Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/323830303a33383a3a2f33322d313238203d3e203237383038.roa
File:                     323830303a33383a3a2f33322d313238203d3e203237383038.roa (raw, json)
Hash identifier:          ZzT4RVfKY1vCoA0omf7clrG2FuIhmNoyUVMJN37Mfro=
Subject key identifier:   AA:46:13:58:2B:61:08:10:38:76:07:01:70:3E:22:48:A9:D5:8D:66
Certificate issuer:       /CN=01726C9CC40D25E04818139CB428E3A47F5D05EC
Certificate serial:       46B8C5AC868824EDBF845004C5FEE1F9E2A6AE19
Authority key identifier: 01:72:6C:9C:C4:0D:25:E0:48:18:13:9C:B4:28:E3:A4:7F:5D:05:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/323830303a33383a3a2f33322d313238203d3e203237383038.roa
Signing time:             Tue 05 Mar 2024 17:49:29 +0000
ROA not before:           Tue 05 Mar 2024 17:44:29 +0000
ROA not after:            Tue 04 Mar 2025 17:49:29 +0000
asID:                     27808
IP address blocks:        2800:38::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:c5:ac:86:88:24:ed:bf:84:50:04:c5:fe:e1:f9:e2:a6:ae:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01726C9CC40D25E04818139CB428E3A47F5D05EC
        Validity
            Not Before: Mar  5 17:44:29 2024 GMT
            Not After : Mar  4 17:49:29 2025 GMT
        Subject: CN=AA4613582B61081038760701703E2248A9D58D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:f2:87:86:d2:86:62:ac:ab:7a:f4:69:38:
                    bc:c0:2a:10:e7:de:6c:49:79:de:27:41:ed:a9:b0:
                    fb:d4:da:c5:e0:6c:60:e5:1e:da:76:64:d9:ee:ea:
                    e0:a1:f9:a0:0e:05:9d:31:9e:bf:72:08:bd:0d:53:
                    22:d8:dd:2b:0c:b1:4d:85:29:5c:e6:bf:25:cd:28:
                    31:78:33:84:f7:e2:85:72:32:77:32:4f:1f:82:de:
                    47:c4:15:01:36:d4:fd:9f:70:0d:bf:ff:82:6e:23:
                    21:db:3c:0a:8a:85:20:e7:e5:97:16:de:63:99:da:
                    96:e3:37:04:cc:9f:7a:05:5f:ab:c3:66:e8:2e:37:
                    71:b4:49:8e:a0:8f:7a:9b:8e:fd:62:b0:97:bd:00:
                    ee:e3:1c:74:71:11:c9:0b:f9:35:45:43:ae:f0:21:
                    e3:a7:70:b8:bc:ce:71:53:28:52:34:7d:50:32:82:
                    9d:24:b3:aa:e5:62:0b:04:4c:97:d2:de:69:c4:0d:
                    c5:1a:2f:f2:e2:64:18:1b:23:4e:2e:3a:7a:2a:df:
                    51:c2:76:a4:0e:2f:4e:f5:80:46:09:fc:dc:1a:af:
                    d2:2d:73:ba:6c:6a:6d:ea:e0:ca:ff:57:e3:07:3e:
                    92:89:6e:c3:ce:7b:6b:d7:90:ef:79:4c:e1:5f:8e:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:46:13:58:2B:61:08:10:38:76:07:01:70:3E:22:48:A9:D5:8D:66
            X509v3 Authority Key Identifier:
                keyid:01:72:6C:9C:C4:0D:25:E0:48:18:13:9C:B4:28:E3:A4:7F:5D:05:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01726C9CC40D25E04818139CB428E3A47F5D05EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/659788A355B108A4D7DDA3E5C9DC41E82D7901FBAA866666F06EE17AB609C185/0/323830303a33383a3a2f33322d313238203d3e203237383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:38::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:78:e5:63:f3:0e:5c:32:a2:80:fb:7c:00:a2:5d:05:67:
         46:2a:19:4a:22:0a:9f:1a:66:ca:5d:2e:81:ee:e9:e3:91:2a:
         e9:c2:9b:d1:2d:8b:6a:dd:d1:74:cc:e7:2f:71:b7:4a:15:e1:
         87:c7:bb:f7:4b:05:7d:8a:8f:7a:3e:44:46:8a:bf:a2:26:0b:
         94:18:fb:8d:46:13:39:04:55:64:4e:13:83:ed:12:dc:04:59:
         cc:d8:25:f2:19:af:84:42:ee:aa:c9:b7:10:36:0d:f3:08:b0:
         f1:a0:b2:4c:60:5d:38:32:da:2d:e6:ec:d5:68:b7:a7:64:1c:
         9e:be:0b:b8:9f:25:b2:19:d0:d4:78:b1:8c:7d:8c:a2:c0:58:
         4e:e5:e2:08:65:a0:6f:59:3a:1c:be:13:14:ae:3c:a4:f7:9c:
         cb:94:60:56:a9:bb:d6:ae:fd:54:1e:2f:1d:f9:86:2b:57:d9:
         f7:fa:38:d2:8c:26:d2:e8:d9:57:f6:17:56:0d:69:45:87:30:
         52:72:77:17:ff:20:3a:3f:36:b1:47:09:a2:c8:b8:c8:43:0a:
         bc:bf:a2:5b:0c:0d:8b:f2:4d:27:9a:e4:3a:80:b0:33:86:73:
         ab:38:87:e3:99:31:a2:f3:a3:5e:ad:ee:89:44:6e:fc:60:d1:
         76:5d:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org