Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa
File:                     323830303a3531303a3a2f34362d3634203d3e203238303232.roa (raw, json)
Hash identifier:          6gZrnv2qSggAkgAuqrzQKkmWRdHbiiyKQrPW1CMLxgs=
Subject key identifier:   A3:DF:D3:51:FA:3F:6A:33:D4:D4:E2:60:C5:A9:D9:31:78:02:DB:58
Certificate issuer:       /CN=2000BFC4CE0B56183990500772974F91AC5629B4
Certificate serial:       1AC189416986E574830C76C686F37FE813C23AED
Authority key identifier: 20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa
Signing time:             Tue 05 Mar 2024 18:02:25 +0000
ROA not before:           Tue 05 Mar 2024 17:57:25 +0000
ROA not after:            Tue 04 Mar 2025 18:02:25 +0000
asID:                     28022
IP address blocks:        2800:510::/46 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c1:89:41:69:86:e5:74:83:0c:76:c6:86:f3:7f:e8:13:c2:3a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2000BFC4CE0B56183990500772974F91AC5629B4
        Validity
            Not Before: Mar  5 17:57:25 2024 GMT
            Not After : Mar  4 18:02:25 2025 GMT
        Subject: CN=A3DFD351FA3F6A33D4D4E260C5A9D9317802DB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:95:1d:f4:d3:e4:56:08:03:28:b6:41:0c:
                    17:ad:6b:16:6c:f9:74:c0:ef:34:ec:52:a9:fd:78:
                    1b:8d:1e:8c:da:f5:6c:dd:97:27:2f:cc:55:a2:16:
                    a5:b1:08:76:30:f0:bd:8a:a2:a7:9f:15:89:74:f1:
                    ec:30:a4:b6:94:83:a2:c9:55:2b:23:f8:e2:cb:93:
                    7a:f9:3e:b6:8a:ef:03:0b:2f:df:fd:6f:ff:02:c2:
                    1a:fa:a2:a8:f0:97:42:44:2a:f9:b5:75:73:c2:3a:
                    bc:75:cd:41:f0:05:18:a3:c3:eb:a9:29:20:fd:48:
                    68:17:18:9d:e4:a5:7a:16:ca:83:c9:74:7a:6d:25:
                    eb:60:51:dc:f7:7f:4c:99:f0:96:27:4c:8a:c3:a1:
                    d4:ff:1b:4e:3e:d4:f6:bc:f7:2b:9f:8b:d5:49:7a:
                    55:e0:7e:48:dd:ec:c3:e2:2b:c0:95:2b:e9:77:07:
                    16:fb:61:b4:ab:54:d5:57:47:0a:88:32:29:c2:c3:
                    cd:60:46:bc:09:c0:71:ec:19:3e:a4:35:ad:46:d7:
                    82:ff:40:96:da:e6:75:3c:60:0c:f5:75:fc:85:3f:
                    7b:93:02:7c:25:60:c9:60:1c:a9:f1:09:14:3e:3a:
                    36:22:97:e8:4f:38:19:fe:c4:85:b8:82:c4:a0:48:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:D3:51:FA:3F:6A:33:D4:D4:E2:60:C5:A9:D9:31:78:02:DB:58
            X509v3 Authority Key Identifier:
                keyid:20:00:BF:C4:CE:0B:56:18:39:90:50:07:72:97:4F:91:AC:56:29:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/2000BFC4CE0B56183990500772974F91AC5629B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2000BFC4CE0B56183990500772974F91AC5629B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651B06C59A0B162BEE25D0591333AEC2EC1921B263E89EE760DC7B75FAFABF55/0/323830303a3531303a3a2f34362d3634203d3e203238303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:510::/46

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:c8:bd:51:38:2f:18:16:b3:8a:eb:15:35:20:43:53:ac:
         51:a5:86:6c:46:32:77:4c:db:34:2d:46:5f:e4:20:47:5c:d2:
         8e:ca:08:37:57:b8:ff:3c:a8:32:ae:e1:d4:34:de:22:7b:8f:
         f9:72:e7:3b:82:ff:4e:81:06:df:17:c3:71:76:b8:c0:0b:56:
         d9:86:b1:04:fc:a5:97:85:a1:67:6b:d6:bd:04:9a:33:76:29:
         33:0f:f9:0e:dc:1b:49:b9:b6:a3:99:82:72:d7:fe:79:55:29:
         b3:a5:0e:93:6d:f1:67:f1:84:d5:2e:55:88:48:66:9d:08:bf:
         d9:ef:22:8c:20:5d:7a:6d:4e:5b:33:d0:15:99:b6:23:9e:de:
         0e:12:4f:28:80:f5:f7:54:b3:78:fb:99:8e:3c:da:15:0d:dd:
         e4:1b:16:9f:2b:8a:8e:a4:03:18:d6:a0:3d:71:75:ca:f0:bc:
         72:ea:da:e0:98:12:26:b0:be:a7:d0:9a:d1:87:85:6c:82:99:
         7f:7a:22:b1:94:fb:03:17:de:03:23:a0:0d:b4:d6:7e:d7:6b:
         81:d3:ca:df:3e:53:6f:5b:90:ff:80:d4:92:bc:1f:39:18:2f:
         e6:b5:94:f7:b7:b2:68:3c:af:5f:79:14:18:3c:21:18:b2:dc:
         f2:12:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org