Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203131333135.roa
File:                     323830303a6130303a3a2f33322d3438203d3e203131333135.roa (raw, json)
Hash identifier:          U/ba1VDWGxslttaLIOPrllKfnwSkmDujdwOgzB8W+XQ=
Subject key identifier:   63:4A:0C:3F:D1:4C:D9:C7:7F:76:62:C8:41:FD:96:CF:CC:A1:A9:50
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       6390D19E155BA27935465145E9D837278B800541
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203131333135.roa
Signing time:             Tue 05 Mar 2024 18:07:42 +0000
ROA not before:           Tue 05 Mar 2024 18:02:42 +0000
ROA not after:            Tue 04 Mar 2025 18:07:42 +0000
asID:                     11315
IP address blocks:        2800:a00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:90:d1:9e:15:5b:a2:79:35:46:51:45:e9:d8:37:27:8b:80:05:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:42 2024 GMT
            Not After : Mar  4 18:07:42 2025 GMT
        Subject: CN=634A0C3FD14CD9C77F7662C841FD96CFCCA1A950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:1b:2b:3b:23:5e:fa:f0:f5:c1:a1:06:8e:
                    cf:ff:5c:3f:81:2d:0e:e4:8d:48:18:49:3e:3c:02:
                    ac:25:92:aa:a4:90:2d:2c:27:fe:2f:23:25:2a:13:
                    11:3e:37:d2:e5:36:33:67:49:7d:96:74:2e:0c:30:
                    0a:75:b2:7d:d0:5f:cb:58:28:e8:cc:4b:15:7b:0b:
                    13:ff:ee:a1:0e:29:ca:21:72:30:e8:c9:f5:59:de:
                    2b:ba:99:ba:47:cb:1e:26:c6:8f:19:a4:5c:57:c2:
                    fc:68:7b:25:c4:6c:56:2b:e1:05:f0:07:0f:cb:b6:
                    6b:97:fc:cc:78:3e:41:aa:c6:0b:38:53:87:2d:bc:
                    5b:83:a1:7f:1f:8a:e6:67:d2:8f:f1:15:ac:d7:95:
                    4d:f9:a4:04:77:bd:42:57:30:3d:b5:34:31:f9:b1:
                    17:f4:3c:1f:01:14:1e:8b:5b:de:81:cb:38:fb:e0:
                    ef:56:57:35:47:eb:04:5a:49:5a:c2:b5:c4:c1:04:
                    10:36:87:0b:1b:50:84:79:8b:e6:94:64:81:b5:f1:
                    fc:e4:2f:b6:1d:b7:5b:ce:a3:9c:53:fa:99:4c:99:
                    a3:85:71:a3:bb:31:97:6d:4e:f6:1a:6a:a9:59:9b:
                    4a:dd:1a:cd:a5:87:2b:af:1d:b0:f6:be:c0:4e:32:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:0C:3F:D1:4C:D9:C7:7F:76:62:C8:41:FD:96:CF:CC:A1:A9:50
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:0c:35:24:db:38:a7:14:f1:50:69:ed:af:82:ed:47:9c:
         98:13:04:cc:c4:70:1b:62:84:55:8a:02:4e:10:57:80:b2:2a:
         8a:d4:53:50:4b:4c:2f:9a:8e:6d:5f:99:7e:a9:b2:4b:28:9b:
         df:39:e2:5a:a2:1c:ff:76:6b:95:8d:e4:96:e4:c1:2a:7f:30:
         e4:58:2f:b5:81:6b:bd:c8:58:1c:3f:ae:69:42:bb:a4:85:9b:
         35:cf:7e:81:47:64:09:e1:46:e2:32:45:51:95:7a:9f:0a:d7:
         5f:28:17:1d:16:8c:2e:00:f2:7e:14:62:9a:5e:dc:07:62:d2:
         18:a5:b6:28:79:f6:08:95:42:b2:2b:3b:4b:74:57:7e:3f:6e:
         68:fd:6c:34:ec:e8:f3:98:fa:0d:a2:a4:76:eb:10:eb:4d:10:
         07:af:e2:61:03:a9:03:86:1a:bf:4d:f8:dc:86:4e:41:82:c6:
         1e:df:23:14:18:0c:a9:11:e3:af:24:50:77:1d:46:cc:ca:a5:
         2d:db:b8:80:93:17:66:f4:df:f4:03:3a:8a:e2:ac:6a:1a:4e:
         9a:17:3b:bc:97:ec:1e:28:f9:bf:82:a1:47:ce:1b:1d:3d:f0:
         9d:e4:51:43:2e:23:c9:7d:eb:a8:e6:6d:6e:e4:51:8b:7c:49:
         f8:c6:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org