Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663430303a3a2f35342d3534203d3e203232393237.roa
File:                     323830303a6130303a633866653a663430303a3a2f35342d3534203d3e203232393237.roa (raw, json)
Hash identifier:          UWYGVycc4TAzqWv74+1TMaC4K+wM99jHDPyivvaDZX4=
Subject key identifier:   4B:37:7E:62:C7:54:5E:19:95:6D:79:FC:EC:50:8B:E1:41:DD:0A:7C
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       54C25F5247775272BC657D98320700989BCED16D
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663430303a3a2f35342d3534203d3e203232393237.roa
Signing time:             Wed 04 Dec 2024 18:30:01 +0000
ROA not before:           Wed 04 Dec 2024 18:25:01 +0000
ROA not after:            Wed 03 Dec 2025 18:30:01 +0000
asID:                     22927
IP address blocks:        2800:a00:c8fe:f400::/54 maxlen: 54

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Dec 2024 13:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c2:5f:52:47:77:52:72:bc:65:7d:98:32:07:00:98:9b:ce:d1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Dec  4 18:25:01 2024 GMT
            Not After : Dec  3 18:30:01 2025 GMT
        Subject: CN=4B377E62C7545E19956D79FCEC508BE141DD0A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:c1:8a:ab:f7:b3:5a:2c:ec:90:be:28:e1:
                    36:fa:ff:c4:c8:aa:53:d6:25:e0:3e:47:ae:4c:2b:
                    a0:f4:a8:8c:23:a8:0d:d0:c0:c3:11:f6:7c:a6:07:
                    71:25:62:3d:fd:b2:2c:59:ab:b1:35:76:ac:25:51:
                    03:1a:c3:25:46:a0:77:50:89:de:e5:5c:89:58:e2:
                    c0:f2:df:94:57:27:f4:f1:33:47:4e:40:13:c1:41:
                    e1:54:a5:ac:64:eb:55:d4:9d:c8:db:fc:87:b5:33:
                    b2:34:ce:f0:65:02:20:62:ad:2f:bf:a3:2a:da:a1:
                    24:fc:2d:c7:c5:72:8b:93:ae:50:02:d6:a7:35:ca:
                    c3:aa:be:5b:c2:1f:7d:a6:4e:37:ec:e0:07:61:2a:
                    21:e5:5d:dc:05:f8:f4:b1:d3:4d:9d:2e:fd:33:56:
                    ad:58:cd:6f:8a:54:18:b5:23:7a:39:7a:40:83:a6:
                    8b:30:9b:55:9e:a8:e9:70:19:34:4d:20:a6:24:76:
                    ab:a8:57:ed:1a:02:d6:90:e0:ca:51:26:1f:22:7e:
                    00:8d:c9:43:c3:ab:37:34:94:0f:b6:9b:bd:a7:54:
                    d9:a7:6d:60:d5:cb:f7:22:18:77:54:8b:a6:34:c4:
                    43:4f:08:06:8d:6d:6a:35:53:3d:50:09:b2:18:be:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:7E:62:C7:54:5E:19:95:6D:79:FC:EC:50:8B:E1:41:DD:0A:7C
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a633866653a663430303a3a2f35342d3534203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:c8fe:f400::/54

    Signature Algorithm: sha256WithRSAEncryption
         17:c8:ca:26:28:51:3b:5a:fd:0a:4f:e2:64:9c:da:a6:92:39:
         3c:53:dc:77:0f:b0:9e:13:3f:22:58:b7:f4:d9:27:31:36:0d:
         cc:61:55:bb:fd:de:fd:ec:7b:44:c7:c3:34:cf:fb:60:d6:10:
         3a:2d:e0:4d:b0:e8:be:a1:22:45:92:a5:1c:fe:70:1e:cb:f1:
         b6:2d:36:2d:1c:a5:3b:24:f7:44:5a:b5:5a:a6:8f:d5:85:32:
         2e:e6:21:88:a7:11:2a:d7:0f:99:fd:6b:25:b9:98:54:e4:98:
         5e:41:a1:9a:02:41:51:aa:2d:99:d4:13:53:4b:93:9e:cf:34:
         09:8a:fe:f6:aa:cc:45:55:49:5e:6d:71:e6:83:21:25:3a:3a:
         ab:fd:91:bb:bf:9c:83:3a:60:34:c8:ed:51:d2:bf:ff:45:af:
         82:a7:7e:3d:9e:02:1b:ef:83:17:33:03:4d:9a:e9:5e:f5:db:
         fb:a1:c9:95:28:04:b4:de:1e:8e:4a:d1:3b:c7:c5:20:c0:fc:
         9b:41:14:6d:7f:04:9e:f9:48:cd:23:93:74:14:99:a7:7a:39:
         d8:96:c5:d1:d0:53:c4:46:a2:e1:6d:15:86:f9:b5:f2:7d:95:
         5c:c2:16:0b:c9:a4:c6:36:ea:e9:ce:61:0e:88:74:29:03:b6:
         02:11:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 23 22:57:01 2024 by rpki-client on console-fra.rpki-client.org