Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/323830303a6263303a3a2f33322d3438203d3e203230303830.roa
File:                     323830303a6263303a3a2f33322d3438203d3e203230303830.roa (raw, json)
Hash identifier:          y3SXjFuRMawkkMA1O+FddZl8e7onCSH4HgGgOQ0O0a4=
Subject key identifier:   EB:8A:58:36:43:76:E5:D8:DF:0F:95:6E:D7:AD:34:37:66:38:AC:A1
Certificate issuer:       /CN=6A595D7CA88F85E87BEC621A6A251A58F6E89C5B
Certificate serial:       537224FAFA27CE71837F24A78275E98F9110CEF2
Authority key identifier: 6A:59:5D:7C:A8:8F:85:E8:7B:EC:62:1A:6A:25:1A:58:F6:E8:9C:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/323830303a6263303a3a2f33322d3438203d3e203230303830.roa
Signing time:             Tue 05 Mar 2024 18:04:13 +0000
ROA not before:           Tue 05 Mar 2024 17:59:13 +0000
ROA not after:            Tue 04 Mar 2025 18:04:13 +0000
asID:                     20080
IP address blocks:        2800:bc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:72:24:fa:fa:27:ce:71:83:7f:24:a7:82:75:e9:8f:91:10:ce:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A595D7CA88F85E87BEC621A6A251A58F6E89C5B
        Validity
            Not Before: Mar  5 17:59:13 2024 GMT
            Not After : Mar  4 18:04:13 2025 GMT
        Subject: CN=EB8A58364376E5D8DF0F956ED7AD34376638ACA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:62:b5:94:7d:75:3e:d6:5e:d5:85:be:0b:
                    32:f4:4a:66:c5:b8:38:eb:f5:33:7f:17:12:89:0d:
                    82:d6:67:48:a5:75:3f:5f:52:49:48:e3:46:ca:f3:
                    4a:dd:42:01:a4:75:0f:38:d6:ae:61:8f:80:1f:10:
                    41:04:5c:eb:42:cf:5c:85:4c:60:66:40:fb:92:05:
                    d7:81:76:a6:d0:27:e3:3f:83:ba:b9:6f:cf:a9:04:
                    36:fc:d2:2a:c8:e8:7b:ff:f6:89:83:f4:31:dc:2c:
                    c8:8e:e1:8d:bf:d1:73:f5:26:aa:d7:0e:77:a7:be:
                    2e:d2:1f:31:74:b2:ae:8f:1b:af:b0:67:e2:44:5d:
                    0e:e2:fe:53:d9:18:e5:1b:da:6c:ad:27:6c:71:09:
                    dd:d2:d4:9c:88:6b:70:1d:f5:52:7e:c6:5b:70:14:
                    f7:b0:86:73:5b:0a:41:b3:00:6a:fb:87:2a:01:67:
                    61:ee:18:ff:93:ba:2c:6d:ef:d0:cb:81:bf:06:f0:
                    b8:46:1c:57:99:13:5f:e5:9a:91:bc:e1:50:17:ce:
                    a4:f0:a3:81:fc:15:41:bb:e5:9a:88:21:2c:5e:71:
                    c1:01:fb:6b:c1:af:3b:de:84:c8:70:e2:eb:39:f7:
                    02:29:13:f6:7c:0c:5a:bd:e0:cd:8c:3c:8c:e5:5f:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8A:58:36:43:76:E5:D8:DF:0F:95:6E:D7:AD:34:37:66:38:AC:A1
            X509v3 Authority Key Identifier:
                keyid:6A:59:5D:7C:A8:8F:85:E8:7B:EC:62:1A:6A:25:1A:58:F6:E8:9C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/323830303a6263303a3a2f33322d3438203d3e203230303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:47:3c:45:50:66:65:ca:38:dd:18:58:4a:50:c8:24:84:6e:
         7a:e7:c1:b1:d5:2b:25:c5:f9:bc:e7:6b:48:96:03:14:60:d6:
         a3:5f:0a:e3:73:b4:cd:b9:47:c1:de:57:5a:3c:e8:db:fd:e4:
         78:4e:32:09:cf:91:15:0f:ce:fc:6a:f7:ab:57:52:c8:e8:53:
         7c:33:d2:a0:7f:9c:b2:cc:43:68:e8:02:e1:2b:14:1d:c8:84:
         36:49:0a:3b:31:e5:c0:f2:e1:57:d9:55:89:f4:b0:1b:dc:b2:
         2c:3c:ad:0e:b0:00:f5:ce:fe:7f:64:ae:bf:2b:50:27:b3:2d:
         d0:ac:e4:51:e8:f1:4c:40:ba:5f:f0:c9:bd:e1:f1:14:f4:e9:
         0b:c6:7a:93:0f:01:95:58:bf:62:b6:2d:be:9b:08:f4:1b:12:
         3e:eb:58:23:7b:83:f6:b5:c5:1d:22:69:27:4b:f8:8e:b9:4d:
         17:36:4d:27:29:37:6b:14:7b:cd:b9:46:dc:10:30:f2:42:3d:
         d6:08:1a:31:c2:f5:cc:bc:1b:b2:1e:3d:8c:e6:32:72:2f:fa:
         d2:22:40:bd:83:f7:68:c7:1c:f0:98:53:75:93:68:bc:5c:82:
         0a:3a:33:82:2a:ab:76:56:2e:95:c3:3e:3b:af:62:52:2d:67:
         e3:de:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 21:41:16 2024 by rpki-client on console-ams.rpki-client.org