Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/323830303a6161303a3a2f33322d3438203d3e203532333530.roa
File:                     323830303a6161303a3a2f33322d3438203d3e203532333530.roa (raw, json)
Hash identifier:          6WrYSHIuk6UVcBb2pqQnM4artROZ2yLSJAGnSo3XSdM=
Subject key identifier:   BB:CD:25:C6:61:BE:32:90:25:4F:35:C6:14:F9:A1:DD:E9:49:F0:10
Certificate issuer:       /CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
Certificate serial:       1E0A0B7CF161A826F0D4EF373555E8A8CADF85F5
Authority key identifier: CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/323830303a6161303a3a2f33322d3438203d3e203532333530.roa
Signing time:             Tue 05 Mar 2024 17:53:13 +0000
ROA not before:           Tue 05 Mar 2024 17:48:13 +0000
ROA not after:            Tue 04 Mar 2025 17:53:13 +0000
asID:                     52350
IP address blocks:        2800:aa0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0a:0b:7c:f1:61:a8:26:f0:d4:ef:37:35:55:e8:a8:ca:df:85:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
        Validity
            Not Before: Mar  5 17:48:13 2024 GMT
            Not After : Mar  4 17:53:13 2025 GMT
        Subject: CN=BBCD25C661BE3290254F35C614F9A1DDE949F010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:f2:3a:a3:ea:c7:ce:29:c8:e0:a5:b4:cf:
                    b9:06:fe:ec:d8:f1:66:94:f1:9d:34:2f:89:53:08:
                    02:44:5d:7f:01:b7:09:88:98:ea:6b:ef:dc:8b:bf:
                    30:30:83:e8:9d:aa:14:d8:2e:90:b0:bc:75:cf:0b:
                    a6:67:e9:4a:17:d3:ec:01:69:1d:f7:6b:e4:e6:a4:
                    9d:83:c3:8b:14:a2:5e:a9:94:f3:30:91:18:b2:ce:
                    42:6e:82:20:58:6f:f7:bd:f5:2b:6f:f6:9e:af:46:
                    94:52:b9:b3:05:07:22:e7:d2:9c:38:8c:47:0e:37:
                    3a:5c:ba:ab:89:db:6d:57:c9:14:63:38:9c:fd:eb:
                    c6:49:29:60:3d:bc:bf:4f:eb:38:78:c6:da:e7:87:
                    b9:85:8b:78:16:78:61:61:20:0b:38:9e:8e:5e:94:
                    8d:34:c9:32:d1:e3:33:d7:29:2c:3e:f3:4e:e1:f9:
                    88:f4:ac:84:ee:a0:8d:79:40:59:fe:08:09:d9:9c:
                    40:b4:46:e6:66:14:66:52:c2:12:9d:91:3c:a6:2c:
                    74:bf:6b:81:7c:c8:ce:fc:13:1e:04:41:ae:f8:7e:
                    96:d6:fb:d1:9d:3c:cb:a5:a6:14:e3:62:87:b1:52:
                    e4:31:59:9d:08:c3:f5:ab:9c:48:64:6f:8a:73:73:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CD:25:C6:61:BE:32:90:25:4F:35:C6:14:F9:A1:DD:E9:49:F0:10
            X509v3 Authority Key Identifier:
                keyid:CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/323830303a6161303a3a2f33322d3438203d3e203532333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:91:1f:ce:7a:7c:2f:04:bb:f2:4c:25:b0:8f:31:94:cb:
         51:e3:d3:ae:5f:3a:68:ba:c0:16:8d:fc:43:e2:02:a1:e3:df:
         48:29:89:fb:68:c9:df:5f:52:fe:90:65:86:15:7e:b1:9d:dd:
         a0:45:c6:a9:65:04:37:b0:28:68:c0:fe:de:79:62:a2:e6:a1:
         a6:fd:ab:6c:48:f9:22:52:ac:ba:23:f2:8a:cc:75:9a:41:6a:
         83:d7:9b:de:d5:aa:d9:a7:db:d3:84:81:d7:2e:9a:14:40:e6:
         f8:3c:65:7c:8c:1c:81:ee:80:e0:fc:0d:a2:03:04:8c:dd:f1:
         39:16:a5:59:a6:37:bc:a7:47:3f:cf:bc:7a:9b:6c:96:b2:2a:
         63:d7:36:7d:bf:78:6f:6e:52:66:df:aa:b5:ff:dd:b9:ae:66:
         96:98:1f:cd:0d:30:4e:92:b6:02:85:5c:bc:3a:b1:92:aa:d7:
         40:02:78:95:e7:7e:6a:04:eb:15:b1:98:e2:17:55:56:cc:4e:
         ed:e5:25:2a:48:a3:6e:7b:00:39:f6:e2:52:7e:0e:d5:28:ff:
         57:77:c2:b6:47:f8:79:56:9b:3e:1d:60:e0:e1:f2:e8:c9:88:
         02:29:08:fd:76:e7:d7:7a:83:0c:f9:8f:11:ff:ea:85:47:c1:
         7e:a1:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 08:31:21 2024 by rpki-client on console-ams.rpki-client.org