Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165303a323433303a3a2f34342d3438203d3e203634313234.roa
File:                     323830303a3165303a323433303a3a2f34342d3438203d3e203634313234.roa (raw, json)
Hash identifier:          o7GXZIFExFsMDQk0kc9dFhq28OuXnip/EE+nJpmWa64=
Subject key identifier:   84:96:0B:5C:0C:62:66:6A:E7:01:AB:AF:03:CB:FD:47:F6:EC:E5:0B
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       587BCA4F23DCEE9AFAF896846FDDAB49C928937B
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165303a323433303a3a2f34342d3438203d3e203634313234.roa
Signing time:             Tue 05 Mar 2024 17:41:52 +0000
ROA not before:           Tue 05 Mar 2024 17:36:52 +0000
ROA not after:            Tue 04 Mar 2025 17:41:52 +0000
asID:                     64124
IP address blocks:        2800:1e0:2430::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7b:ca:4f:23:dc:ee:9a:fa:f8:96:84:6f:dd:ab:49:c9:28:93:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Mar  5 17:36:52 2024 GMT
            Not After : Mar  4 17:41:52 2025 GMT
        Subject: CN=84960B5C0C62666AE701ABAF03CBFD47F6ECE50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:fb:3e:fc:3c:a5:8b:b2:c3:92:6d:dc:81:
                    0a:87:5b:49:24:46:14:e4:75:04:35:f5:bb:a6:99:
                    c1:4e:af:ba:d6:c4:ce:62:5e:0f:ee:b9:06:6b:e5:
                    29:54:a7:0f:42:69:38:9a:17:19:cc:e3:f1:22:f4:
                    a4:4f:8b:91:98:5d:bb:4f:d6:a4:58:d3:98:78:93:
                    e2:2b:7c:90:f5:52:dc:50:54:28:0c:bb:9d:2c:3a:
                    40:77:80:14:c6:46:6f:b1:21:f8:ef:c3:ba:09:9a:
                    f9:a8:f4:9f:58:2c:b7:6b:a9:84:c0:2b:78:21:ea:
                    49:cd:f3:15:05:10:b5:1d:34:86:c7:21:75:f0:ce:
                    d6:0e:e6:ae:d1:50:71:6f:58:c6:a6:94:39:d8:2f:
                    58:b4:56:1a:ea:99:78:d0:88:83:49:03:17:21:72:
                    73:bf:b0:b0:6e:e4:04:2d:4d:36:77:90:1c:7e:62:
                    ae:bd:2f:84:f0:bd:25:23:d8:a5:1f:db:9e:c1:82:
                    d9:84:b2:0b:73:43:65:ed:8d:e7:79:eb:3b:be:de:
                    8d:e8:a5:a6:87:8f:e0:9c:2f:b7:51:4f:d1:f1:15:
                    c6:96:69:19:41:85:00:b7:8d:b1:9b:01:5b:7e:1c:
                    ac:5a:e1:9c:69:05:dd:61:fb:e5:fe:76:8a:c1:50:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:96:0B:5C:0C:62:66:6A:E7:01:AB:AF:03:CB:FD:47:F6:EC:E5:0B
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/323830303a3165303a323433303a3a2f34342d3438203d3e203634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1e0:2430::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:01:7d:b1:ec:c5:90:dd:a4:b4:47:6f:f1:0d:10:3b:5f:
         a0:8d:cc:49:39:75:4e:38:37:6e:87:00:c8:bc:cb:6f:1f:26:
         49:d4:22:cc:3d:d9:ec:93:d5:70:5b:83:cf:83:80:01:81:44:
         2c:ac:f2:36:93:1a:88:01:56:23:c1:32:1a:d6:8b:c3:e5:b6:
         dd:b9:25:cb:0c:65:55:11:1d:1a:ca:c6:91:91:3a:90:ad:69:
         29:ca:d1:b2:d2:01:81:e2:f8:a9:4e:1d:ed:94:45:8c:c9:f4:
         d5:49:d1:57:4d:5c:c4:70:d6:35:a5:2a:6a:68:4f:a1:2e:13:
         4b:70:7e:58:f1:df:25:47:7e:e5:a4:ce:7c:ec:1e:ac:80:ae:
         62:40:8d:b9:cd:0c:17:f2:bc:ee:70:00:12:49:a3:2b:58:86:
         24:6a:11:7b:5f:67:49:78:da:24:b7:2d:29:83:f7:3a:cd:70:
         a8:1b:ca:e6:9e:a8:48:15:cb:2e:13:49:fc:53:29:35:5a:67:
         97:82:0e:90:d8:71:3b:67:b7:d9:0c:dc:15:46:df:c7:f9:8f:
         21:29:6c:7f:4d:5a:10:06:e7:d9:57:6c:f1:5c:d9:52:50:90:
         9b:f2:22:fb:a3:01:c0:a0:64:d5:03:e4:4d:8b:85:03:d1:b7:
         07:0c:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org