Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203237383933.roa
File:                     323830303a613033303a3a2f33322d3634203d3e203237383933.roa (raw, json)
Hash identifier:          iGl4RwtGVHBviNhQSvsJ+T/VIrVfLqKZezR82ibcwFo=
Subject key identifier:   69:8F:4E:3F:28:FB:09:43:CE:5F:25:CD:73:65:B2:A3:86:C4:BD:40
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       5FAF93DDBDBFB0D3B6883D641D005F857CEDDC64
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203237383933.roa
Signing time:             Fri 23 Aug 2024 22:35:01 +0000
ROA not before:           Fri 23 Aug 2024 22:30:01 +0000
ROA not after:            Fri 22 Aug 2025 22:35:01 +0000
asID:                     27893
IP address blocks:        2800:a030::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:af:93:dd:bd:bf:b0:d3:b6:88:3d:64:1d:00:5f:85:7c:ed:dc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Aug 23 22:30:01 2024 GMT
            Not After : Aug 22 22:35:01 2025 GMT
        Subject: CN=698F4E3F28FB0943CE5F25CD7365B2A386C4BD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:c8:31:7d:e8:85:5f:93:6c:23:e0:d9:13:
                    35:67:88:bd:92:61:1a:66:92:d8:2a:b8:c3:c4:3a:
                    f1:52:73:29:45:37:6d:9f:a1:31:fd:2b:c7:c4:76:
                    9a:66:72:b5:60:40:15:84:2a:06:8a:39:5d:11:31:
                    0e:dc:b2:dd:b6:71:53:1f:99:9d:ed:ca:a2:49:d6:
                    3e:b4:43:e7:6e:38:d4:08:be:41:5c:0a:11:f4:cb:
                    0e:1f:6b:07:3e:be:b4:85:d2:7d:93:04:d4:f1:11:
                    2b:b3:4d:7a:9d:8d:c9:24:78:9f:93:7c:99:fd:87:
                    db:ab:a0:a3:d4:4a:e1:5b:6b:7f:4c:d6:53:00:01:
                    23:7d:4a:65:b4:5a:75:3f:8d:c8:14:70:a0:18:5d:
                    ef:69:59:f3:51:67:cb:4d:a9:bf:1d:d1:57:52:83:
                    12:7b:51:de:8b:ff:f1:42:28:e6:77:e6:d7:65:a7:
                    de:fa:ac:8b:08:cf:1f:00:c8:73:02:a1:01:7f:e8:
                    f1:0f:f6:85:5c:5b:d5:9b:9e:5c:df:17:61:40:64:
                    e8:76:7c:35:7f:c5:b8:3f:a1:09:81:c5:d9:66:83:
                    fe:ac:59:eb:31:03:38:cf:72:b1:29:7b:5e:57:a9:
                    74:e1:7a:87:4d:5c:b7:f8:31:c0:21:72:6e:ff:47:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8F:4E:3F:28:FB:09:43:CE:5F:25:CD:73:65:B2:A3:86:C4:BD:40
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203237383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a030::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:20:02:a1:0a:30:df:19:71:be:04:b3:20:ab:31:4d:fe:
         02:47:d8:83:74:52:a8:43:40:72:b8:bb:26:91:2d:c1:51:f5:
         4a:e5:23:00:7c:cf:d1:7c:48:fc:96:10:08:e2:29:de:e1:1c:
         71:bd:9e:63:c7:cb:65:00:f4:43:f8:ab:5a:ae:50:4e:7c:8b:
         00:b1:49:a2:46:65:0d:2f:21:54:ff:91:47:08:a7:ce:90:2a:
         9f:21:a8:2d:69:ae:de:3f:21:e2:bd:67:72:e7:3a:2b:82:0f:
         5b:f7:b2:13:9d:de:7b:30:cd:52:2a:29:30:42:d1:b1:a9:45:
         15:05:c6:dd:62:2e:1c:3d:25:4d:04:1c:a8:91:8c:de:d5:74:
         32:9f:a9:71:86:ea:ce:26:72:4a:91:4e:63:48:19:82:f2:60:
         93:29:89:6e:89:05:3e:46:1a:b1:13:d7:10:56:03:e4:7a:18:
         c3:1f:c7:3e:94:4d:7e:61:38:53:a4:59:49:cf:68:85:3c:9c:
         e4:4b:53:29:d8:3c:eb:c2:d0:0a:81:f9:99:ab:74:a2:ee:d2:
         96:f7:ef:21:a7:5d:76:75:9e:dd:fe:06:e5:13:62:5e:ff:22:
         25:3c:0d:24:47:c3:3d:88:e3:62:93:f2:ca:b1:b1:14:a6:88:
         27:1c:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org