Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3266303a3a2f33322d3438203d3e203237363638.roa
File:                     323830303a3266303a3a2f33322d3438203d3e203237363638.roa (raw, json)
Hash identifier:          5tO4ygmlQ52taZlRcQ/2lPV7Fjb4Y0cvKZruQS1JXDQ=
Subject key identifier:   D3:62:A2:F9:FD:B6:23:F7:2E:9B:C8:A3:8C:5D:76:C2:E4:43:EB:45
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       5223143BC3671A71F1813A7144F60594498EACDA
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3266303a3a2f33322d3438203d3e203237363638.roa
Signing time:             Tue 05 Mar 2024 18:21:42 +0000
ROA not before:           Tue 05 Mar 2024 18:16:42 +0000
ROA not after:            Tue 04 Mar 2025 18:21:42 +0000
asID:                     27668
IP address blocks:        2800:2f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:23:14:3b:c3:67:1a:71:f1:81:3a:71:44:f6:05:94:49:8e:ac:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Mar  5 18:16:42 2024 GMT
            Not After : Mar  4 18:21:42 2025 GMT
        Subject: CN=D362A2F9FDB623F72E9BC8A38C5D76C2E443EB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:fe:54:16:6a:83:15:cd:b8:eb:bf:f8:1d:
                    ac:03:ce:67:23:9a:e7:a7:5b:7b:dc:8a:c9:ee:32:
                    eb:c8:b1:04:c0:c7:51:a0:1b:11:8f:4c:33:71:c7:
                    12:5b:22:52:61:28:5f:80:f5:a3:46:d8:0a:5a:cf:
                    fe:77:a6:fd:50:e5:ec:6b:98:88:90:5a:80:0c:3d:
                    11:00:c6:7a:50:28:6a:cd:23:36:0f:13:cd:44:b3:
                    e0:1f:4b:9b:9d:0f:2f:51:22:d1:80:4d:ac:25:d4:
                    99:16:a5:ad:bf:12:dc:ca:f7:1d:55:0d:60:9e:0a:
                    db:fd:73:83:66:33:d8:28:86:b5:67:ff:7e:2c:fa:
                    d4:d1:95:cb:bd:7a:a1:28:c2:2b:67:82:e8:cf:a9:
                    6e:0f:38:df:31:16:87:70:74:55:13:6a:10:51:b8:
                    8f:36:14:fc:68:1b:c0:53:ed:dd:36:63:1e:e9:05:
                    4f:0a:1b:a6:29:10:ae:95:90:39:25:0e:c2:42:ea:
                    d6:f3:0b:f0:b1:56:4c:eb:66:89:3f:ea:ab:28:7e:
                    35:8a:dc:46:43:d2:ac:39:35:1e:5c:c3:ae:7b:19:
                    74:17:7f:89:58:97:16:82:fc:28:b3:c2:67:37:f7:
                    10:21:a1:b1:b3:e8:7e:33:49:25:e8:29:65:5d:b3:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:62:A2:F9:FD:B6:23:F7:2E:9B:C8:A3:8C:5D:76:C2:E4:43:EB:45
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/323830303a3266303a3a2f33322d3438203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:2b:f4:4e:96:93:95:e6:82:51:bb:4c:42:52:4d:12:5a:06:
         53:80:01:bc:4d:96:31:9f:da:d2:e6:0b:16:08:f8:8a:94:23:
         6c:34:6a:e7:62:d8:5f:7f:4c:57:bc:a0:a3:22:f6:e4:7e:2c:
         d6:45:90:64:ec:be:10:c7:4b:5b:b7:77:39:1a:01:2c:b9:dc:
         76:fd:ea:90:5b:4f:70:4a:50:c1:a4:b1:d0:6b:70:37:4c:91:
         4e:1c:bd:14:00:c7:b0:59:9d:79:fe:b7:8d:c5:ff:c5:05:87:
         04:65:62:95:75:d5:18:8f:b1:d3:82:f7:6c:64:12:42:71:22:
         84:eb:18:dc:70:3c:11:ee:3f:a8:de:e6:7a:2b:55:b1:23:4e:
         47:ba:c7:9f:86:8e:b0:90:6a:d1:1c:ea:33:cd:f2:0e:d7:0b:
         6a:33:46:eb:6f:be:30:90:36:bd:41:bf:d8:2b:04:2b:e7:40:
         58:c6:d5:08:0e:63:93:72:91:7a:5c:72:df:96:40:f6:db:66:
         2a:19:08:53:ce:0a:ce:7f:98:5e:06:de:14:30:89:96:0a:59:
         ae:7e:9d:7a:4b:d9:75:4b:90:58:19:0c:0c:ff:a1:b0:a6:9a:
         9c:4e:00:0c:61:ab:40:a8:48:6f:ba:a3:31:10:ab:0f:b4:7f:
         69:bf:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org