Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a3a2f34382d3438203d3e203138373437.roa
File:                     323830323a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          KkBu7Tj/XfmP+xx8LCweRdNDesCZrxeCPyZVw+GglO4=
Subject key identifier:   E2:56:07:AD:A0:38:27:FA:DA:F5:6D:8E:36:87:5E:7A:C5:17:5B:07
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       30F6331D77FC85528F7343625F20CB99BF79CC33
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:12 +0000
ROA not before:           Tue 05 Mar 2024 17:54:12 +0000
ROA not after:            Tue 04 Mar 2025 17:59:12 +0000
asID:                     18747
IP address blocks:        2802::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f6:33:1d:77:fc:85:52:8f:73:43:62:5f:20:cb:99:bf:79:cc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:12 2024 GMT
            Not After : Mar  4 17:59:12 2025 GMT
        Subject: CN=E25607ADA03827FADAF56D8E36875E7AC5175B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:2d:29:4d:07:80:3e:cd:11:48:8d:21:75:
                    5e:49:db:8e:b9:ce:3f:22:d9:9c:f3:68:90:88:b2:
                    38:71:a1:05:18:fb:6f:2c:15:cf:a3:e6:46:0a:0b:
                    f1:22:de:92:9a:a6:1e:61:32:de:50:9f:ea:92:7f:
                    ce:5a:ec:84:88:71:4b:7d:56:e1:37:95:bc:82:3b:
                    68:d7:96:72:9d:33:7e:1a:6c:d7:19:88:d4:e6:2f:
                    b0:99:c4:15:34:d4:05:b0:e5:25:56:5e:d7:a7:72:
                    d9:4f:ba:5f:0b:07:04:d2:69:f6:e9:4a:c5:65:e5:
                    b9:51:77:8f:06:3a:40:13:13:f8:ab:10:c5:79:7c:
                    6d:19:61:b2:79:c6:68:dd:19:3a:89:c5:90:98:a5:
                    a1:4b:04:e6:dd:b3:b0:48:6f:63:a9:6e:3e:bd:59:
                    8a:0e:05:73:20:6a:e4:6c:ee:d7:22:66:1e:e4:42:
                    74:63:4c:9d:d0:a8:c1:cf:8d:e0:06:8e:f9:2a:98:
                    8e:06:f4:dc:f7:fd:b9:06:05:35:a1:f4:09:d6:9f:
                    ef:1c:93:fd:61:dc:1b:ee:71:d5:8c:2c:de:6e:a8:
                    be:a3:bd:b2:55:38:14:45:4d:f3:8a:43:9d:60:f6:
                    47:c7:85:40:4c:54:41:4b:ca:80:09:5f:e0:96:b5:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:07:AD:A0:38:27:FA:DA:F5:6D:8E:36:87:5E:7A:C5:17:5B:07
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2802::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:b3:be:8f:aa:79:93:88:fd:80:a5:7f:2c:ba:c2:2f:2a:
         4b:3d:69:98:07:45:1a:33:b3:72:53:5d:7f:71:de:5a:4f:6c:
         9d:72:8f:ba:17:6a:1a:2b:a2:e9:5f:39:b8:c6:5a:28:18:c2:
         ba:55:a9:b5:3a:97:ec:f5:0c:1c:69:a7:2a:87:1a:9b:46:25:
         a5:8e:dd:2f:6d:1b:f2:ae:83:2d:3c:29:02:61:cc:ff:d7:d4:
         07:65:5c:e3:63:11:ce:35:83:79:dc:5c:12:f3:7a:c2:14:af:
         f9:31:8d:fe:13:91:5e:60:d2:13:7a:0b:83:75:e9:a6:0b:1d:
         c6:ff:5f:d7:cb:f2:1b:95:8c:ef:32:66:0e:2d:65:ee:37:01:
         3d:99:1c:0a:58:2f:ca:45:1d:5a:91:f8:6d:6f:4f:33:f2:6c:
         dc:1e:27:41:a8:ee:dd:b7:37:39:32:54:8b:ea:48:11:00:08:
         f0:8a:8c:00:0e:b7:bd:9d:b1:eb:69:75:cc:74:af:19:08:93:
         b7:9c:0e:aa:bd:0d:df:59:68:40:e4:8f:be:73:8b:a0:3c:2c:
         6d:1a:de:b4:1c:49:be:c7:d4:af:19:72:ec:5d:a8:51:31:93:
         64:46:d4:26:d1:47:99:72:92:51:b7:39:1c:76:24:dc:67:f9:
         1b:f4:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org