Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646530303a3a2f34312d3431203d3e203232393237.roa
File:                     323830303a6130303a646530303a3a2f34312d3431203d3e203232393237.roa (raw, json)
Hash identifier:          Mgrr9mpuBc3f2FWh1aoRUo3GRO5uOl6GHnfTDeWZO50=
Subject key identifier:   3C:0B:62:D7:E9:07:1F:6D:F6:BC:5E:72:17:6F:9C:50:12:23:AC:C5
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4E88A7EC8AA564C00735558BA92E9127699AE323
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646530303a3a2f34312d3431203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:41 +0000
ROA not before:           Tue 05 Mar 2024 18:02:41 +0000
ROA not after:            Tue 04 Mar 2025 18:07:41 +0000
asID:                     22927
IP address blocks:        2800:a00:de00::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:a7:ec:8a:a5:64:c0:07:35:55:8b:a9:2e:91:27:69:9a:e3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:41 2024 GMT
            Not After : Mar  4 18:07:41 2025 GMT
        Subject: CN=3C0B62D7E9071F6DF6BC5E72176F9C501223ACC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:ad:67:25:54:d3:e3:4d:ea:0a:50:cd:97:
                    5f:d7:7c:c1:18:86:1a:27:0b:f8:6f:65:13:67:c4:
                    80:a9:8f:f3:99:b8:27:18:5b:77:f5:1d:5c:73:a9:
                    7c:01:ce:c5:ca:08:1e:4b:ec:7e:aa:b1:da:62:13:
                    f0:b4:7c:cd:e4:3f:dd:b4:73:96:b5:cb:0a:7f:98:
                    87:07:ed:49:a3:98:2d:be:e2:f1:cb:90:b8:cd:7f:
                    97:b4:f8:d9:11:8c:fe:b1:3e:81:09:be:a7:86:92:
                    a6:cc:22:24:fe:9d:9b:ba:38:81:6f:6b:4a:98:4b:
                    0c:cf:8e:a4:0f:78:69:30:9a:91:6c:15:3c:0d:b3:
                    ad:fd:ae:8e:0a:17:9b:7f:7e:ff:0a:e9:2a:cb:d4:
                    1b:40:5c:03:3c:53:c5:3f:cb:28:db:8c:3a:99:d7:
                    6d:34:dc:0c:a5:e1:65:cf:be:51:90:f6:5a:bc:f7:
                    5e:89:1c:d9:02:17:dc:f3:26:bb:40:51:06:98:ae:
                    8d:b1:23:97:2e:a3:29:2f:63:b7:2e:58:69:ac:28:
                    1f:6c:37:f6:a9:9c:9b:f8:be:db:62:35:54:d4:f2:
                    4d:45:25:09:cf:65:db:27:93:81:cd:dd:c9:f4:74:
                    cf:4e:7a:26:42:c8:6b:88:75:84:87:86:df:a0:7d:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0B:62:D7:E9:07:1F:6D:F6:BC:5E:72:17:6F:9C:50:12:23:AC:C5
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a646530303a3a2f34312d3431203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:de00::/41

    Signature Algorithm: sha256WithRSAEncryption
         64:db:a0:de:b2:9b:aa:8b:c9:4c:bd:fa:bb:95:ae:f8:ed:d4:
         7b:9d:09:e9:31:9c:00:72:1d:36:52:ae:62:e2:ad:d9:75:5f:
         ea:1d:4c:bf:52:3b:47:1d:ee:bb:e9:b2:c2:b1:27:b3:8f:25:
         69:9f:8c:d5:38:29:c1:18:1d:75:15:42:26:c6:a3:06:16:e2:
         3a:27:80:2a:32:11:96:17:27:6f:a8:9d:92:d4:1f:d7:aa:1e:
         d3:3d:43:ce:14:74:aa:d4:5d:b0:0f:25:2d:5f:eb:a2:6f:92:
         72:37:07:fc:1b:bc:44:86:53:0e:bc:1a:d8:5c:aa:53:3b:40:
         eb:b9:b5:da:94:6d:85:99:4d:a5:4d:25:f4:51:e6:6a:3c:96:
         dc:37:3d:54:94:5d:25:2b:c6:8f:cb:35:a0:a9:a2:b1:30:af:
         37:2f:47:1a:bd:10:e9:a6:2e:b9:4d:d1:f3:c6:cf:4d:b7:b9:
         06:38:ac:e6:30:a8:75:ad:2f:99:6a:07:36:92:18:ce:dd:3f:
         40:b5:94:d3:73:66:2a:a7:41:61:50:50:9c:6f:4d:0c:9a:15:
         cb:fa:df:68:a3:a6:a8:7d:f4:33:6f:dd:c2:28:e4:e1:69:42:
         20:88:a8:86:9d:fd:ca:ea:e4:de:7f:9d:8f:5b:1d:79:fd:5c:
         c4:97:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org