Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323830303a33303a3a2f33322d3332203d3e203237383037.roa
File:                     323830303a33303a3a2f33322d3332203d3e203237383037.roa (raw, json)
Hash identifier:          LFIe76JXsvRMf2xCuLJAkdkwsFonDh+W7LT2ov0I6Ng=
Subject key identifier:   C9:0A:05:4D:96:F2:89:0E:AC:19:77:A4:6F:FC:78:AA:A9:16:17:E9
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       6E217C96D7939CA53FC68D867B88E56D5ECBE93A
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323830303a33303a3a2f33322d3332203d3e203237383037.roa
Signing time:             Tue 05 Mar 2024 17:49:34 +0000
ROA not before:           Tue 05 Mar 2024 17:44:34 +0000
ROA not after:            Tue 04 Mar 2025 17:49:34 +0000
asID:                     27807
IP address blocks:        2800:30::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 21:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:21:7c:96:d7:93:9c:a5:3f:c6:8d:86:7b:88:e5:6d:5e:cb:e9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:34 2024 GMT
            Not After : Mar  4 17:49:34 2025 GMT
        Subject: CN=C90A054D96F2890EAC1977A46FFC78AAA91617E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:f3:ca:1e:01:0c:60:5a:96:36:2a:9c:cd:
                    7e:81:78:74:ec:02:77:62:09:a4:5b:15:d3:3b:79:
                    5a:e3:f5:6b:b6:55:cf:e1:2e:e1:58:a4:ea:7e:b9:
                    2c:0b:0e:55:46:4c:d4:c4:4e:2c:ad:dc:4a:ce:cd:
                    06:95:6d:b4:ee:b1:50:d6:92:53:0c:f4:18:a6:65:
                    49:97:21:b5:db:7a:5b:6e:6c:0b:b0:69:82:82:92:
                    46:1d:49:9f:eb:c8:d3:9c:cf:44:1a:e3:b4:f3:bc:
                    12:14:55:be:3c:18:59:ca:8b:75:8b:9d:17:16:3e:
                    19:57:99:33:b5:25:7d:50:46:93:c0:42:b8:7a:6e:
                    f9:be:5b:28:b8:c5:af:e1:13:c9:9b:8c:f3:35:0d:
                    e0:33:70:74:4d:8b:73:22:71:96:f9:6d:4d:cf:ca:
                    a0:34:f7:a9:ac:d7:a6:22:db:32:09:cc:94:4e:3b:
                    c6:b8:b5:8f:60:80:9f:c6:d9:12:d6:31:5b:86:a7:
                    7b:4f:96:ac:4d:fd:af:c0:18:4f:c8:7e:a1:f9:3e:
                    16:80:d3:72:c4:aa:de:a7:11:f8:be:a1:cb:d6:6e:
                    df:9d:ca:23:02:5e:61:12:ee:9a:de:6c:84:88:87:
                    f3:5e:cb:51:2e:d0:b8:20:d6:28:d0:04:c7:36:0d:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0A:05:4D:96:F2:89:0E:AC:19:77:A4:6F:FC:78:AA:A9:16:17:E9
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323830303a33303a3a2f33322d3332203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:30::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:52:d6:03:87:fe:82:2f:6b:da:e3:3a:11:7d:1e:b5:7b:69:
         c5:33:3a:b8:75:df:5d:7a:04:df:18:ba:87:f9:7a:62:b6:3a:
         0d:d8:92:e9:1f:27:1a:dd:89:f0:c0:48:74:af:8f:48:56:d6:
         61:31:fd:a4:89:93:e2:d8:ea:a8:c4:5a:19:c7:bb:6d:e6:20:
         cd:c3:b6:14:c5:de:28:62:84:f5:45:82:92:a7:bb:6b:2a:04:
         fd:2b:0c:9c:de:35:7e:c8:ed:6e:ae:be:7e:0a:1c:f3:cd:f5:
         5b:61:c8:9d:84:5e:aa:01:ac:27:e8:74:6c:08:80:da:b9:ea:
         27:40:f6:a8:fa:00:a5:19:11:13:96:1f:f9:a6:d8:a6:ee:2c:
         a3:9f:f8:6e:e6:e1:3f:c2:c1:11:4b:86:65:af:45:63:ac:1a:
         af:d0:43:40:ea:a1:4d:4b:b0:d1:a9:92:2a:12:5f:47:e3:22:
         9f:76:20:a9:e4:eb:ec:fd:17:39:6d:ae:04:81:4a:27:2e:d2:
         f3:86:ca:8e:e0:9b:3f:39:32:16:55:79:80:52:7b:b4:65:60:
         7d:6f:d7:68:50:93:8b:91:a7:0e:99:37:76:ab:f7:1f:b4:09:
         c1:44:0a:92:1b:66:95:cd:47:41:0f:e1:9c:08:71:a8:fc:6f:
         ad:b7:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:41:42 2024 by rpki-client on console-fra.rpki-client.org