Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/323830313a63343a31323a3a2f34382d3438203d3e203238343737.roa
File:                     323830313a63343a31323a3a2f34382d3438203d3e203238343737.roa (raw, json)
Hash identifier:          CqPnlbM8Sgip60CIxWLC/GGNXxkjwS90XYioH7Tz6PA=
Subject key identifier:   52:0B:D8:21:F1:95:8C:23:58:00:8B:22:F4:21:24:DE:04:AD:0B:3D
Certificate issuer:       /CN=34E2948CC30C7F4DA3561CE920B46DD4615AD585
Certificate serial:       6C2866221582E2A4345C15C52D62703EED05895C
Authority key identifier: 34:E2:94:8C:C3:0C:7F:4D:A3:56:1C:E9:20:B4:6D:D4:61:5A:D5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/323830313a63343a31323a3a2f34382d3438203d3e203238343737.roa
Signing time:             Tue 05 Mar 2024 18:18:08 +0000
ROA not before:           Tue 05 Mar 2024 18:13:08 +0000
ROA not after:            Tue 04 Mar 2025 18:18:08 +0000
asID:                     28477
IP address blocks:        2801:c4:12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:28:66:22:15:82:e2:a4:34:5c:15:c5:2d:62:70:3e:ed:05:89:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E2948CC30C7F4DA3561CE920B46DD4615AD585
        Validity
            Not Before: Mar  5 18:13:08 2024 GMT
            Not After : Mar  4 18:18:08 2025 GMT
        Subject: CN=520BD821F1958C2358008B22F42124DE04AD0B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:34:6c:74:96:dc:ce:d0:9c:dc:8d:36:72:
                    cc:29:be:46:d7:11:a5:4d:b7:7c:74:30:23:99:be:
                    c8:27:80:0b:05:54:6a:e6:a8:3d:1a:f7:84:40:25:
                    2e:c3:f4:27:07:24:4b:e6:6f:b8:27:2c:e7:5c:c3:
                    06:a5:05:ce:1f:10:ce:03:e7:e6:2b:cf:e8:82:ca:
                    9a:83:f2:46:1a:fd:73:e4:c2:38:b1:19:23:7c:9c:
                    a9:78:f7:2c:d0:f3:30:de:fb:ad:65:a0:d3:9f:00:
                    12:8c:71:29:15:24:23:48:9c:97:f2:c5:ba:5a:5a:
                    b1:8c:ac:39:8b:b1:cd:b8:44:cd:93:49:f4:31:5d:
                    e6:ef:7b:a4:ba:53:0f:c0:ab:2f:78:0f:b1:b2:75:
                    48:b5:12:4d:91:5a:1d:68:48:f4:06:8d:55:11:07:
                    2a:60:d0:63:d7:0c:b7:92:17:1e:f2:72:ee:26:d1:
                    fd:1e:3c:09:4b:53:7f:ff:18:7f:d3:8c:72:2b:71:
                    11:79:21:86:93:65:63:56:cd:e9:27:5d:45:ec:75:
                    3d:0e:5e:ff:09:5b:3f:fe:76:ef:ca:ef:c2:f7:5e:
                    5b:f4:5a:55:01:b7:d2:21:54:b8:06:a5:ab:92:79:
                    48:d8:9a:b3:c9:b4:b8:1d:8d:68:66:3b:c7:b5:9c:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0B:D8:21:F1:95:8C:23:58:00:8B:22:F4:21:24:DE:04:AD:0B:3D
            X509v3 Authority Key Identifier:
                keyid:34:E2:94:8C:C3:0C:7F:4D:A3:56:1C:E9:20:B4:6D:D4:61:5A:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/323830313a63343a31323a3a2f34382d3438203d3e203238343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:45:ac:fe:9f:4d:b0:45:ec:44:40:87:32:a9:21:c5:84:b6:
         61:6f:e8:a7:7f:3f:1c:f1:de:4a:fd:3d:c7:51:6e:53:58:65:
         ae:09:3f:16:06:ab:fa:8d:16:d0:96:48:f6:72:57:b9:04:b5:
         1a:a8:52:d9:86:69:58:f5:9b:88:b4:24:63:4c:09:7d:91:3a:
         c6:9e:a5:e0:b4:82:10:e7:a1:60:50:17:ad:68:76:dd:9b:ec:
         e3:27:96:9d:38:88:62:e3:02:a3:a2:87:c9:0d:5e:6b:b8:76:
         41:4b:2e:f9:16:73:5f:75:5a:6b:ed:c7:87:75:07:99:8c:6b:
         19:8e:7f:3b:99:43:63:a6:c1:7f:4c:51:15:78:cc:7c:cd:65:
         9a:f8:41:c8:f9:f9:23:27:38:0e:56:b3:f2:9b:5c:fa:75:72:
         93:88:43:5c:28:95:f7:3a:14:be:57:d6:d1:54:ef:f6:95:84:
         03:a1:29:ec:ac:d0:37:59:7f:18:2c:01:01:13:78:e9:2d:55:
         1e:8b:89:fb:ce:a6:7b:67:1b:97:fd:36:07:9e:48:9d:06:45:
         6f:c2:2b:ba:be:c9:e8:a0:50:eb:83:c5:cc:65:01:50:ca:cd:
         be:53:53:4b:32:d8:91:64:a1:9e:86:47:3b:4d:51:a6:23:d0:
         d9:f7:59:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org