Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa
File:                     323830303a3232303a3a2f33322d3438203d3e203133353835.roa (raw, json)
Hash identifier:          v32vbGM49LcYAbPNPR8a78561bCFVRGthPYvE2XonAw=
Subject key identifier:   89:14:E2:69:9F:38:94:2D:65:6E:7D:C8:F5:5C:8E:6D:F6:77:66:F8
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       56D8D98708B146A32814374EDFAD78E518CDDFE0
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa
Signing time:             Tue 05 Mar 2024 18:07:19 +0000
ROA not before:           Tue 05 Mar 2024 18:02:19 +0000
ROA not after:            Tue 04 Mar 2025 18:07:19 +0000
asID:                     13585
IP address blocks:        2800:220::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 01 May 2024 23:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d8:d9:87:08:b1:46:a3:28:14:37:4e:df:ad:78:e5:18:cd:df:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Mar  5 18:02:19 2024 GMT
            Not After : Mar  4 18:07:19 2025 GMT
        Subject: CN=8914E2699F38942D656E7DC8F55C8E6DF67766F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:5e:db:ae:c9:7a:e2:e3:7a:2a:51:79:84:
                    a6:9b:6f:29:68:8d:75:a1:c2:47:7d:7d:45:89:31:
                    71:be:bc:86:e2:5c:94:b7:02:4d:4c:ac:0e:8c:e1:
                    de:da:e9:d8:20:94:b6:14:27:c7:12:87:27:3e:8a:
                    b3:f3:f1:4c:39:3a:15:b3:65:47:e3:67:26:ab:d1:
                    bf:9b:79:53:4d:76:de:aa:c2:0d:05:31:49:74:90:
                    94:13:5b:28:c8:b6:fa:b6:62:52:66:b1:06:b7:01:
                    bb:45:78:ad:5c:31:2c:04:d9:ee:e2:49:d3:be:3d:
                    20:22:8e:82:e1:40:80:79:c8:6b:9d:7a:29:ab:a6:
                    22:03:da:ce:71:72:b1:fd:fa:43:98:b4:99:46:4d:
                    fa:49:e6:4a:66:f5:b1:bf:ea:2c:8d:51:e9:d1:6a:
                    a0:89:5f:9b:4a:04:d5:c5:96:67:24:18:10:89:77:
                    c8:83:80:4e:e2:6e:ef:82:1e:37:b8:3d:c5:6d:d6:
                    b1:27:df:78:a4:f2:8b:4e:5b:1d:7f:b8:dd:02:84:
                    5a:1c:ac:90:af:44:ad:b6:26:99:53:29:13:ff:f7:
                    08:d4:9d:fa:40:d9:0f:c1:7f:d1:de:0f:34:a9:f0:
                    b6:90:8f:b9:ca:a8:c5:7b:98:ab:c8:c7:60:0e:5f:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:E2:69:9F:38:94:2D:65:6E:7D:C8:F5:5C:8E:6D:F6:77:66:F8
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/323830303a3232303a3a2f33322d3438203d3e203133353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:220::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:45:8a:60:47:b8:2d:6b:3e:1b:90:5c:ce:25:d3:b9:03:dc:
         00:63:0f:f2:25:91:8f:c3:b8:13:a9:a9:a3:c6:24:e2:8c:ea:
         16:7c:ad:94:37:ab:2c:8b:4a:cd:6b:48:b1:55:40:c2:47:ff:
         61:d1:85:3b:aa:f2:b4:4c:08:7f:fc:d4:cc:5d:49:38:43:1a:
         0c:e1:90:d2:10:8f:35:6e:20:25:5d:55:10:48:f7:32:f5:8c:
         d4:36:aa:69:c8:2a:0a:d0:c8:76:12:c7:43:3c:fd:fe:15:70:
         9c:e0:2b:26:5e:1b:7f:8f:88:37:d0:6b:6a:22:36:cd:8e:6e:
         a4:35:ab:f6:90:ad:d6:a4:f2:39:2a:44:6c:35:3b:93:0a:5c:
         7e:9e:95:73:7b:48:25:43:7f:45:2e:b4:f9:3a:ba:d0:b7:6c:
         3a:d1:b2:aa:d3:66:45:e8:87:d3:27:4f:40:d1:01:65:38:58:
         55:aa:80:52:72:fb:1d:27:ab:89:a8:be:c0:d8:bf:d4:c1:7e:
         08:ec:ad:84:0f:50:91:c3:02:56:d9:d4:73:53:77:31:50:ee:
         a7:f4:f9:41:9c:d3:1f:58:7d:a9:b2:fc:a9:fc:66:0d:0b:ab:
         ad:49:da:b1:43:e3:2d:54:ff:0c:fa:3c:e5:c9:7f:eb:98:14:
         b7:67:70:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:45:23 2024 by rpki-client on console-fra.rpki-client.org