Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323830303a3a2f34382d3438203d3e203237383735.roa
File:                     323830303a3131303a323830303a3a2f34382d3438203d3e203237383735.roa (raw, json)
Hash identifier:          aoJBGj696tuGi0IqLblnWhOijq9EwqipGc8ZrfCk6Z0=
Subject key identifier:   68:5D:63:B2:6C:F2:4B:34:36:72:27:BA:8F:90:B0:36:D7:2A:6B:7F
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       2E33DEA47AF09C36FAD592B8F6D14854333F42BD
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323830303a3a2f34382d3438203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 18:22:55 +0000
ROA not before:           Tue 05 Mar 2024 18:17:55 +0000
ROA not after:            Tue 04 Mar 2025 18:22:55 +0000
asID:                     27875
IP address blocks:        2800:110:2800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:33:de:a4:7a:f0:9c:36:fa:d5:92:b8:f6:d1:48:54:33:3f:42:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:55 2024 GMT
            Not After : Mar  4 18:22:55 2025 GMT
        Subject: CN=685D63B26CF24B34367227BA8F90B036D72A6B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:67:14:2c:7c:ee:5d:92:58:95:09:9c:56:
                    ce:b7:87:aa:fb:29:e0:dd:f1:68:af:3d:8e:91:0a:
                    ec:7e:5e:9c:a8:9e:ee:a5:52:50:55:5a:b3:c0:94:
                    e0:42:3a:fa:a1:c8:d3:39:5c:54:3b:c2:d7:3c:ff:
                    d2:e7:d3:cf:51:b2:c8:d9:0a:64:78:c2:98:12:b4:
                    f0:2a:cc:43:5d:83:ac:c7:5c:50:a6:69:ff:f8:77:
                    f4:4e:c3:5f:f8:56:b6:f4:e3:52:7f:98:0c:c5:51:
                    85:22:aa:f1:5e:cd:90:70:26:e1:c5:5e:82:61:e2:
                    7f:81:fc:6a:1b:5f:48:c3:27:c7:e2:4d:00:7c:e3:
                    06:f2:47:f8:13:7d:b1:78:03:3d:72:f0:5c:c6:09:
                    ff:03:eb:75:87:84:14:a5:c0:34:ed:5a:d1:05:77:
                    e9:c1:95:cc:28:0c:e7:bc:2c:1a:8e:85:3b:a2:81:
                    45:d9:ff:b7:9f:88:94:63:48:1c:f4:3e:d1:8b:57:
                    ae:92:eb:83:5c:e2:09:26:5d:1f:a9:d7:dd:28:fc:
                    ae:5d:bb:4d:76:65:68:b8:71:99:5b:1f:78:08:ce:
                    0d:63:db:db:01:43:f0:bc:cb:4a:60:74:53:28:e9:
                    90:ab:0d:e9:cd:7f:ae:68:3e:cd:3d:c6:97:69:c7:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5D:63:B2:6C:F2:4B:34:36:72:27:BA:8F:90:B0:36:D7:2A:6B:7F
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a323830303a3a2f34382d3438203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:40:13:43:47:64:1e:ec:3f:37:22:ee:db:e6:7b:dd:d6:7f:
         f1:bd:82:bf:9c:af:00:b3:b0:c4:8a:d5:4a:14:a7:f9:97:db:
         23:db:15:9e:70:35:31:4f:e0:1e:aa:50:37:5e:67:e4:7c:9e:
         6d:b3:6e:96:c1:b0:52:d2:b9:28:1f:3c:1e:f1:38:5d:05:76:
         e6:aa:fb:03:64:c3:52:0a:4a:16:e4:92:a6:eb:0b:58:23:3a:
         57:05:c0:f3:d5:84:15:6d:69:91:fa:b3:57:a0:c7:26:20:f6:
         a6:73:c8:79:c4:dc:0d:35:55:15:fd:af:80:44:5e:1c:8b:98:
         9f:19:b9:48:11:cf:53:f4:51:95:70:0a:49:01:0d:3e:04:8d:
         2e:2e:78:08:01:24:4e:e3:f9:24:dc:bd:0a:35:92:4a:a1:05:
         9c:f4:24:9c:b4:75:58:f0:7f:d8:16:ea:56:0f:f1:c3:f6:16:
         6c:7f:28:19:b1:46:a9:de:6b:b2:72:3a:da:ab:8f:e7:00:f5:
         01:0e:22:d3:d8:af:83:b6:3c:fd:2e:f0:06:34:97:e5:e7:0b:
         5c:5c:68:5a:5c:16:65:66:81:83:21:fe:e5:6c:5b:90:f2:ea:
         86:e8:6b:78:eb:c8:9e:b5:29:d2:09:51:03:f0:40:48:c3:6c:
         a3:79:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org