Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643030303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a643030303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          rSNdLxZJ+ENE2vp3ZSmeAGWkc8Q3naFvKujtdjMdt6k=
Subject key identifier:   51:13:FB:80:48:EB:7C:17:77:7E:35:48:4C:E9:6B:0B:E8:8C:29:04
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       7B1D7E3BE5EF41DC18CEA508F916B361EBCE53FE
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643030303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Fri 22 Nov 2024 20:25:02 +0000
ROA not before:           Fri 22 Nov 2024 20:20:02 +0000
ROA not after:            Fri 21 Nov 2025 20:25:02 +0000
asID:                     22927
IP address blocks:        2800:a00:d000::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1d:7e:3b:e5:ef:41:dc:18:ce:a5:08:f9:16:b3:61:eb:ce:53:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Nov 22 20:20:02 2024 GMT
            Not After : Nov 21 20:25:02 2025 GMT
        Subject: CN=5113FB8048EB7C17777E35484CE96B0BE88C2904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:35:3a:01:44:9c:7c:2e:a1:39:f8:e8:96:
                    7a:e0:cf:26:5e:7f:dd:d9:54:7f:f0:78:97:9b:71:
                    86:e7:e2:6b:56:dc:90:1e:eb:06:d5:d4:e8:0e:59:
                    36:d4:e0:a1:fe:bd:c0:29:0e:cb:73:ad:71:31:44:
                    27:58:4e:fb:ed:db:8b:b9:98:4f:55:0d:68:39:9e:
                    a4:11:26:ea:e7:a5:88:61:22:b0:86:62:fd:96:78:
                    0c:ce:a9:7f:6e:36:b1:3b:ab:05:3b:0d:49:0b:1c:
                    ac:28:85:a4:de:cd:9b:00:8b:9f:68:c9:2c:19:ff:
                    60:56:a7:04:51:e8:19:4d:24:cd:a6:22:a5:c2:76:
                    81:04:f2:26:29:e6:48:7c:ea:53:1e:46:6d:d4:a4:
                    5f:69:08:57:89:c3:13:9e:dc:d0:49:47:64:78:de:
                    f9:05:1e:ac:2e:95:23:a6:fa:02:2c:66:bd:2e:59:
                    81:fa:6a:96:8c:95:d2:54:6f:cd:e4:0a:61:b2:05:
                    57:19:54:a8:31:15:55:c4:eb:f5:ff:e9:8c:8a:8b:
                    f3:2d:6e:96:26:12:e9:09:10:48:53:8d:8f:10:5b:
                    6f:86:d9:88:bc:ca:79:83:59:6b:d1:93:67:16:13:
                    02:a0:66:7a:cf:09:ee:cc:88:d8:9c:6b:a1:04:28:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:13:FB:80:48:EB:7C:17:77:7E:35:48:4C:E9:6B:0B:E8:8C:29:04
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643030303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:d000::/41

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:9d:06:40:a1:88:e7:8d:d1:53:7a:f6:b1:c3:68:8b:19:
         04:e1:f6:b3:53:6e:01:47:58:91:8e:e8:19:ab:b7:3a:6b:e4:
         a9:ab:cf:77:94:86:9b:ec:e2:24:0c:6b:87:0a:5d:d8:a8:85:
         33:35:07:a8:c7:d1:f5:69:f5:0e:e0:7a:28:fd:61:94:de:44:
         b9:6a:6f:96:c5:d2:dd:b6:7c:af:7f:18:77:19:c3:f7:28:eb:
         05:dc:76:14:c9:79:52:30:20:e0:ad:d3:a0:96:69:f1:83:f7:
         8b:5c:46:3c:08:68:6c:14:dd:2d:1b:6d:87:f9:fd:d1:c0:3f:
         97:cb:8d:96:8d:7d:e4:ce:f8:3c:fd:89:72:18:ba:85:2b:38:
         4c:dd:e1:85:9d:e6:40:4c:ec:74:0c:b1:6b:4a:ce:14:93:5d:
         9c:c0:75:f8:07:b9:cd:7e:22:4e:a1:e8:d4:2e:4e:19:29:6d:
         c4:5c:7b:03:58:52:38:72:f1:30:3d:55:74:35:d3:9b:26:87:
         a9:d8:84:2b:a2:9a:43:ff:07:f8:a2:18:de:92:e1:fd:89:d4:
         1c:34:5b:b4:5f:26:00:36:58:2a:25:41:f3:c0:cb:ca:ee:df:
         99:2d:8d:5a:e1:a2:7b:70:35:2f:c5:52:cb:48:b9:3e:47:58:
         31:a0:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:59 2024 by rpki-client on console-ams.rpki-client.org