Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237363531.roa
File:                     323830303a3330303a3a2f33322d313238203d3e203237363531.roa (raw, json)
Hash identifier:          XPudEdqxJ+wuWgjL+n2Z32Mnc9IxC6TbSXjdf/REWHw=
Subject key identifier:   D9:96:12:2E:53:A7:7C:BF:D2:02:52:36:66:E4:B1:AC:1B:8C:B0:26
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       1E89BFFF5688114A32B18EC6A13A453104575DA5
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:14:54 +0000
ROA not before:           Tue 05 Mar 2024 18:09:54 +0000
ROA not after:            Tue 04 Mar 2025 18:14:54 +0000
asID:                     27651
IP address blocks:        2800:300::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:89:bf:ff:56:88:11:4a:32:b1:8e:c6:a1:3a:45:31:04:57:5d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:54 2024 GMT
            Not After : Mar  4 18:14:54 2025 GMT
        Subject: CN=D996122E53A77CBFD202523666E4B1AC1B8CB026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:f9:98:4e:85:8d:5d:cc:b2:29:24:3c:3b:
                    2f:47:8c:aa:bf:cb:11:2f:f9:53:af:f2:26:bb:c2:
                    e9:ac:e8:c6:bc:27:51:70:52:e4:33:d8:10:00:43:
                    74:9b:2e:a2:56:ce:b4:f4:8b:b0:8f:21:c6:d6:14:
                    7c:11:c6:7e:2a:31:97:ed:fc:a6:fc:04:d8:25:34:
                    ff:2f:b5:76:ed:9b:fd:e7:e7:8c:df:fc:98:1f:13:
                    1c:93:a2:a8:a2:94:ea:bc:cc:ba:07:c1:18:68:b8:
                    42:6a:14:23:58:2a:93:47:c8:3d:23:6c:0e:c9:1e:
                    e3:10:86:83:1b:ae:c8:b0:c2:c1:fb:54:cd:8e:09:
                    1f:8a:07:c0:21:06:4a:5e:94:2b:d9:19:4e:26:e4:
                    57:18:b7:03:14:97:e0:d6:62:30:f7:e0:c3:bd:01:
                    8e:1d:25:2b:cf:7b:e8:50:c9:78:cd:84:06:d3:16:
                    41:0f:b8:b7:bc:e2:0b:6d:3e:1a:9e:af:b2:48:3a:
                    cd:5c:1a:e7:ba:e9:d4:22:43:62:76:68:24:1a:12:
                    b2:a2:30:7a:5f:19:0e:dd:a2:6c:d0:4b:04:e6:0f:
                    b0:6c:1c:0f:ab:1b:2c:31:80:02:ec:dd:92:7e:a1:
                    49:bd:f9:6d:82:2c:38:5d:18:b7:8d:aa:d5:40:4c:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:96:12:2E:53:A7:7C:BF:D2:02:52:36:66:E4:B1:AC:1B:8C:B0:26
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:22:6c:ad:08:fa:2b:ce:48:e3:dd:be:e1:a2:8b:8e:98:
         6a:1f:5d:5b:b3:a2:e3:53:61:4b:90:5a:47:fe:1d:f0:28:07:
         02:41:65:37:fe:fc:cf:d7:8b:52:89:90:95:9c:ce:67:74:d6:
         d8:94:ad:54:99:35:e1:60:3c:c3:02:2a:dc:9c:a4:00:ed:72:
         8b:c2:a8:4b:bb:1e:be:d5:1e:69:4d:f0:3b:57:c6:f8:e7:12:
         5e:ce:ac:e9:53:6b:e5:a8:59:fd:2e:28:fa:78:ab:a9:53:14:
         c6:72:fb:e6:ab:d9:8a:77:bc:7b:b5:b6:11:f1:cf:7f:a4:e1:
         83:d9:c2:1f:37:4f:b9:1b:53:0a:dc:95:b6:c2:d1:f2:ef:ff:
         32:3e:6b:57:70:b2:d8:07:6c:36:06:f4:46:ca:7c:69:23:5f:
         c0:eb:63:81:58:d6:d4:df:5e:29:ea:6f:a4:1b:f2:93:bc:af:
         5e:2d:af:13:db:c5:0a:a0:01:a4:8d:e0:5c:c4:88:b8:d0:b1:
         b3:f0:2d:a6:1b:7e:ef:d8:90:5b:58:5e:57:00:2e:10:dc:16:
         a3:99:0a:50:36:73:8b:42:8b:88:c5:62:97:a0:ef:0f:4a:94:
         a4:d9:67:b5:7c:73:1f:99:25:0e:56:44:3e:48:58:dd:fb:d4:
         ad:a8:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org