Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa
File:                     323830303a613031303a3a2f33322d313238203d3e203139313932.roa (raw, json)
Hash identifier:          w5IKjrUQ+t5uDgKkH4Isz8px58wM8zeF0206gC1ZvhQ=
Subject key identifier:   2B:CF:C5:F4:6D:05:69:CD:44:B8:6B:4E:E8:49:F5:F9:49:17:A5:F9
Certificate issuer:       /CN=898729973C2338366642A6EE0E3DA10797106F7B
Certificate serial:       077F6ED4675912F6585F3CA6D095C32BE28E65BA
Authority key identifier: 89:87:29:97:3C:23:38:36:66:42:A6:EE:0E:3D:A1:07:97:10:6F:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa
Signing time:             Tue 05 Mar 2024 17:49:35 +0000
ROA not before:           Tue 05 Mar 2024 17:44:35 +0000
ROA not after:            Tue 04 Mar 2025 17:49:35 +0000
asID:                     19192
IP address blocks:        2800:a010::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7f:6e:d4:67:59:12:f6:58:5f:3c:a6:d0:95:c3:2b:e2:8e:65:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=898729973C2338366642A6EE0E3DA10797106F7B
        Validity
            Not Before: Mar  5 17:44:35 2024 GMT
            Not After : Mar  4 17:49:35 2025 GMT
        Subject: CN=2BCFC5F46D0569CD44B86B4EE849F5F94917A5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:e7:f1:71:9d:57:5a:b4:50:c4:e3:c9:7c:
                    76:ae:9d:b8:6e:02:12:36:99:3f:be:35:7f:3e:ef:
                    55:b9:01:f9:ea:e6:07:6e:f8:b8:d9:ad:e3:12:56:
                    a4:57:26:9c:66:8e:d1:fb:f5:2f:f0:8a:02:23:16:
                    08:77:6e:29:cc:ed:5e:ec:69:42:38:f4:ec:d1:9c:
                    78:34:7b:57:88:4b:8a:11:e1:31:62:75:94:e5:53:
                    c2:98:e3:e5:cc:92:f7:a8:cb:aa:fc:5c:15:b8:c7:
                    15:fb:9f:c1:98:3b:dd:3d:fa:5c:1f:74:3e:0d:20:
                    8e:12:9f:92:ee:e8:51:bc:98:bb:41:1d:dd:b9:61:
                    35:14:99:40:8e:77:0a:49:00:40:5c:74:4c:5a:3b:
                    dd:e2:39:58:d4:df:c1:62:a2:99:cb:30:24:eb:46:
                    7b:25:4b:f7:d4:70:a8:ef:f0:d1:b9:28:f9:25:a8:
                    61:a4:7d:01:74:37:9f:9d:19:37:8c:2e:af:89:4b:
                    fd:d7:ac:ee:57:77:72:1f:96:0f:68:02:42:4a:8e:
                    20:71:d2:d3:3f:2b:3e:7d:5f:e0:dd:02:58:cf:59:
                    20:76:ff:91:a8:33:a4:09:05:17:72:90:06:26:c0:
                    9f:ad:e5:dd:d6:78:19:a4:ee:28:03:3d:a2:3d:55:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CF:C5:F4:6D:05:69:CD:44:B8:6B:4E:E8:49:F5:F9:49:17:A5:F9
            X509v3 Authority Key Identifier:
                keyid:89:87:29:97:3C:23:38:36:66:42:A6:EE:0E:3D:A1:07:97:10:6F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/323830303a613031303a3a2f33322d313238203d3e203139313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a010::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:6f:dc:fe:a4:68:20:d3:12:df:53:83:d0:11:3e:ca:17:
         1a:40:da:d5:08:d5:d9:ee:77:8d:ae:bc:1d:bd:86:59:f4:72:
         92:30:98:09:05:f2:c8:0d:c4:dc:a3:07:3a:26:a9:80:97:57:
         34:17:99:57:0c:69:a7:07:3b:4c:4f:dc:72:24:d2:93:d7:93:
         56:5a:6f:f3:f0:52:f4:4a:ca:18:f6:4b:4d:ed:82:02:da:6e:
         5c:67:11:1b:44:31:4a:63:38:fe:93:49:54:fc:6d:60:a6:e5:
         fc:ed:3d:bf:d9:4a:76:11:b0:95:09:6a:e2:e7:63:03:87:69:
         fb:65:db:8e:a8:f9:44:a3:5f:00:26:d2:e2:23:59:e2:34:f3:
         55:17:3a:bf:a2:ab:a7:d6:fa:af:ac:05:22:c7:f8:cd:69:19:
         58:b6:ac:92:c8:70:65:3e:13:91:0e:2a:5b:42:11:e9:3c:53:
         26:43:fe:63:6d:f7:83:cd:7e:cd:c8:94:d5:6e:37:be:c8:e4:
         a4:5c:e1:e6:11:8c:d6:82:dd:0a:94:65:23:f2:7a:7a:7d:49:
         f1:66:6a:81:2f:ed:20:c0:52:64:05:7e:27:d4:6d:a3:cc:5e:
         48:eb:8e:54:1b:5b:06:b6:64:7d:07:53:b5:f6:49:ef:1a:f8:
         cb:96:84:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:21:35 2024 by rpki-client on console-ams.rpki-client.org