Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa
File:                     323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa (raw, json)
Hash identifier:          255VdqGAKlQ9aAvr/J3kpbOZl3lrae4uEztUYWV6NyM=
Subject key identifier:   61:59:35:E2:75:D5:02:3C:E3:C1:F7:5E:1D:B7:4D:99:8C:EC:E5:99
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       52B86F9F10F021A74FD97D77AEED819611D7EDAB
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa
Signing time:             Tue 05 Mar 2024 18:14:01 +0000
ROA not before:           Tue 05 Mar 2024 18:09:01 +0000
ROA not after:            Tue 04 Mar 2025 18:14:01 +0000
asID:                     28032
IP address blocks:        2800:650:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b8:6f:9f:10:f0:21:a7:4f:d9:7d:77:ae:ed:81:96:11:d7:ed:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Mar  5 18:09:01 2024 GMT
            Not After : Mar  4 18:14:01 2025 GMT
        Subject: CN=615935E275D5023CE3C1F75E1DB74D998CECE599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a4:d9:4c:a4:42:d7:0b:ed:b7:f8:7a:31:cd:
                    86:f2:e8:f3:b7:0a:bc:84:c0:e4:91:a1:35:91:89:
                    7b:b0:b7:c6:7f:6f:b2:db:b7:f5:37:db:4e:e7:7c:
                    cd:01:84:e1:d9:2c:93:dd:9c:0d:c6:70:bc:cb:6a:
                    f6:28:f9:b8:98:a0:4d:86:af:95:8b:93:b0:c1:1a:
                    1d:26:90:78:98:b0:94:a9:3e:ad:ea:8b:48:2d:df:
                    35:35:84:ab:1c:f9:20:6f:55:f0:68:36:c9:85:f5:
                    11:92:db:e6:be:ea:e1:d6:4e:86:77:4c:41:04:c2:
                    52:c0:9f:7a:28:19:e7:b8:97:ca:a4:3d:7c:2e:3a:
                    ac:2e:36:94:81:d5:39:7f:17:f7:e0:82:36:48:9c:
                    b0:5b:52:4a:40:3c:ab:dc:c5:1a:e5:32:9b:78:47:
                    81:29:c5:83:21:46:68:2e:40:84:ff:2d:fa:65:c7:
                    77:69:dc:0a:71:50:d4:78:72:bd:ee:96:a1:9a:0a:
                    21:84:d6:4d:19:19:cc:c0:ba:5e:39:80:9f:8b:0f:
                    29:df:25:16:bb:37:e2:21:f5:02:30:d4:f3:ee:91:
                    2c:5b:33:f5:46:a8:c3:36:25:b7:18:68:ad:f0:0c:
                    f2:95:1e:88:50:9e:65:86:a1:4a:93:73:1d:b8:c1:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:59:35:E2:75:D5:02:3C:E3:C1:F7:5E:1D:B7:4D:99:8C:EC:E5:99
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:bc:88:72:b5:73:6e:2a:34:d5:a9:11:ea:19:eb:6c:b8:24:
         fa:23:02:df:41:ad:86:2e:4a:78:10:cf:80:96:52:ee:7d:af:
         b7:64:ad:a8:13:69:96:9c:27:03:c3:46:58:1f:c2:78:ec:fc:
         d6:52:3f:8d:c0:65:3e:08:3e:c9:d4:24:f2:df:61:32:75:19:
         42:eb:0c:1e:23:23:00:c9:f4:54:34:36:19:02:59:f9:cd:a7:
         5b:f2:e6:b5:d7:0f:1c:ac:0f:d7:aa:c4:2c:0f:64:e9:e2:72:
         9e:52:54:76:01:db:9d:45:13:cd:a8:51:98:9f:a0:c5:53:8a:
         ed:9d:b6:60:cd:38:22:ac:77:f4:8f:2c:57:51:30:55:61:de:
         0b:06:2a:25:92:c4:90:de:44:34:e0:7d:22:75:c1:d0:f5:68:
         ae:f1:27:fc:f3:3b:fc:e3:b1:4a:44:ec:4d:d4:d3:40:e8:5e:
         a7:30:ea:55:c0:c5:70:ba:4c:d6:0f:7a:11:bb:25:b4:b4:99:
         e5:4b:db:7b:bb:17:44:e0:fe:0c:26:bc:42:85:61:7f:7b:0f:
         1d:00:df:17:40:89:37:67:99:73:d1:d4:07:27:24:02:22:41:
         a3:79:d9:30:73:04:48:f0:70:2c:46:83:c3:07:29:89:c2:b8:
         71:46:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org