Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/323830303a3633303a3a2f33322d3332203d3e2037303439.roa
File:                     323830303a3633303a3a2f33322d3332203d3e2037303439.roa (raw, json)
Hash identifier:          QNRBqxKMF7kG21SvIBcAbw1Mqij4i5IF8uFqHZI9X2c=
Subject key identifier:   85:27:48:75:38:AF:79:E7:BB:A0:26:AB:A3:50:02:39:51:77:6B:B0
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       04C4F5DC2096077B9E5C524ACD2BE00020A99B03
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/323830303a3633303a3a2f33322d3332203d3e2037303439.roa
Signing time:             Tue 05 Mar 2024 18:12:06 +0000
ROA not before:           Tue 05 Mar 2024 18:07:06 +0000
ROA not after:            Tue 04 Mar 2025 18:12:06 +0000
asID:                     7049
IP address blocks:        2800:630::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c4:f5:dc:20:96:07:7b:9e:5c:52:4a:cd:2b:e0:00:20:a9:9b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Mar  5 18:07:06 2024 GMT
            Not After : Mar  4 18:12:06 2025 GMT
        Subject: CN=8527487538AF79E7BBA026ABA350023951776BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:fa:10:21:ee:60:c1:cd:ad:e6:ad:19:4a:
                    53:54:aa:cf:75:fd:4f:58:df:1d:c2:55:e3:5c:83:
                    4d:03:73:dc:54:6a:ad:38:19:44:b0:98:f5:ac:26:
                    80:ad:6e:e1:ff:ca:34:c6:57:f4:61:ab:69:28:ce:
                    cd:f3:d2:58:b4:ea:ad:96:33:05:3d:8d:1f:4b:e1:
                    9c:25:b9:82:a1:3e:3d:d4:97:62:32:f4:d1:4a:bb:
                    98:a5:93:8a:3d:14:44:64:a1:ef:8b:27:72:6d:56:
                    b5:9e:3a:5a:9e:76:98:fb:92:16:0a:66:58:d9:86:
                    09:3a:00:7c:4d:74:53:21:5c:14:a5:97:4f:a5:ef:
                    25:f1:3b:82:73:5e:9a:53:c9:af:63:28:ed:9a:18:
                    ef:e3:36:ea:f1:3a:30:c8:e8:f3:96:bc:7e:f7:b0:
                    9b:ef:e4:fb:c7:c5:75:ca:93:ae:40:33:27:05:4e:
                    68:f0:58:2d:a4:13:9a:b4:57:37:43:9c:f7:32:76:
                    0c:2a:bc:1f:b5:bb:a3:85:49:30:bc:a0:65:ec:89:
                    70:d1:83:43:54:20:f9:7a:ab:a6:80:9c:09:4c:be:
                    23:f7:07:ce:9a:e9:36:1b:c7:09:51:8d:84:07:fa:
                    dc:13:65:54:6f:c7:6c:ea:0d:e8:e6:7a:5e:d9:d3:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:48:75:38:AF:79:E7:BB:A0:26:AB:A3:50:02:39:51:77:6B:B0
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/323830303a3633303a3a2f33322d3332203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:630::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:f1:04:63:0a:ab:6a:27:8e:0f:96:0c:cd:66:22:c5:cd:09:
         89:06:35:8e:fc:86:f8:ce:ec:3d:c1:11:3c:ce:63:1f:ec:89:
         6c:5f:25:96:c8:24:a7:75:4e:f0:d4:f4:a3:f5:40:9c:3b:8c:
         68:a7:47:6c:5b:8b:a2:08:aa:3d:46:1b:f1:99:f1:95:a5:0f:
         07:02:d3:04:7b:c2:08:7d:8a:81:28:21:e3:32:5d:68:5f:a8:
         7a:e8:d9:db:a7:90:10:18:20:3a:fc:f6:c2:ff:4d:96:99:8d:
         66:8b:32:09:b4:19:ac:f9:8c:2b:89:43:b7:32:55:5e:3d:1e:
         e0:87:39:5f:72:35:cc:91:bc:7a:1d:80:99:04:9b:cb:3d:c7:
         fe:bd:04:8e:7f:dc:b8:cd:0a:96:b7:2d:f5:58:6a:93:c8:1d:
         fa:f7:ae:0a:eb:8b:65:fc:65:5c:66:d0:f1:5b:5a:6a:39:ae:
         e8:22:8e:39:2f:27:e2:b1:f1:d4:ef:8a:ba:bf:8b:6c:f1:8c:
         55:89:d0:82:89:48:58:73:ec:5e:09:17:95:ab:fb:0c:bb:7c:
         51:e9:cf:2f:b9:5d:4c:8b:ed:72:64:56:a7:a6:c3:20:0c:3e:
         32:f6:cb:a2:98:5d:3c:98:a3:01:57:f3:c9:14:01:cd:f0:2a:
         33:5d:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:55 2024 by rpki-client on console-fra.rpki-client.org