Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3832323a3a2f34382d3438203d3e203237383832.roa
File:                     323830303a3332303a3832323a3a2f34382d3438203d3e203237383832.roa (raw, json)
Hash identifier:          h83j1SuEoGO2CHchyfjCBBjeMncJU19XvXityciryrE=
Subject key identifier:   6B:AB:9F:BD:0F:5B:27:9C:7B:52:AA:EA:B2:68:8D:18:98:51:4A:84
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       54F3AC116EB83B8E8C5C2D6C861BD5C55DD835F7
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3832323a3a2f34382d3438203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:41 +0000
ROA not before:           Tue 05 Mar 2024 18:04:41 +0000
ROA not after:            Tue 04 Mar 2025 18:09:41 +0000
asID:                     27882
IP address blocks:        2800:320:822::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f3:ac:11:6e:b8:3b:8e:8c:5c:2d:6c:86:1b:d5:c5:5d:d8:35:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:41 2024 GMT
            Not After : Mar  4 18:09:41 2025 GMT
        Subject: CN=6BAB9FBD0F5B279C7B52AAEAB2688D1898514A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:3d:e8:5a:aa:fb:54:ff:a0:ad:85:65:a1:
                    dc:fe:fe:cd:b3:c7:ec:bf:b7:8e:2d:70:19:9d:e7:
                    84:08:3a:f6:01:ae:e4:22:3a:4e:5d:97:0e:c4:1d:
                    ce:58:04:ee:30:7c:17:ce:eb:dd:b8:e1:3a:8f:84:
                    64:ca:c7:c8:82:bb:4d:a6:6b:ff:2c:9a:fe:34:51:
                    ed:94:4c:78:e7:ee:5a:ee:16:b8:ae:7e:05:7e:0b:
                    ae:e2:93:c6:dd:13:a4:44:66:7f:80:26:b3:4e:45:
                    f5:e8:e7:10:a9:f0:c8:15:16:0d:f4:c4:86:04:fc:
                    30:d9:81:f5:94:18:4d:a2:f8:c6:5d:c8:44:cc:b6:
                    32:de:b8:bb:39:0e:ee:c3:81:1d:4b:3d:7d:2e:55:
                    d6:37:f9:d6:99:69:ce:3b:7f:e4:0e:86:0e:75:09:
                    e3:73:1c:e1:83:55:d4:df:8a:50:92:8c:06:84:4c:
                    fe:f9:d7:47:ad:2e:0d:30:c5:83:84:43:15:05:23:
                    9f:ec:e0:9a:e2:6b:d2:78:a9:3a:e5:41:a0:ee:57:
                    a6:be:c0:73:0b:4a:58:c2:e2:c2:fd:4b:7a:4b:3e:
                    d4:a7:2d:89:44:d1:b0:f9:27:84:18:95:34:cc:14:
                    cb:bb:d5:7e:05:99:5c:d8:17:e3:5f:3f:7d:67:ca:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:9F:BD:0F:5B:27:9C:7B:52:AA:EA:B2:68:8D:18:98:51:4A:84
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3832323a3a2f34382d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:822::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:08:f7:b7:80:19:ad:b5:8a:5d:cc:9c:5c:2c:45:08:42:
         22:35:69:b7:80:a0:75:2f:3a:b7:4c:49:12:7f:f8:a7:e0:1f:
         be:6c:73:d2:6d:c1:3e:d1:9e:00:dc:77:c7:98:61:f3:72:ce:
         03:c5:5f:e1:c2:de:e9:33:6b:14:9a:6a:24:38:43:23:fe:ac:
         64:13:c8:91:e8:6f:e1:37:c5:60:fe:bb:85:06:06:6d:77:64:
         0f:da:61:e1:24:31:d0:e1:15:41:a0:bb:e6:e4:a8:85:02:88:
         30:17:17:e0:34:f4:72:5b:24:8d:cc:dc:be:21:53:75:8f:f1:
         fe:3f:6b:28:e2:7c:9a:9c:67:21:a1:eb:69:93:2c:1f:cc:62:
         e5:92:39:f3:41:a3:38:9e:c5:c3:f3:ba:c1:b1:e1:fb:04:82:
         fd:ea:15:4f:6c:8b:5f:c7:c3:17:6d:1b:59:6a:07:86:e6:f6:
         b4:ad:b1:68:52:23:b6:33:ca:5f:70:be:7a:c5:4a:2a:0a:01:
         2f:d9:2d:7d:e5:a5:cb:ad:e0:d6:50:24:22:79:2e:a6:20:03:
         dd:5a:53:7b:67:86:6e:43:95:f7:94:95:9b:28:97:42:26:ac:
         2b:33:8e:2d:7b:9b:72:49:b9:ee:b8:e3:4e:08:17:81:1a:8e:
         4d:ad:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org