Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa
File:                     323830303a6261303a3a2f33322d3438203d3e20323633383132.roa (raw, json)
Hash identifier:          UxzWtYkEo/AiqhcG1Q0IYDRsAvLl7VDZ7S/OAzqnCs4=
Subject key identifier:   37:E7:29:F3:F1:50:89:0E:33:5F:36:CB:23:89:FE:B5:62:DA:97:D8
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       39F53D2B3B8294A98F4336D92E91DA94855707EE
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa
Signing time:             Tue 05 Mar 2024 18:02:24 +0000
ROA not before:           Tue 05 Mar 2024 17:57:24 +0000
ROA not after:            Tue 04 Mar 2025 18:02:24 +0000
asID:                     263812
IP address blocks:        2800:ba0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f5:3d:2b:3b:82:94:a9:8f:43:36:d9:2e:91:da:94:85:57:07:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Mar  5 17:57:24 2024 GMT
            Not After : Mar  4 18:02:24 2025 GMT
        Subject: CN=37E729F3F150890E335F36CB2389FEB562DA97D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:6d:d9:ee:1c:cd:66:f6:92:4c:70:1f:9b:
                    a3:be:07:6f:81:ea:4e:c2:28:be:b7:41:34:49:ba:
                    3d:f2:1a:e3:61:10:35:b7:69:ec:85:14:21:a1:7f:
                    8f:75:50:8e:64:fa:b2:c0:c9:2b:ad:a6:b3:f9:a7:
                    dd:31:c2:af:66:25:e1:3b:d5:08:93:19:80:62:3a:
                    3b:0d:10:fa:8c:70:e3:bc:38:e8:90:91:0d:6f:d7:
                    fe:d2:d2:73:e6:a0:34:86:b6:fe:3b:df:e7:4e:ed:
                    1b:83:1c:32:ca:bb:ad:f9:55:aa:79:b3:ee:ad:85:
                    2d:b4:f3:ca:a6:d1:49:9e:1a:58:09:39:be:cf:83:
                    51:52:28:34:36:0b:bd:e0:0d:ad:ca:c7:10:53:f8:
                    cc:bf:77:3b:8f:39:cf:54:ad:05:af:fc:40:6d:02:
                    1c:41:d5:0d:da:09:9f:94:ec:be:15:d4:98:86:d1:
                    43:5e:32:28:a1:72:ab:f9:29:8a:fa:f3:26:ac:70:
                    73:ab:55:e0:6a:1a:99:97:cd:c6:16:05:70:67:cb:
                    c3:6c:89:f6:ef:f4:58:84:c2:8b:45:fd:77:72:be:
                    df:46:c3:6c:08:84:40:1b:3d:83:4c:3d:f8:a1:9a:
                    f1:c2:83:10:8d:7b:24:52:56:32:4e:78:b9:d2:9e:
                    67:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E7:29:F3:F1:50:89:0E:33:5F:36:CB:23:89:FE:B5:62:DA:97:D8
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:0c:83:0d:de:aa:36:4a:47:eb:81:3b:d3:97:8e:3b:fe:
         10:6c:5c:0f:db:ba:c7:bf:97:85:00:00:0f:d2:65:8d:18:1d:
         f9:61:c9:b4:91:f7:9b:f8:84:7c:9d:e5:6e:f6:00:66:00:3c:
         68:98:39:c0:eb:9b:f4:11:b7:5e:aa:62:c7:ff:0b:84:15:79:
         18:d2:5d:bf:4c:d0:20:f6:f9:f6:70:8a:43:f8:f5:ee:c6:f4:
         2e:f8:43:36:f1:41:93:4f:00:23:b0:e5:eb:92:1c:31:e8:ca:
         8a:1c:61:e7:d3:ee:1b:db:a3:e8:67:6f:bc:8c:84:95:33:66:
         6f:d3:b2:c0:ba:0b:97:73:10:cb:35:b8:4c:e9:e6:34:8f:9f:
         b2:e4:a7:15:40:7f:86:ec:7c:ed:65:e9:f6:0c:a7:55:71:85:
         1b:9e:e2:2b:9e:a7:7d:e7:97:d4:f8:34:3e:1f:6c:e8:24:e2:
         1d:05:82:a8:ec:03:3d:91:86:6f:02:ce:b6:a4:54:d2:ec:a3:
         fc:d6:c1:68:f9:96:fc:ca:66:df:cf:8a:ce:40:77:78:79:99:
         a7:94:92:c1:9f:a3:0f:87:c8:f6:ef:27:9e:ba:98:77:6e:06:
         6e:5d:a3:18:ca:7a:ae:ac:0e:17:3a:13:20:28:83:54:1f:0e:
         ac:ee:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org