Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/323030313a313231303a343030303a3a2f33342d3336203d3e2032353439.roa
File:                     323030313a313231303a343030303a3a2f33342d3336203d3e2032353439.roa (raw, json)
Hash identifier:          x2EpkDbpjPhx6BcqzP/KInjRrm/FESVnxdVB9JapVo4=
Subject key identifier:   18:34:85:5D:EC:F4:ED:A3:1C:C7:B3:46:52:08:48:D1:62:2F:C0:81
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       6C308898109F3533DC257B15710E0AB62B72FB83
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/323030313a313231303a343030303a3a2f33342d3336203d3e2032353439.roa
Signing time:             Sat 08 Jun 2024 02:45:00 +0000
ROA not before:           Sat 08 Jun 2024 02:40:00 +0000
ROA not after:            Sat 07 Jun 2025 02:45:00 +0000
asID:                     2549
IP address blocks:        2001:1210:4000::/34 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:30:88:98:10:9f:35:33:dc:25:7b:15:71:0e:0a:b6:2b:72:fb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: Jun  8 02:40:00 2024 GMT
            Not After : Jun  7 02:45:00 2025 GMT
        Subject: CN=1834855DECF4EDA31CC7B346520848D1622FC081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:0c:d8:20:b9:eb:d1:87:fa:20:0d:94:b1:
                    db:b0:e7:dd:f1:3c:b5:a8:1d:42:66:cf:57:e5:31:
                    58:d8:ec:b1:ca:92:77:75:3e:aa:be:5a:82:86:df:
                    07:33:c6:5f:40:58:75:e8:5d:65:56:22:11:0f:2b:
                    a4:e6:72:4f:81:f4:c4:29:41:51:b1:c0:da:dc:ab:
                    ba:49:40:d1:f3:c4:f4:43:00:b3:5c:b1:96:98:31:
                    01:e9:a4:a8:0f:4d:52:6b:e0:f2:49:1b:6a:b5:be:
                    52:36:67:db:b2:75:70:bd:23:35:c7:0d:86:40:48:
                    d3:16:8c:69:ae:cb:01:dc:4d:f6:90:a2:e1:84:e3:
                    d8:aa:4d:19:56:e5:13:35:f5:80:13:46:02:31:d3:
                    21:b2:f1:89:59:3c:73:99:87:b8:d6:49:38:6e:17:
                    64:2b:5c:8a:4c:fb:79:a0:19:d3:56:68:3d:40:38:
                    90:7b:a2:27:bc:31:a0:12:5a:b4:43:38:31:1d:f8:
                    b2:76:d6:5f:67:05:fc:b2:4f:24:10:fb:33:4d:d2:
                    7a:ce:fa:8f:23:a4:5e:48:50:48:1b:cd:fa:0e:e7:
                    29:50:64:11:6e:78:42:db:14:df:68:29:4e:67:d4:
                    cf:92:7b:05:45:ef:65:74:7d:1f:df:c3:22:d8:9a:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:34:85:5D:EC:F4:ED:A3:1C:C7:B3:46:52:08:48:D1:62:2F:C0:81
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/323030313a313231303a343030303a3a2f33342d3336203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1210:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:dc:43:72:f5:c2:c7:7c:79:81:5c:7b:95:74:6f:7b:24:
         78:e8:cb:ef:0b:6b:76:7a:10:cf:f2:ae:38:b0:3f:20:66:99:
         1c:c8:1e:0a:85:23:cf:1a:14:25:da:15:71:d3:8c:5e:13:0e:
         85:16:93:56:87:cd:1d:42:14:c6:35:8c:ee:11:99:1b:14:ea:
         8b:c7:b0:e0:22:dc:b0:08:62:6e:cc:c0:71:7e:b7:c2:ed:22:
         ab:83:08:38:16:01:f5:1e:86:49:f2:29:63:7e:8b:d1:c7:0a:
         c1:d5:ca:6f:8e:98:36:07:47:68:0e:3d:14:cb:31:31:d0:f9:
         ee:9b:80:e4:96:94:67:86:da:87:7d:36:b6:63:9b:c4:78:3c:
         07:a3:7e:84:89:a4:02:98:61:f4:c4:6c:33:47:4a:10:3e:6c:
         0f:17:ac:1b:d6:de:1b:0f:7f:4e:6b:85:fa:51:58:74:7b:98:
         7e:68:7d:6b:95:ca:59:3e:ab:d2:a6:4f:e3:5e:34:da:b9:11:
         a2:72:38:92:8a:07:9d:4c:8d:f8:79:16:60:65:2f:04:94:0e:
         93:37:12:5c:b9:8e:ce:19:a2:73:66:c9:c2:f4:c7:82:7a:32:
         41:2f:5f:89:49:cc:e2:8c:0a:cf:44:26:bf:d0:a9:77:08:15:
         a8:fb:b6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org