Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a383030303a3a2f33342d3438203d3e203134323332.roa
File:                     323830303a3262303a383030303a3a2f33342d3438203d3e203134323332.roa (raw, json)
Hash identifier:          pJ8nvKwgSsoO4LtRuHvZBxVdeDsjqLXJ9BV8//9BmXY=
Subject key identifier:   6D:07:A8:95:FB:15:B5:E7:5B:BA:5B:99:4F:0E:1B:53:5A:4D:89:4C
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       723FBAC96B77480F3BB5295B990E8C3736103D03
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a383030303a3a2f33342d3438203d3e203134323332.roa
Signing time:             Fri 12 Apr 2024 13:40:00 +0000
ROA not before:           Fri 12 Apr 2024 13:35:00 +0000
ROA not after:            Fri 11 Apr 2025 13:40:00 +0000
asID:                     14232
IP address blocks:        2800:2b0:8000::/34 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3f:ba:c9:6b:77:48:0f:3b:b5:29:5b:99:0e:8c:37:36:10:3d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Apr 12 13:35:00 2024 GMT
            Not After : Apr 11 13:40:00 2025 GMT
        Subject: CN=6D07A895FB15B5E75BBA5B994F0E1B535A4D894C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:62:67:69:26:74:ee:97:d8:24:d8:72:a5:
                    28:5a:33:af:38:72:a8:eb:61:56:35:2f:47:04:dc:
                    c2:49:56:8e:4b:53:37:80:dd:03:27:49:91:bf:d5:
                    6d:22:d0:16:be:70:31:9a:b7:12:03:69:3d:a3:62:
                    80:f8:e6:42:33:ff:82:66:c1:e5:7d:73:8f:5f:5a:
                    6f:6b:fc:98:e5:2d:51:02:a6:3c:86:99:d6:ae:52:
                    c8:1f:3b:84:15:5f:6a:21:52:7d:6a:4c:7a:46:78:
                    d4:bd:3d:23:9c:a3:23:5f:bd:96:18:46:12:b9:66:
                    81:f1:ad:1b:b3:ea:23:bb:38:09:9d:99:59:9e:cf:
                    c9:2a:24:33:c3:d4:b4:8e:04:a6:86:15:4f:90:6c:
                    fb:45:e4:5c:c2:9c:02:a6:a8:b7:aa:f3:c6:14:bc:
                    fa:08:c9:09:a3:1e:01:e4:cd:a9:c2:5e:ab:47:0a:
                    b4:a4:e5:e5:6c:65:d9:ae:7a:01:4e:29:3d:eb:48:
                    f4:61:07:44:cd:af:69:b0:44:f3:36:e5:89:5f:21:
                    fb:99:ac:e7:65:80:ab:f5:34:29:42:15:0c:60:23:
                    b9:c5:1c:19:fa:22:ed:68:dc:f2:68:3c:0e:4e:6d:
                    6e:d6:ce:2b:63:f7:76:a4:79:a8:58:50:c2:03:63:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:07:A8:95:FB:15:B5:E7:5B:BA:5B:99:4F:0E:1B:53:5A:4D:89:4C
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a383030303a3a2f33342d3438203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:ac:00:36:fc:d9:e1:a7:44:e0:10:77:9b:ce:1d:6e:4f:
         f0:41:b9:68:53:db:01:1c:b6:c1:7c:a1:6a:0b:68:1e:4f:14:
         f6:21:f1:fa:4c:1b:de:ee:2c:47:78:f6:1b:ec:33:46:b6:0f:
         c5:b1:e0:b6:b5:03:03:0d:33:ac:8f:2d:c4:26:28:e2:e3:2a:
         dd:b6:c7:f8:b3:72:bd:67:c9:51:bf:58:bb:ab:11:de:1d:ae:
         fd:a9:7a:2f:20:2d:00:0e:a8:03:e8:f3:0a:75:2a:78:fa:bf:
         9e:b7:bc:2f:ef:0a:6c:12:00:36:51:88:61:7e:21:29:28:23:
         71:9a:4f:b7:ed:94:47:ce:21:03:9a:04:37:1c:9c:6a:28:44:
         1f:23:15:5e:9a:db:87:78:95:8f:af:49:90:9e:59:62:a4:02:
         6d:d2:1e:02:6e:73:c5:d9:c5:29:2f:e8:c9:0a:73:f6:c6:f9:
         8c:a2:71:3c:dc:9e:ca:66:8f:a9:9e:6f:f4:0d:09:c2:8e:3f:
         0e:5c:02:f8:31:d7:ed:b5:96:b7:b0:e7:63:f7:fe:4e:3d:98:
         4a:9d:75:cf:75:98:72:9b:e9:e0:6c:cf:be:e6:1d:94:45:13:
         0a:ea:b9:4a:e6:69:18:6b:1a:22:b7:c5:01:1c:9a:ff:d6:6b:
         7d:78:f2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org