Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203631343638.roa
File:                     323830303a36383a3a2f33322d3438203d3e203631343638.roa (raw, json)
Hash identifier:          YD6wOD5Kpd5+OrjsMRtLQ7aD9KR5okLC9WvYyXiKLSk=
Subject key identifier:   1F:43:E4:0F:5B:AB:C0:C8:99:1B:38:85:26:8E:63:39:1C:C2:4C:7D
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       55719B76934516764405555D6EF460F1A31A3E29
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 17:44:37 +0000
ROA not before:           Tue 05 Mar 2024 17:39:37 +0000
ROA not after:            Tue 04 Mar 2025 17:44:37 +0000
asID:                     61468
IP address blocks:        2800:68::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:71:9b:76:93:45:16:76:44:05:55:5d:6e:f4:60:f1:a3:1a:3e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Mar  5 17:39:37 2024 GMT
            Not After : Mar  4 17:44:37 2025 GMT
        Subject: CN=1F43E40F5BABC0C8991B3885268E63391CC24C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:95:f3:5a:fe:e9:64:b5:ba:ff:d9:e8:62:
                    c6:07:23:15:b5:99:ac:86:04:35:f7:15:7b:3f:41:
                    34:91:e0:47:7d:35:ac:f7:48:bd:ec:91:1e:3f:0c:
                    8e:7d:30:2a:1d:a3:1f:a1:5e:12:7f:7d:22:19:31:
                    0d:33:95:15:fa:35:9f:8c:2a:ae:2f:68:d0:bd:63:
                    c8:87:59:38:6d:21:1a:2e:d0:0c:ed:0a:e7:33:42:
                    63:55:92:fe:b7:10:26:bd:e1:0a:de:fe:c9:30:e0:
                    ff:a4:54:6e:20:2b:7f:f3:40:06:62:f7:aa:e2:b5:
                    ec:16:ba:63:34:83:eb:46:b9:88:c2:ea:b6:fb:0b:
                    e0:b1:de:00:19:89:3d:b4:6f:b7:45:8a:47:e5:50:
                    34:70:e4:47:33:45:d9:68:b9:b5:6c:c5:e2:be:3a:
                    db:79:f1:0c:4b:c6:76:94:3e:10:c7:d6:88:95:5f:
                    ad:39:86:38:be:49:95:eb:d0:b0:31:98:cb:44:31:
                    99:02:15:cb:15:8b:3b:36:18:5a:c6:1b:0b:50:d8:
                    68:a3:2b:af:be:51:da:25:72:62:46:ec:8b:78:b7:
                    f2:01:ef:b4:24:ad:22:b8:62:e8:10:37:24:f1:5e:
                    f1:b1:9b:5a:71:78:9e:da:4b:85:34:c2:0a:61:02:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:43:E4:0F:5B:AB:C0:C8:99:1B:38:85:26:8E:63:39:1C:C2:4C:7D
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/323830303a36383a3a2f33322d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:4d:7c:46:28:2d:37:50:7e:7d:c0:a3:7b:17:10:e6:cf:
         26:9a:5e:27:59:75:82:1b:d2:03:89:0c:12:1e:12:51:b3:71:
         23:11:44:4f:9f:59:59:6c:0f:3c:e5:cf:76:40:d0:12:07:21:
         c1:e1:f1:60:75:4c:f0:45:ec:82:f3:36:f7:a9:d4:35:64:e0:
         4e:10:02:6a:6b:09:b4:0f:eb:17:93:67:dc:99:42:4c:e0:f4:
         e6:b8:de:d3:5e:91:c5:32:01:36:d7:c9:aa:10:b4:40:52:6b:
         49:49:17:f3:94:59:15:49:f4:ec:ba:93:33:8e:2b:5c:11:c8:
         59:98:19:c8:25:7b:a5:a0:cc:76:e0:6a:8b:e4:10:98:9e:80:
         f0:56:82:88:60:bc:e2:0e:66:08:ce:cc:89:2d:67:99:11:89:
         4d:5c:4f:33:62:0e:d8:08:94:29:40:ec:71:5b:38:81:56:9d:
         4d:67:0d:18:d1:4a:f8:85:7b:6d:ac:86:97:51:68:b1:6e:a9:
         b6:4b:9c:11:a1:04:72:b9:de:26:f5:03:58:46:00:96:4b:f8:
         10:71:38:01:b5:d0:0c:83:e7:df:d7:7b:01:da:35:53:49:e1:
         23:cd:b2:3b:73:0d:f6:a3:c9:48:2f:9e:96:ae:69:16:f6:df:
         5c:4c:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:28 2024 by rpki-client on console-fra.rpki-client.org