Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3a2f33322d3438203d3e203233323031.roa
File:                     323830303a3361303a3a2f33322d3438203d3e203233323031.roa (raw, json)
Hash identifier:          AtW+KK7QWW3TezXhLz5AjQl7F4h/W8UZRM+BHA1fgxI=
Subject key identifier:   C5:EC:13:3F:CB:EC:1D:01:EB:6A:38:CD:C0:CE:FA:45:D4:E9:A9:ED
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       6A6A53C1872222C0C2E734AAC05F1EB3A3118A82
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3a2f33322d3438203d3e203233323031.roa
Signing time:             Tue 05 Mar 2024 18:22:56 +0000
ROA not before:           Tue 05 Mar 2024 18:17:56 +0000
ROA not after:            Tue 04 Mar 2025 18:22:56 +0000
asID:                     23201
IP address blocks:        2800:3a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6a:53:c1:87:22:22:c0:c2:e7:34:aa:c0:5f:1e:b3:a3:11:8a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Mar  5 18:17:56 2024 GMT
            Not After : Mar  4 18:22:56 2025 GMT
        Subject: CN=C5EC133FCBEC1D01EB6A38CDC0CEFA45D4E9A9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:74:f5:e3:21:54:40:8a:a9:2a:2a:42:c2:
                    58:f3:c2:5f:39:0a:92:84:ef:08:c1:ec:9d:5f:18:
                    95:55:58:23:ec:d2:d6:97:93:d2:79:5e:df:f6:99:
                    7a:01:c3:3b:4d:f2:73:ea:a5:91:ee:f4:c1:4f:a9:
                    31:89:96:72:ad:0f:4d:5e:6e:42:ae:0a:7e:a3:66:
                    7a:72:e6:b2:17:4c:1e:e6:81:89:82:87:97:3b:9f:
                    a5:07:c8:ce:b5:c2:da:e1:9d:69:9c:6a:1b:6c:3e:
                    d6:79:e6:b4:dc:54:17:88:c1:d5:a6:01:c4:fa:75:
                    d7:6f:bc:45:0d:40:d4:93:26:6b:e8:80:8c:6e:a4:
                    bf:9c:cb:db:85:19:1b:b4:57:90:be:b2:1a:33:51:
                    71:d2:70:fe:ed:75:0e:29:62:b0:b1:8b:d2:13:37:
                    e6:74:22:f0:ba:6c:34:00:75:c8:4d:b3:f5:f1:29:
                    92:01:8b:94:7d:2a:14:96:65:20:dd:ba:32:57:12:
                    5f:8b:76:39:00:e4:c1:a7:b2:6b:5d:e3:80:b5:be:
                    01:11:fb:c7:80:3e:89:35:83:62:f0:23:3b:23:b2:
                    fc:c3:73:48:f4:a5:d7:1b:e3:56:96:30:8b:86:f4:
                    21:23:68:9e:c1:55:7d:4a:07:f8:f7:26:87:43:f4:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:13:3F:CB:EC:1D:01:EB:6A:38:CD:C0:CE:FA:45:D4:E9:A9:ED
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/323830303a3361303a3a2f33322d3438203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:d7:06:7a:a1:d4:a4:ce:42:82:7f:7e:c8:39:da:62:9c:
         5f:a3:22:61:08:63:af:3d:f6:d1:48:51:ea:97:6e:fe:55:46:
         e2:07:5f:ac:8a:45:6a:3e:51:46:a9:12:72:5f:38:87:4f:dd:
         9a:d5:dc:98:6c:20:e4:54:58:00:00:45:f2:2e:fe:62:0b:db:
         ae:da:f0:97:a9:53:5a:b2:23:59:70:e0:a6:12:c7:3a:87:96:
         da:ff:6e:3d:8d:df:5f:e2:f8:72:86:16:de:61:23:66:74:85:
         aa:fd:a6:8d:29:9b:de:78:7e:2f:7a:0b:49:f3:96:dd:bc:b6:
         1b:02:47:38:8a:e7:f9:0b:5b:78:51:95:e5:4d:84:81:1a:a4:
         90:8d:ec:66:e0:b9:41:1c:29:2a:b0:4d:67:34:b8:8a:5e:ce:
         1a:c3:f0:0b:61:6b:12:8a:3d:cd:ac:b9:b3:46:54:05:2d:92:
         28:a9:36:4b:7c:eb:b0:be:f8:b0:cc:5c:86:ab:08:ed:0f:68:
         d7:f1:73:f2:bf:18:5f:be:00:7c:de:11:b2:27:81:a9:07:22:
         24:32:86:60:15:8b:d0:54:f9:74:93:2b:54:14:41:ad:a7:a0:
         0a:38:ad:1a:ef:07:b4:70:99:6c:b5:3d:7d:de:bf:d7:d6:17:
         56:7a:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org