Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/323830303a61303a3a2f32382d3634203d3e2036303537.roa
File:                     323830303a61303a3a2f32382d3634203d3e2036303537.roa (raw, json)
Hash identifier:          yoHR7Iv8vVdM1i+q5fuMhsJsNTNyNWKllVwheEMuToo=
Subject key identifier:   6A:68:C6:E0:10:80:51:0F:FE:D0:78:BC:43:2D:E0:B7:55:12:38:86
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       6638FE648B76360166E22B13D1F0080D5929F29B
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/323830303a61303a3a2f32382d3634203d3e2036303537.roa
Signing time:             Tue 05 Mar 2024 18:20:00 +0000
ROA not before:           Tue 05 Mar 2024 18:15:00 +0000
ROA not after:            Tue 04 Mar 2025 18:20:00 +0000
asID:                     6057
IP address blocks:        2800:a0::/28 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:38:fe:64:8b:76:36:01:66:e2:2b:13:d1:f0:08:0d:59:29:f2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Mar  5 18:15:00 2024 GMT
            Not After : Mar  4 18:20:00 2025 GMT
        Subject: CN=6A68C6E01080510FFED078BC432DE0B755123886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:c6:e6:43:37:58:2d:96:2a:ea:2b:cd:0a:
                    52:e2:bc:a6:fa:79:a2:49:8c:3c:0c:a5:2f:dc:7e:
                    84:21:1f:f1:99:b4:44:d2:b9:b5:f2:64:37:16:eb:
                    d0:65:42:6a:86:af:31:a1:7e:9c:35:66:f6:1c:e8:
                    af:83:00:c6:b6:b1:72:b6:3f:23:48:63:fc:64:37:
                    a9:66:24:95:09:69:f3:6c:de:6c:64:97:12:6d:60:
                    51:98:a4:9c:59:29:4b:7a:64:10:06:fe:74:73:88:
                    b5:37:5f:d3:1d:33:fb:da:b3:45:3f:9c:f6:64:e4:
                    8d:d7:1b:25:7d:38:b2:6b:81:e4:bf:7a:0a:07:47:
                    23:e6:aa:35:7f:10:21:8e:aa:7b:d1:d8:90:ab:63:
                    60:14:ac:8a:ae:17:99:db:1a:27:fd:0d:5e:ce:af:
                    0c:e1:71:86:07:e7:a5:6c:b3:bb:5b:d4:94:9f:18:
                    74:e4:8c:16:51:8a:47:ff:45:04:10:0f:2d:06:91:
                    d5:24:54:44:30:59:17:bd:14:50:f4:e5:09:44:9d:
                    5d:48:d1:09:0b:6a:db:fd:f8:15:b8:ea:fe:02:8e:
                    bf:e4:5d:fe:e2:c1:db:50:34:3f:cf:bf:85:bb:e3:
                    72:a1:42:c3:36:91:03:52:21:b5:17:69:ec:17:c2:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:68:C6:E0:10:80:51:0F:FE:D0:78:BC:43:2D:E0:B7:55:12:38:86
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/323830303a61303a3a2f32382d3634203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a0::/28

    Signature Algorithm: sha256WithRSAEncryption
         66:22:66:e1:67:cb:3b:6b:4f:c2:f3:6b:bd:1f:3c:03:56:1e:
         23:e3:0d:99:c7:5d:ab:d9:29:7b:af:e4:80:01:0a:8e:15:bb:
         3c:84:bb:66:0e:80:c0:ed:04:5b:4a:98:d2:d6:df:74:31:eb:
         a6:6c:8e:a0:3f:04:ef:8b:fe:88:f8:49:d7:43:63:cd:41:63:
         2e:60:04:1e:8e:54:f1:7c:69:d2:56:74:91:dd:2a:a9:08:72:
         1b:77:e9:53:f2:e3:72:de:16:5a:f6:e8:01:39:c4:26:36:46:
         36:1f:d3:20:dc:8b:77:f6:d5:33:a5:e9:65:96:7a:da:81:7f:
         74:da:7e:8f:d0:98:0c:4e:0f:4d:09:a7:79:76:9c:19:dc:8f:
         64:41:3d:77:9b:8e:01:97:bd:fc:ad:96:36:27:42:cb:a1:16:
         6b:52:ff:43:7b:d6:d4:66:ac:ea:cb:0e:22:b8:67:95:fe:b0:
         28:d5:25:54:40:a0:e7:46:12:67:a7:2f:4c:53:7f:e4:20:a4:
         3e:e5:c9:2b:30:bf:1d:75:0f:63:fb:49:bd:4a:bc:4c:08:8d:
         15:40:fb:22:e6:85:f1:8a:42:9f:33:36:cf:49:d7:a1:10:7e:
         52:d9:b4:56:f8:8d:52:d1:de:b3:d1:d9:60:b2:06:c1:46:84:
         59:a9:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org