Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a31363a3a2f34382d3438203d3e203237363738.roa
File:                     323030313a313339383a31363a3a2f34382d3438203d3e203237363738.roa (raw, json)
Hash identifier:          9qasVUq9Ftk7CMyNYZ5s/QKIIyPycQk9euFJy6RDLSA=
Subject key identifier:   79:50:99:F4:F8:05:BD:B5:53:C8:0A:27:42:7E:5D:27:54:4A:2C:A5
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       643237177FAB06ACF9DBB9312083F56FF4D0A2D0
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a31363a3a2f34382d3438203d3e203237363738.roa
Signing time:             Tue 05 Mar 2024 18:13:08 +0000
ROA not before:           Tue 05 Mar 2024 18:08:08 +0000
ROA not after:            Tue 04 Mar 2025 18:13:08 +0000
asID:                     27678
IP address blocks:        2001:1398:16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:32:37:17:7f:ab:06:ac:f9:db:b9:31:20:83:f5:6f:f4:d0:a2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Mar  5 18:08:08 2024 GMT
            Not After : Mar  4 18:13:08 2025 GMT
        Subject: CN=795099F4F805BDB553C80A27427E5D27544A2CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:c2:ee:24:90:c5:46:2b:3e:e6:6b:d8:40:
                    fe:b4:aa:4f:da:dc:94:e2:44:4c:68:87:d2:a1:f7:
                    5e:74:54:04:2a:e1:7c:38:cf:74:d5:ab:f0:05:7d:
                    c5:3b:9b:d7:95:39:c3:41:06:52:b4:23:a5:4d:88:
                    2f:75:eb:fe:23:6f:68:c3:5c:96:66:d7:0d:95:7f:
                    56:49:d9:2e:79:41:cf:45:f5:69:75:cb:a3:1d:81:
                    80:7c:99:ab:9d:14:a6:09:bd:17:27:34:78:7b:3b:
                    6b:b2:fd:4b:a6:d3:51:19:5c:42:5e:e9:39:d3:98:
                    a1:c9:16:5e:d7:e2:81:02:ed:03:10:2d:15:95:94:
                    d2:4b:c7:05:55:e3:5b:bb:16:16:12:49:9d:0d:67:
                    16:55:57:2b:c6:bb:44:92:63:6f:c1:53:82:73:09:
                    d3:28:3c:d4:4b:8d:ee:6d:f0:0a:45:03:fd:1d:03:
                    74:f7:bc:e9:60:e4:f0:1a:69:b4:a1:16:65:30:2b:
                    58:4a:47:0a:61:5b:30:5a:31:eb:08:2c:1f:64:ea:
                    8a:a0:86:e6:dd:e7:fd:ed:96:a4:79:c2:37:d3:93:
                    71:02:b9:7d:89:5a:03:38:b6:bb:bb:da:0c:c9:32:
                    1b:e7:59:74:34:cc:ae:93:ff:f7:28:d7:39:3b:ab:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:99:F4:F8:05:BD:B5:53:C8:0A:27:42:7E:5D:27:54:4A:2C:A5
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a31363a3a2f34382d3438203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:8c:e0:60:30:0c:58:38:8d:65:c3:74:26:f5:cd:eb:3f:2b:
         a2:c5:3e:ff:79:e4:f9:4a:68:48:2a:0f:d1:fb:1c:33:4b:ff:
         2f:25:b9:7f:a7:8e:d4:01:24:0b:d9:3c:f4:e9:e5:6c:c7:8f:
         8d:32:78:bf:2e:ed:f4:8a:47:a3:70:02:55:6d:7c:38:13:8d:
         87:d9:6d:b2:46:3a:df:53:4e:87:4b:42:c2:e1:13:e8:40:87:
         8d:4b:e8:07:aa:40:28:52:18:e4:ef:c4:32:e9:5a:74:a1:d2:
         31:e5:f6:04:82:73:99:f9:aa:4b:a1:e6:c0:9b:1d:31:6b:fd:
         30:d3:43:ff:e2:c2:a5:d6:86:0c:40:37:c4:5c:c7:93:d1:55:
         44:10:03:fb:a4:b8:fb:a8:05:cf:3b:b6:f1:5c:fc:a1:df:6e:
         b6:ad:38:33:5e:2d:a8:07:6c:67:77:4d:c6:87:b8:53:f4:a5:
         0b:ba:28:19:ad:ca:86:53:5f:2f:8d:df:16:04:4e:92:b9:0d:
         5f:a6:05:0f:3d:92:0f:1b:39:4d:e7:af:73:c3:66:0e:1c:74:
         25:3f:cf:3d:2a:f4:1a:ab:24:b4:06:92:f9:bf:ec:a9:59:e9:
         36:83:c0:06:fe:c9:40:5a:e3:7f:7e:27:b4:9c:ad:5c:35:7a:
         1f:c4:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org