Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3332203d3e203132393536.roa
File:                     323830303a3234303a3a2f33322d3332203d3e203132393536.roa (raw, json)
Hash identifier:          HyskKKu7PxRvn+VUjiGqLNZz6YxouSc0X73+cWdNOek=
Subject key identifier:   37:08:60:B3:EE:E7:53:33:2B:C9:18:52:BB:95:3B:31:E5:D8:F8:AD
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       33B50F7AB857A3576833639A3C81BEA6CA7A88D6
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3332203d3e203132393536.roa
Signing time:             Wed 06 Nov 2024 10:35:00 +0000
ROA not before:           Wed 06 Nov 2024 10:30:00 +0000
ROA not after:            Wed 05 Nov 2025 10:35:00 +0000
asID:                     12956
IP address blocks:        2800:240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b5:0f:7a:b8:57:a3:57:68:33:63:9a:3c:81:be:a6:ca:7a:88:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Nov  6 10:30:00 2024 GMT
            Not After : Nov  5 10:35:00 2025 GMT
        Subject: CN=370860B3EEE753332BC91852BB953B31E5D8F8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:97:d7:6a:2e:dd:b7:32:b3:fe:e4:2c:18:cf:
                    28:34:6e:7b:78:25:bf:87:a6:fa:79:4e:a2:1b:c7:
                    05:18:57:af:2d:6e:4f:1c:d3:b5:24:16:e4:dd:95:
                    1d:88:ae:19:f4:db:6e:0c:da:0c:c4:64:67:ac:96:
                    6d:d5:31:5d:ad:a7:0b:70:ed:42:b6:37:81:24:59:
                    de:1e:cf:c2:66:bd:2c:88:df:5a:b9:ea:08:0d:84:
                    bf:2e:3f:32:e8:52:18:48:28:68:fe:c6:a6:13:24:
                    c1:1f:04:f3:87:43:76:6b:19:0a:fc:67:04:e5:f3:
                    6c:3d:a8:b6:46:4a:b4:29:8e:3d:ae:91:a6:ee:fb:
                    8d:16:14:ca:e4:30:a8:c4:66:36:4a:8f:b8:03:6a:
                    73:b1:10:3c:6e:37:00:bb:cb:4e:d4:53:1f:00:e0:
                    56:5f:26:c0:93:6b:f7:5f:2f:fa:dd:9e:c0:95:c6:
                    2a:61:0b:65:52:79:e3:6c:a2:75:12:c7:a0:21:21:
                    44:73:bd:d6:cf:78:2c:6a:e0:85:3f:25:4d:eb:92:
                    a3:d0:c9:0b:39:1a:a6:cb:ee:d1:da:b2:c8:72:b7:
                    10:86:90:3f:43:0b:a1:21:20:70:dc:14:10:6b:0e:
                    50:a4:fb:db:83:db:a4:40:27:77:d5:29:90:26:ab:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:08:60:B3:EE:E7:53:33:2B:C9:18:52:BB:95:3B:31:E5:D8:F8:AD
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/323830303a3234303a3a2f33322d3332203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:6d:f1:86:c9:fd:c1:a5:bb:ba:a2:ff:a7:25:d1:fb:fa:
         fd:04:06:47:8c:24:d0:ab:75:ec:47:ad:dc:ae:05:fb:06:19:
         2f:ad:96:60:6d:73:ee:2f:07:db:4d:2a:90:9b:07:94:af:aa:
         f1:9b:26:47:9b:4e:5c:00:2c:8d:f8:3d:4e:2a:8c:d2:84:5c:
         97:45:32:c0:0d:34:15:ab:e0:8f:5b:6e:99:08:93:1e:27:9c:
         d2:08:e2:39:cd:21:26:63:ca:9d:c5:e9:6e:19:f9:3f:68:7d:
         b2:be:76:a7:64:ce:8b:7b:96:72:39:cf:34:78:65:6b:ac:33:
         c6:ce:1b:22:43:7b:41:2c:36:ed:50:4b:67:2e:03:30:64:df:
         20:fc:63:91:27:8c:9d:d4:ff:0b:db:a8:6f:67:1b:e6:05:52:
         89:5b:85:82:e4:45:54:d0:99:17:96:d8:5d:bb:66:b9:4b:ba:
         8a:d5:84:e2:f8:80:a9:ea:3a:b4:b1:d5:6c:52:e3:ad:b2:6b:
         43:ee:81:a2:34:fc:0e:e3:63:93:ea:05:92:34:3b:a0:42:23:
         c4:60:c1:69:74:8e:60:cc:33:10:23:5a:a7:ec:7b:13:d6:83:
         5f:a3:2d:0a:9b:1a:67:9f:13:19:0d:27:71:fd:bd:28:6f:44:
         f7:73:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org