Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/323830303a3238303a3a2f33322d3634203d3e203237373831.roa
File:                     323830303a3238303a3a2f33322d3634203d3e203237373831.roa (raw, json)
Hash identifier:          diuaMxj7tTIeIlp/hRi20ysNPQL03YDqksg0luCYOOs=
Subject key identifier:   E8:DD:65:AC:7A:61:CE:16:4F:18:3F:2E:93:67:C5:54:9D:05:C0:0D
Certificate issuer:       /CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
Certificate serial:       017B2E142C12BA1C3CB588612768D247DD0735C6
Authority key identifier: 83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/323830303a3238303a3a2f33322d3634203d3e203237373831.roa
Signing time:             Tue 05 Mar 2024 17:43:48 +0000
ROA not before:           Tue 05 Mar 2024 17:38:48 +0000
ROA not after:            Tue 04 Mar 2025 17:43:48 +0000
asID:                     27781
IP address blocks:        2800:280::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7b:2e:14:2c:12:ba:1c:3c:b5:88:61:27:68:d2:47:dd:07:35:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
        Validity
            Not Before: Mar  5 17:38:48 2024 GMT
            Not After : Mar  4 17:43:48 2025 GMT
        Subject: CN=E8DD65AC7A61CE164F183F2E9367C5549D05C00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:7c:23:56:f1:88:8b:b5:30:98:24:91:c0:
                    47:d4:16:3e:40:ed:de:44:07:00:2e:91:62:a3:a6:
                    d4:d8:bd:62:d5:b5:aa:bd:58:17:93:6c:e8:3e:72:
                    c8:9e:34:fb:64:ff:34:ec:0f:de:68:2f:e5:63:4b:
                    32:b5:79:b0:5a:ae:81:f2:a7:b7:b6:7e:23:a7:23:
                    5d:d0:e0:27:e4:b2:e9:71:50:e3:a4:43:ba:fc:60:
                    60:1d:93:92:d4:60:c6:f0:c1:00:62:63:b4:af:4e:
                    48:c3:5c:d4:56:b6:7d:87:c2:7c:52:cb:78:c7:40:
                    ab:08:41:4f:de:b7:11:21:d7:c2:cf:f7:9f:db:56:
                    03:e6:a2:0f:f7:78:d8:a7:0c:da:cd:ca:5f:59:a7:
                    42:3e:ce:92:ae:cc:6c:94:40:62:f1:08:ba:a5:52:
                    8c:36:ae:21:e4:6d:53:48:68:de:ef:53:2a:8d:4f:
                    b3:3b:87:f3:b2:88:f2:4d:7f:ce:3d:39:b3:59:41:
                    32:71:d8:38:ea:d2:40:f3:19:2a:17:b1:c1:d8:dc:
                    68:99:17:f8:1c:1f:e6:dc:7d:4a:61:01:50:0e:fa:
                    07:d7:19:d0:0f:34:0f:cd:58:b9:18:00:25:13:91:
                    b9:9f:ef:40:ec:f7:04:18:b5:34:3f:1f:2a:2b:5e:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DD:65:AC:7A:61:CE:16:4F:18:3F:2E:93:67:C5:54:9D:05:C0:0D
            X509v3 Authority Key Identifier:
                keyid:83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/323830303a3238303a3a2f33322d3634203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:280::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:58:6a:4d:f3:19:7c:d7:0e:bf:b3:63:a8:7f:07:1e:ca:6f:
         fc:dd:2a:b7:9f:ec:ff:67:51:50:a1:1f:db:29:be:b6:b8:a0:
         36:b4:c5:19:95:84:04:57:a5:29:7d:27:c7:28:50:f9:8c:dd:
         63:ed:4c:ed:79:9f:bf:2b:69:fc:66:4f:fe:9b:42:a0:b6:10:
         78:0b:bf:f9:b3:f7:d4:ca:63:a9:ae:25:7e:c5:d6:99:91:1e:
         e8:cd:23:49:d8:c6:3b:85:6d:49:d1:2c:30:dc:b2:b8:ca:28:
         4c:ac:3d:b1:ed:dd:df:91:f0:f5:ed:36:c1:b8:0e:d3:64:93:
         20:f3:a4:12:1b:59:4f:9b:f7:65:ed:ff:34:0a:f4:0b:8b:14:
         be:e0:ba:a6:2a:27:25:d3:6d:36:92:bc:4c:15:34:7b:5f:fd:
         23:0d:84:9a:e8:17:e5:bd:ed:c9:23:a3:a8:51:a2:6a:ef:29:
         6d:ac:11:af:a0:70:fe:f6:9a:93:01:f7:8b:c5:40:93:a2:8d:
         c4:68:a0:d6:69:0d:3f:b2:8d:56:15:3c:2f:ff:c6:e0:d2:24:
         3e:74:0c:0b:20:e5:ba:05:69:b1:70:89:4e:10:6e:3d:d0:07:
         0d:e9:8e:94:b2:c4:55:06:42:2a:a1:19:65:1e:51:a9:43:7a:
         3e:4e:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org