Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3332203d3e203237373235.roa
File:                     323030313a313335383a3a2f33322d3332203d3e203237373235.roa (raw, json)
Hash identifier:          NKpx3mBmIxX6ZWF+ul2TMNntp1evSUlOvsLBI8f2/6A=
Subject key identifier:   5E:58:D5:49:B1:26:37:AC:93:66:3B:78:7C:B0:BE:AE:4C:11:B7:C0
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       0D26AB0F3D30887E84BDE5884ED523B77BFE591D
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3332203d3e203237373235.roa
Signing time:             Tue 05 Mar 2024 18:04:57 +0000
ROA not before:           Tue 05 Mar 2024 17:59:57 +0000
ROA not after:            Tue 04 Mar 2025 18:04:57 +0000
asID:                     27725
IP address blocks:        2001:1358::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:26:ab:0f:3d:30:88:7e:84:bd:e5:88:4e:d5:23:b7:7b:fe:59:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Mar  5 17:59:57 2024 GMT
            Not After : Mar  4 18:04:57 2025 GMT
        Subject: CN=5E58D549B12637AC93663B787CB0BEAE4C11B7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:04:26:60:65:9f:f8:81:da:91:92:e7:7a:
                    3a:57:47:d2:c5:4b:bb:b8:95:57:af:06:a0:4e:ba:
                    78:82:b7:4a:ed:4b:8a:aa:c9:f6:c5:18:7e:6a:20:
                    48:e5:a2:4d:d2:a6:28:c1:48:4f:ef:31:35:a2:90:
                    b5:b5:d4:a4:5d:17:61:23:dd:7e:2e:1e:1d:98:91:
                    bf:27:8b:1c:73:fc:4a:77:dd:c5:e3:f6:92:b0:c7:
                    64:a6:d7:08:28:e5:40:7d:40:f1:64:02:aa:da:d3:
                    a3:99:b5:e0:9f:0c:30:06:28:b1:0e:ec:42:c6:b1:
                    b3:e6:f6:f5:82:40:89:6c:b9:df:a2:f9:d7:84:2c:
                    66:09:ec:e1:d2:f6:1e:01:f7:0d:7c:5a:09:3a:59:
                    99:ac:70:fe:cb:8c:a0:a6:75:bc:e6:06:d0:f6:36:
                    de:b4:0f:2c:70:4f:e6:7b:9c:1e:6c:f7:9e:e3:a6:
                    95:b5:98:2e:d3:25:ba:c0:3f:97:73:1a:19:82:f1:
                    fa:47:20:79:04:c0:10:87:60:eb:7c:46:2f:d6:23:
                    6c:82:66:33:92:07:38:d9:3d:7b:32:63:06:c4:bf:
                    96:20:71:d3:cf:97:92:17:bd:97:aa:00:e7:51:d9:
                    67:4b:49:38:75:9a:6b:c4:2f:12:ad:25:07:8b:cd:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:58:D5:49:B1:26:37:AC:93:66:3B:78:7C:B0:BE:AE:4C:11:B7:C0
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3332203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1358::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:2d:fe:4b:6c:eb:3a:a7:72:8e:2f:6e:35:64:f2:a4:a9:
         f9:f4:5e:2f:de:6c:50:0f:7e:4a:a8:26:ef:04:fb:ae:f2:b6:
         4b:2c:d3:f0:0e:35:87:ca:12:39:1f:81:d3:09:c0:5e:70:c6:
         4d:d7:a7:ac:05:57:5e:b5:c4:f5:f4:0f:3a:74:04:8c:b2:93:
         d7:3b:48:90:62:2c:cd:72:c2:60:e5:90:78:4f:74:9c:11:ca:
         93:8e:13:df:55:2e:12:21:3e:f2:f2:58:3c:10:11:7b:5c:45:
         e1:98:a7:e7:92:91:c1:8e:2c:c0:a7:c2:8a:c7:4a:0a:95:3e:
         dc:30:42:5d:92:b9:db:e9:d9:fb:47:69:60:ff:eb:f1:42:e7:
         03:1a:22:a2:ff:f3:69:25:8c:2e:a6:f3:18:b4:0f:b5:a3:3d:
         8a:d9:a6:5e:49:85:54:29:b1:84:e6:ac:58:c1:13:83:d3:e8:
         41:2c:a2:8a:ab:87:21:56:df:0a:1e:25:d7:1b:e1:70:e6:15:
         b5:bc:7c:fe:24:91:02:22:4f:dc:ad:d4:37:a1:11:2e:0e:91:
         76:da:8d:75:d9:c9:2e:79:66:9e:2b:1e:42:b0:d7:e6:15:d1:
         14:5e:dd:26:bf:f7:33:1e:cd:5e:b1:34:1e:96:2e:80:69:81:
         d5:60:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org