Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a35373a3a2f34382d3438203d3e203232373234.roa
File:                     323830303a36383a35373a3a2f34382d3438203d3e203232373234.roa (raw, json)
Hash identifier:          jf68xmZEuI141sovyVcw6RbjN/owqT2WSG8ku6ZYyxQ=
Subject key identifier:   91:B3:04:D0:62:16:9B:13:BF:DE:15:28:3A:D1:5B:97:A4:24:0D:32
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       31127E6BCECBBA264A3E13534050C321F4ED6153
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a35373a3a2f34382d3438203d3e203232373234.roa
Signing time:             Mon 08 Jul 2024 15:35:00 +0000
ROA not before:           Mon 08 Jul 2024 15:30:00 +0000
ROA not after:            Mon 07 Jul 2025 15:35:00 +0000
asID:                     22724
IP address blocks:        2800:68:57::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:12:7e:6b:ce:cb:ba:26:4a:3e:13:53:40:50:c3:21:f4:ed:61:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Jul  8 15:30:00 2024 GMT
            Not After : Jul  7 15:35:00 2025 GMT
        Subject: CN=91B304D062169B13BFDE15283AD15B97A4240D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:ff:2f:ff:b3:7d:1a:00:1c:22:45:85:0e:
                    0c:9f:ae:4e:57:12:33:18:51:5e:45:3a:af:92:07:
                    30:74:32:de:1d:64:1a:c8:16:f1:14:c8:25:23:e9:
                    36:b7:90:e1:e7:8c:2d:ee:3f:39:86:36:2f:4e:b9:
                    4c:fd:05:f6:4a:67:1d:19:e1:36:b7:84:41:4f:87:
                    22:de:8f:b4:59:1d:98:1b:44:1e:b6:56:9c:64:49:
                    1b:b0:1c:91:98:a4:88:46:d6:76:15:2b:53:d6:4f:
                    b6:f6:59:cc:c3:c2:e5:df:c8:83:17:2c:47:20:9e:
                    8c:9d:d3:60:8b:37:db:af:ab:75:8f:ca:e4:f2:c4:
                    d4:0c:06:5a:26:bb:1c:1e:9f:e7:3e:fc:b5:a7:37:
                    61:3e:1c:6e:12:ae:02:a1:b4:42:b5:5c:dd:b2:c5:
                    32:a6:82:40:c5:40:be:ff:89:b1:dd:f2:cf:31:86:
                    78:a4:62:86:4a:70:a8:dd:91:b1:2a:62:1f:26:23:
                    52:b3:b6:f2:dd:3b:c9:df:ed:e0:63:5a:9e:73:a3:
                    ea:6d:00:14:a3:b4:d1:e2:ab:28:60:95:15:e3:2e:
                    07:37:d9:50:1b:5f:d3:9b:78:d8:31:fb:33:83:d7:
                    5e:8c:b7:4b:b3:12:e6:3c:d7:5e:fc:c9:31:59:02:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:04:D0:62:16:9B:13:BF:DE:15:28:3A:D1:5B:97:A4:24:0D:32
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a35373a3a2f34382d3438203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:7f:c1:01:a1:4f:15:6f:67:65:e8:58:65:41:a6:7d:f9:
         06:57:34:8d:52:53:79:8b:44:33:cd:cf:1e:55:b5:b4:0b:d4:
         ba:f0:1d:e8:11:5f:bc:a6:d6:31:19:f2:3b:b9:a6:cb:b6:8a:
         f7:1d:12:09:3d:aa:3c:ed:8a:9c:08:91:4e:e6:f4:fd:0b:1b:
         1e:98:5b:5d:ae:fb:a1:f0:a7:ad:b9:5c:fa:01:d2:fd:ea:de:
         3d:1c:57:fc:cc:76:d1:ba:3a:ef:6b:6a:e3:df:10:83:80:6d:
         7f:19:d3:d0:2a:bb:12:eb:a0:37:bc:56:e0:33:b9:8e:7c:87:
         ba:3f:a1:fe:f1:b9:b8:80:8b:68:25:c2:a2:d9:bb:1f:10:cd:
         3b:85:9d:5b:1d:0e:1d:b0:84:7c:73:8b:09:13:1b:b2:c6:a4:
         63:2e:ed:8f:b0:00:5b:70:a9:58:a8:67:15:c0:8b:a4:3e:a1:
         3e:6d:ef:34:c7:04:e3:dc:f9:a4:51:48:25:61:53:8d:f8:7d:
         85:3e:b2:1f:a0:46:9a:f7:c5:57:9c:b3:9e:67:49:16:e0:fb:
         f4:4f:97:43:f0:1f:42:48:a6:8b:79:aa:1e:53:ea:db:c6:8c:
         29:1c:31:71:a2:b3:f0:78:8a:8c:b3:0f:41:a7:bb:0f:d4:ff:
         0c:af:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org