Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430313a3a2f34382d3438203d3e203237383832.roa
File:                     323830303a3332303a383430313a3a2f34382d3438203d3e203237383832.roa (raw, json)
Hash identifier:          pzjbgXUWXKmYdyneIBSWu216YJoq+yAUtXigPN4lriw=
Subject key identifier:   42:C4:65:42:A0:2A:88:F8:0A:89:E6:B9:BA:E4:A1:9A:B9:61:82:64
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       3C7250FCEE62DE32900E696D03CC4967E5CF92F2
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430313a3a2f34382d3438203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:39 +0000
ROA not before:           Tue 05 Mar 2024 18:04:39 +0000
ROA not after:            Tue 04 Mar 2025 18:09:39 +0000
asID:                     27882
IP address blocks:        2800:320:8401::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:72:50:fc:ee:62:de:32:90:0e:69:6d:03:cc:49:67:e5:cf:92:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:39 2024 GMT
            Not After : Mar  4 18:09:39 2025 GMT
        Subject: CN=42C46542A02A88F80A89E6B9BAE4A19AB9618264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:23:4b:40:cf:7f:49:0e:ea:98:6d:f5:70:cc:
                    d1:c5:fe:b0:da:70:8a:22:d7:94:b7:fe:d1:7d:55:
                    51:05:02:9d:89:5c:f3:9e:3c:7f:d8:c2:58:f0:fc:
                    d8:a0:2b:84:01:5a:5b:ca:b4:64:42:58:10:86:de:
                    62:c2:ab:30:cf:2c:8f:3c:49:61:7a:ee:3f:c3:39:
                    aa:0f:02:7c:c2:9f:18:f6:63:79:9d:2d:44:11:c1:
                    73:b5:d7:52:a5:2a:c7:87:b8:d0:a1:14:5c:e5:44:
                    2a:b9:e4:9f:62:2d:b3:60:3f:76:c4:41:86:30:46:
                    73:91:0c:5f:e9:4e:1e:7a:68:e8:27:7e:5c:f0:18:
                    68:ff:71:54:26:50:05:22:69:d1:24:d3:a9:ad:a5:
                    5b:bf:f6:37:46:66:18:3f:2f:c2:d3:9e:bb:61:12:
                    72:18:e0:55:31:41:ab:96:0f:e3:8c:0d:e8:9b:62:
                    63:a3:bf:d6:a8:ad:64:dd:1e:ac:f1:e8:a6:8a:8a:
                    d0:fa:5f:2e:2e:dc:79:58:f0:9f:60:47:83:88:b0:
                    8d:fc:c1:a8:e8:6a:bf:43:7b:69:9a:83:8f:df:45:
                    fe:e4:17:bc:26:d0:3e:1b:dc:66:5a:e2:3e:47:a0:
                    ea:6d:ad:1d:8a:e5:08:02:0f:5c:6d:48:20:27:fa:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:65:42:A0:2A:88:F8:0A:89:E6:B9:BA:E4:A1:9A:B9:61:82:64
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430313a3a2f34382d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:8401::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:a8:d0:d9:7f:f2:a5:95:5b:14:0e:0e:6d:4d:d8:fb:ef:
         51:19:5e:b7:42:99:5e:03:68:1b:1c:15:41:90:c2:cb:89:86:
         b6:73:f4:29:a4:39:1b:fd:4f:87:34:3b:fa:eb:73:1f:d0:8d:
         c7:87:3e:3a:09:49:11:67:46:d8:55:18:d6:42:93:2b:b9:41:
         aa:47:ae:9b:bd:78:a0:4e:7a:5d:96:a0:a3:34:cc:55:58:77:
         6f:30:c4:2d:22:e0:4f:48:78:42:77:9b:80:9d:d1:bf:0a:cb:
         cd:67:9d:79:b9:74:08:44:f4:b4:f1:25:20:dd:5d:8c:b1:64:
         15:44:37:bd:4f:b5:47:43:b9:a8:28:48:f8:eb:7a:ad:c9:cb:
         80:71:ce:79:21:2f:dd:a8:62:d9:98:b2:e6:b2:09:b4:25:a6:
         e3:f0:34:7d:ab:a8:14:18:0b:df:43:ac:95:e3:69:07:69:98:
         a2:23:a9:d2:82:b7:98:d0:1c:ed:1d:00:31:86:8b:d9:07:70:
         5e:c1:a9:70:1e:30:48:7d:20:c1:1f:62:e0:d8:4f:41:c3:bd:
         db:bf:2a:b4:ab:e9:ce:29:9d:f8:60:f3:33:dc:f5:10:50:71:
         26:b5:9e:a9:2b:a2:ad:18:c6:e9:e5:e9:e1:2c:43:38:17:69:
         42:8d:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:31 2024 by rpki-client on console-ams.rpki-client.org