Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663030303a3a2f35342d3534203d3e203232393237.roa
File:                     323830303a6130303a633866653a663030303a3a2f35342d3534203d3e203232393237.roa (raw, json)
Hash identifier:          BqCuivvCCI3p8aP94SrEr4GZptZ1rV60sVnuoR8Fggg=
Subject key identifier:   A2:5D:9D:4E:CC:7B:3E:80:17:B9:6E:BE:97:AD:F9:DC:FD:47:AA:7C
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       2BCB86F8E574AC2183C2E83EACF830E7172F4930
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663030303a3a2f35342d3534203d3e203232393237.roa
Signing time:             Wed 04 Dec 2024 18:30:02 +0000
ROA not before:           Wed 04 Dec 2024 18:25:02 +0000
ROA not after:            Wed 03 Dec 2025 18:30:02 +0000
asID:                     22927
IP address blocks:        2800:a00:c8fe:f000::/54 maxlen: 54

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Dec 2024 13:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cb:86:f8:e5:74:ac:21:83:c2:e8:3e:ac:f8:30:e7:17:2f:49:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Dec  4 18:25:02 2024 GMT
            Not After : Dec  3 18:30:02 2025 GMT
        Subject: CN=A25D9D4ECC7B3E8017B96EBE97ADF9DCFD47AA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:85:ff:a5:3b:2f:b9:8b:0d:27:2a:b3:84:
                    ba:d9:fb:97:6e:1a:54:cb:31:c4:5a:a2:86:ed:b5:
                    15:eb:f7:69:74:e7:f4:5d:dc:79:38:b5:24:fd:fa:
                    de:e8:37:f0:41:f9:35:67:50:d6:c4:fa:07:79:ce:
                    83:f2:47:8a:98:36:96:ff:d6:2e:87:07:7d:be:f7:
                    f4:29:2e:56:64:b7:b9:f4:4a:9d:6c:3a:69:bb:a1:
                    c7:e6:d5:f0:ac:88:6c:20:ff:a7:14:58:e8:93:f0:
                    e3:3f:4a:42:ff:32:d9:63:78:89:2e:c4:ef:ee:1f:
                    a1:fd:56:37:be:d8:c5:15:f9:3e:32:79:72:6b:9b:
                    0e:a2:86:78:70:11:67:d8:75:7f:94:36:fc:e8:d4:
                    aa:fe:a8:26:e5:fe:3c:78:f9:28:13:94:e8:fe:79:
                    0d:98:31:76:b0:19:f1:d5:50:f7:d0:61:49:2f:22:
                    e0:99:19:a4:37:a9:ea:a9:ae:3e:b9:0f:67:44:68:
                    21:c1:1b:56:7e:95:31:56:ff:05:de:77:4b:10:21:
                    3a:ee:57:68:08:39:44:7c:55:46:19:40:c0:fd:4a:
                    d8:fd:d5:9d:c3:17:48:ba:c3:2f:e8:1a:4f:d0:00:
                    86:ce:7f:8e:bb:92:dd:e0:fe:46:50:b9:d3:ff:9f:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5D:9D:4E:CC:7B:3E:80:17:B9:6E:BE:97:AD:F9:DC:FD:47:AA:7C
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663030303a3a2f35342d3534203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:c8fe:f000::/54

    Signature Algorithm: sha256WithRSAEncryption
         ba:e8:75:52:14:f1:8a:93:41:dc:f9:8c:64:b4:88:2b:df:82:
         52:05:91:7c:4c:3f:d7:6c:65:a3:80:cb:0b:ad:e5:2b:ad:9f:
         f7:12:a0:a0:ae:e5:06:f9:ac:ef:a8:a2:06:3e:48:e3:71:ca:
         c6:d7:5a:a3:79:e0:7d:78:a4:99:9e:24:b9:7f:43:9e:9b:b3:
         07:9b:01:09:a1:65:ec:ea:cc:cf:88:ae:69:65:90:fe:24:4f:
         39:45:3a:e2:f8:e7:95:46:94:27:00:e7:48:09:d1:63:ee:72:
         75:ad:01:6c:e8:c0:c9:ac:65:c3:35:82:16:ef:0d:9c:27:ca:
         3d:25:5f:99:2a:cb:00:4c:9f:ba:90:47:b1:1e:f7:b0:e7:c8:
         03:2b:1a:f0:6c:e5:4e:c4:b0:f0:e5:71:aa:78:86:62:b5:f8:
         92:53:09:86:8d:d2:a5:69:a6:25:57:6a:36:89:f3:d8:c6:de:
         e4:9f:a1:0d:df:49:05:be:77:7e:e1:6a:fc:56:38:82:b5:e6:
         61:5d:9a:90:3f:da:5a:92:22:0f:70:9c:3b:b5:45:d5:f2:7d:
         5a:94:61:18:92:b1:7b:5c:d6:75:26:43:7f:45:86:c8:d5:22:
         1b:ee:f8:c4:fe:09:d6:e0:66:c2:bf:9d:5f:0b:b9:74:31:08:
         2b:70:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 23 22:57:01 2024 by rpki-client on console-fra.rpki-client.org