Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa
File:                     323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          lNSrCKYmWJHTV66PNRi2QJIV3TBdLwY7G40Sf13043w=
Subject key identifier:   75:BF:56:D8:40:9C:CB:E6:6D:A7:48:BA:69:FE:E5:99:C3:BD:18:BB
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       149B17E9A9BB6690999B2841BC741FF0E6A91640
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Wed 17 Jul 2024 14:15:01 +0000
ROA not before:           Wed 17 Jul 2024 14:10:01 +0000
ROA not after:            Wed 16 Jul 2025 14:15:01 +0000
asID:                     262589
IP address blocks:        2800:650:104::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9b:17:e9:a9:bb:66:90:99:9b:28:41:bc:74:1f:f0:e6:a9:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 17 14:10:01 2024 GMT
            Not After : Jul 16 14:15:01 2025 GMT
        Subject: CN=75BF56D8409CCBE66DA748BA69FEE599C3BD18BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:26:a3:4d:a2:71:a2:13:35:ab:59:2f:ba:
                    a3:f5:dd:83:10:ae:a7:19:5d:95:17:fb:21:6f:bf:
                    f5:d8:a9:79:98:a2:ad:4c:0e:0c:a5:d8:f0:24:00:
                    34:b2:94:08:87:0b:11:0f:70:26:20:e2:8a:47:21:
                    06:9a:25:61:0f:fb:5a:92:64:40:90:40:fb:2a:94:
                    e0:b2:16:86:92:00:aa:56:16:e6:de:73:7b:95:dc:
                    80:c8:d1:fb:ec:40:18:b4:c6:58:8c:ac:0a:e9:55:
                    89:4c:73:52:46:81:6b:1d:e4:63:aa:c9:f3:e7:16:
                    97:23:6d:f2:94:19:4c:07:c9:8d:3f:42:c0:4a:a2:
                    2b:7a:96:79:e5:5c:04:41:9e:11:f2:2b:1b:1e:22:
                    cf:80:a4:0c:f1:aa:a0:4b:48:63:c7:7b:da:d3:a3:
                    cd:09:b0:d2:4d:f0:57:63:84:f1:6c:b4:8d:e7:ee:
                    01:53:5a:98:4c:3c:cb:21:b3:ff:53:82:0f:2d:db:
                    30:e2:66:65:8a:bd:6e:dd:b7:3c:d5:e6:37:ee:3f:
                    eb:e9:a4:2c:c8:43:78:3a:0f:1e:74:f1:78:ee:8e:
                    85:fd:8b:ac:5d:8d:e7:99:9f:c6:79:92:2b:ee:e2:
                    29:7e:9e:6a:b8:7f:03:a1:b8:83:99:82:66:b3:80:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BF:56:D8:40:9C:CB:E6:6D:A7:48:BA:69:FE:E5:99:C3:BD:18:BB
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130343a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:5f:4e:e9:a8:b9:6f:ad:2c:e0:d2:93:5e:26:9f:e1:15:82:
         cb:44:d4:e1:75:1b:55:b3:a2:a2:6c:9d:5d:0d:3f:b8:8a:82:
         51:88:e8:fa:c4:40:df:03:61:82:24:c6:d6:60:55:71:04:dc:
         68:95:91:1f:e9:09:e3:77:95:ff:63:31:7b:1f:32:a1:98:8d:
         d7:95:50:f0:76:17:67:43:cc:94:39:24:21:d5:00:08:3c:67:
         09:7f:d0:86:0c:10:ba:b5:c1:87:51:b6:2a:0c:9a:08:84:01:
         5b:36:39:dc:03:95:f2:92:a2:ce:d5:19:d2:a3:a0:43:81:59:
         5d:4a:37:bd:cc:93:79:3f:40:df:19:54:ec:8f:25:72:65:3e:
         ed:ff:41:fd:09:2e:81:dc:e3:9a:34:86:cf:e2:8a:ac:2d:e0:
         f4:65:e3:8e:72:f5:48:48:fd:9d:bc:62:51:a4:01:dc:9c:6c:
         e9:93:02:26:ec:d0:83:76:b5:21:72:99:eb:1e:20:68:f1:53:
         2e:cc:f1:40:74:0d:21:93:b3:c9:00:38:3c:f3:e5:55:6f:a9:
         9a:89:fd:c7:81:ab:cc:64:93:9b:6d:af:d6:b7:c8:c1:d0:ee:
         cd:4c:92:01:3b:df:39:41:8c:7b:9b:33:48:50:6d:e7:8c:5e:
         90:6c:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org