Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/323030313a313334383a3a2f33322d3332203d3e203237373530.roa
File:                     323030313a313334383a3a2f33322d3332203d3e203237373530.roa (raw, json)
Hash identifier:          UG/wtMX2x1L+YNFZgm32M3VNRXPXs9LC/SZNVR7xrcI=
Subject key identifier:   7B:AF:04:2F:4F:72:BC:E0:DF:48:46:EC:6B:D3:97:80:56:EF:50:C8
Certificate issuer:       /CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
Certificate serial:       1FBCA0494343CA156A6D4245F109305BF0AEA09C
Authority key identifier: A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/323030313a313334383a3a2f33322d3332203d3e203237373530.roa
Signing time:             Tue 05 Mar 2024 17:43:40 +0000
ROA not before:           Tue 05 Mar 2024 17:38:40 +0000
ROA not after:            Tue 04 Mar 2025 17:43:40 +0000
asID:                     27750
IP address blocks:        2001:1348::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:a0:49:43:43:ca:15:6a:6d:42:45:f1:09:30:5b:f0:ae:a0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
        Validity
            Not Before: Mar  5 17:38:40 2024 GMT
            Not After : Mar  4 17:43:40 2025 GMT
        Subject: CN=7BAF042F4F72BCE0DF4846EC6BD3978056EF50C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:76:5c:3f:88:88:db:56:2e:10:53:ba:81:
                    c4:fa:38:ae:6a:f0:c2:d6:b6:45:6b:52:a1:9f:47:
                    1a:cc:c9:56:39:34:1d:ea:a1:44:49:9d:ad:bf:89:
                    73:0c:41:6b:d8:2c:3f:94:7b:98:9e:fe:34:62:51:
                    db:66:ff:d7:e8:cc:f3:e4:63:b6:1f:aa:29:6f:cd:
                    cf:66:71:60:d0:7c:d2:07:34:35:c6:dd:33:9b:95:
                    98:b6:c4:82:34:a7:c4:f5:aa:3e:d1:dd:ed:96:fe:
                    31:bc:4d:fd:47:c7:0a:29:c8:f3:f6:b1:cf:0d:e5:
                    40:b5:07:ed:ee:f6:54:21:e4:3b:54:b8:1a:cb:6b:
                    52:8a:6e:6b:18:18:fd:1e:a3:ca:e3:18:b4:8e:b4:
                    cc:5b:71:92:66:44:20:b2:cf:44:4a:87:16:a6:8c:
                    0b:1d:da:4b:0f:6c:f2:da:aa:a1:2f:1c:23:4b:b9:
                    46:7c:96:c9:3d:9b:a7:f0:65:14:99:4f:a6:e8:34:
                    59:46:ed:cf:14:29:fe:76:91:23:e8:a9:4c:52:3c:
                    06:48:f8:e8:36:c0:a2:58:b1:7f:b9:ed:5b:9e:3e:
                    be:34:9b:ba:52:e6:6b:6a:00:a0:cd:41:d1:d0:5d:
                    92:6a:26:7f:5d:0b:84:76:de:26:c9:a2:a4:65:d3:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AF:04:2F:4F:72:BC:E0:DF:48:46:EC:6B:D3:97:80:56:EF:50:C8
            X509v3 Authority Key Identifier:
                keyid:A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/323030313a313334383a3a2f33322d3332203d3e203237373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1348::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:d8:10:d7:f0:97:31:ee:f9:e4:0f:75:a4:42:c5:d4:7e:
         71:d7:a7:2c:73:bb:7f:ea:f0:82:f9:44:ae:92:f6:66:9b:e7:
         27:09:bf:01:a5:8f:a1:60:05:75:9c:d3:fb:dc:5b:76:b3:44:
         d5:44:0f:8f:98:af:c3:97:f7:82:31:8f:55:14:67:df:8d:73:
         5f:50:0c:48:ab:93:06:60:fb:6a:73:ef:b1:e5:3b:74:97:3d:
         ad:14:ea:cd:75:70:6d:f4:28:bf:2d:41:ab:b0:6d:7a:2b:65:
         86:52:3f:20:27:45:87:14:13:2c:dc:17:23:6f:6f:31:4b:e6:
         7f:e0:dd:82:81:b7:fe:c1:e2:6b:f5:8d:9d:85:f9:c6:26:e5:
         a6:91:7d:e4:24:4e:f4:ff:04:cf:44:e6:5e:76:19:26:99:75:
         c9:dd:ca:63:a0:34:64:b1:31:08:03:be:2d:08:e8:24:86:bc:
         d9:77:8c:eb:95:fb:3c:a4:3a:d4:c3:ee:df:e3:f3:2a:a3:0e:
         e5:c6:78:23:4a:49:97:63:fd:ff:91:b1:63:18:a4:ff:94:52:
         b4:23:e5:e2:85:b5:90:81:72:b2:fb:79:ea:bf:41:b0:5b:c1:
         98:e0:46:4b:30:32:f1:1f:0a:32:dd:01:95:6d:0c:d1:f0:19:
         a5:75:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org