c:4a:6a:cc:e3:5e:46:73:a6:aa:36:6b:a1:
                    fe:01:6a:5e:94:57:1d:3b:ff:54:6a:70:ae:9c:d6:
                    0c:1c:7a:2d:37:30:24:d0:82:05:5e:3e:8a:89:50:
                    88:89:38:13:5c:5c:ee:45:38:78:59:bc:d6:0d:87:
                    d9:da:7b:3d:e3:65:05:b6:5e:07:90:19:fa:b7:73:
                    0c:97:4c:38:b5:c3:c2:ae:a6:75:70:d6:d8:c0:89:
                    c3:a1:a4:7e:a1:49:cb:a7:23:35:34:a9:f9:b4:f3:
                    a6:e4:bf:7f:85:db:4e:cb:c8:56:7d:f7:39:56:f9:
                    b5:8f:b4:83:77:fc:d7:d8:fb:48:44:d3:ba:c6:b9:
                    f3:b4:81:bf:e6:cf:12:61:9a:da:14:ef:3e:d0:9e:
                    f8:25:95:a7:ff:3f:5e:b7:06:18:a4:c9:fa:14:c6:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FA:0E:99:43:44:CC:B6:81:E3:B8:02:07:CA:37:87:9D:E3:E5:D6
            X509v3 Authority Key Identifier:
                keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:67:b9:93:39:d5:75:70:73:19:9f:67:12:7b:53:49:ff:0f:
         67:a1:32:9f:35:1c:73:66:77:8d:b0:f3:21:05:7b:42:61:1f:
         3a:77:6e:24:50:8b:d8:69:92:ec:f1:a2:10:3b:53:6f:20:aa:
         64:53:70:74:fb:cf:50:f3:fc:c5:37:20:f5:d5:c8:13:4e:e1:
         9e:50:ca:e8:d6:6f:9a:59:ef:e0:8f:be:ba:32:27:d0:27:06:
         29:56:cd:b4:f2:d6:61:8a:52:eb:61:97:ad:42:b1:07:2c:2a:
         b9:6d:ca:d0:c7:9b:84:d6:62:8e:1c:ac:35:a4:a6:ad:f0:a7:
         8c:e3:27:d0:17:7f:d6:1f:e3:1e:54:e2:20:24:35:32:ad:7a:
         9d:5d:74:05:b1:42:d1:59:fc:20:b3:c6:39:4f:4a:87:d5:eb:
         34:ff:aa:b1:d6:dd:b1:92:dd:fe:b8:18:64:c5:f8:4d:e4:9c:
         98:d8:a5:08:79:b9:e9:67:64:82:12:fb:bb:47:aa:7c:1a:30:
         4f:82:9f:ce:69:c3:c8:7a:77:2b:f0:7f:c6:51:8c:a8:1f:c3:
         51:ba:ee:2f:04:ba:27:c5:83:6d:bc:64:67:f5:6b:07:bf:2f:
         24:cc:87:86:00:26:1d:b7:d7:4a:2b:b7:ef:53:03:12:d3:46:
         cb:f9:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:17:07 2024 by rpki-client on console-ams.rpki-client.org