Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643830303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a643830303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          TBNHRrKUpHRKBRK2ZYPIIx9BUmthIqJTCnpa4vg6+A0=
Subject key identifier:   76:FE:C1:FD:0F:E2:DB:8E:BB:86:0E:55:65:96:55:89:33:15:F6:41
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       16441D0A591AC870D6AD174AB13CA9AFDA6E3E74
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643830303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Wed 04 Dec 2024 18:30:04 +0000
ROA not before:           Wed 04 Dec 2024 18:25:04 +0000
ROA not after:            Wed 03 Dec 2025 18:30:04 +0000
asID:                     22927
IP address blocks:        2800:a00:d800::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Dec 2024 13:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:44:1d:0a:59:1a:c8:70:d6:ad:17:4a:b1:3c:a9:af:da:6e:3e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Dec  4 18:25:04 2024 GMT
            Not After : Dec  3 18:30:04 2025 GMT
        Subject: CN=76FEC1FD0FE2DB8EBB860E55659655893315F641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:f0:0f:48:08:1b:59:41:c7:96:dc:28:ba:
                    50:74:9f:00:75:b4:06:e8:e8:9c:72:cc:d7:25:19:
                    da:3a:5f:50:0a:4f:57:08:ac:42:f0:8d:f2:3e:27:
                    0f:5a:6a:7d:74:b6:0b:bc:17:46:14:2b:cf:ce:6b:
                    7f:04:7f:8f:2e:74:dd:8f:df:77:df:18:50:c5:cc:
                    07:05:b7:f6:59:96:2a:df:cd:b7:d8:51:0e:6e:39:
                    ab:82:27:ef:35:96:ed:83:ea:75:27:57:4b:7c:92:
                    bf:01:ec:58:4c:7a:b1:96:97:b1:af:ad:fb:34:a9:
                    d4:a7:01:3c:4d:5f:47:98:13:06:fd:44:6b:e2:5e:
                    f1:75:3a:8f:de:2a:5e:6a:21:66:1f:21:dd:9b:31:
                    67:27:8f:9f:e5:de:82:61:6d:98:40:d0:48:2c:a8:
                    4d:ea:de:99:6f:a6:47:24:90:01:dd:52:d7:3b:ce:
                    58:69:83:80:3a:db:6e:1e:8f:36:10:58:57:f7:4d:
                    e8:48:8a:31:95:97:63:f6:c9:7e:2c:9b:cd:6d:1e:
                    ea:9f:84:61:6a:0d:4f:e0:c4:76:88:4d:22:82:1f:
                    27:1f:f8:e4:f0:24:76:0b:99:fb:c9:92:32:5e:29:
                    cf:a0:ca:28:d5:6b:c8:8f:a3:d0:1e:3f:36:1b:b9:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FE:C1:FD:0F:E2:DB:8E:BB:86:0E:55:65:96:55:89:33:15:F6:41
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a643830303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:d800::/41

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:1d:f7:51:53:27:b7:be:e4:bb:bb:75:a7:c9:7a:cc:67:
         09:37:92:ed:7d:f7:87:9a:7f:d8:95:22:3a:eb:40:4a:32:85:
         7d:08:e2:56:3d:4c:92:10:bb:24:a3:6d:5e:df:80:92:fc:bb:
         91:58:34:11:ee:9f:d0:b9:cc:41:5d:7b:d6:aa:99:d8:5c:ec:
         02:ed:7e:a5:ca:99:a2:50:91:ff:d9:4f:ed:f6:70:9a:c4:5e:
         21:bf:b8:c8:3b:21:49:93:58:13:e5:00:c9:45:fd:ee:ef:37:
         c2:e7:ed:ac:e1:ce:30:4f:f6:19:85:af:df:2d:64:2b:4c:6e:
         c1:0d:5e:99:c0:73:ce:09:7a:3e:55:81:90:70:6a:9a:99:7c:
         23:1c:a7:39:31:9b:9b:cc:57:6c:72:2a:02:50:2b:26:4b:1c:
         9c:be:b3:01:aa:0b:e2:6a:0c:ae:52:26:81:53:27:62:90:3c:
         b3:c3:e3:bf:86:f0:78:25:d2:7f:18:42:4f:c4:79:96:3f:bf:
         b7:3a:1a:6b:1e:fc:d4:87:2b:90:14:2a:c5:18:c5:29:f2:4d:
         72:61:42:05:2b:ba:01:93:23:33:d2:3e:33:10:a2:ce:32:f3:
         9c:a4:47:71:96:86:d9:52:13:d9:68:40:8d:a8:41:40:e1:d6:
         64:b6:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 00:11:56 2024 by rpki-client on console-ams.rpki-client.org