Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531343a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346531343a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          36VFzZFUS2APYxJn8MqZPIu1ZJjsrqnu/9CZ78kIAg4=
Subject key identifier:   94:D7:11:66:1E:40:39:FA:6E:9E:30:85:9C:33:4D:93:56:9B:8A:62
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       23118C0E5C63EE2B712FF15B856E65A5491B8D88
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531343a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:28 +0000
ROA not before:           Tue 05 Mar 2024 17:59:28 +0000
ROA not after:            Tue 04 Mar 2025 18:04:28 +0000
asID:                     267848
IP address blocks:        2800:be0:4e14::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:11:8c:0e:5c:63:ee:2b:71:2f:f1:5b:85:6e:65:a5:49:1b:8d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:28 2024 GMT
            Not After : Mar  4 18:04:28 2025 GMT
        Subject: CN=94D711661E4039FA6E9E30859C334D93569B8A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:e6:f6:ea:4d:b1:6b:aa:11:6d:f5:7b:98:
                    77:85:f7:09:f7:79:73:d1:81:e9:85:e4:8d:73:ef:
                    e7:7f:b7:12:c1:97:08:c8:73:4d:8b:ad:6f:ba:2d:
                    f6:9f:b7:c9:8a:5f:4b:b9:87:b7:92:50:be:5d:3f:
                    af:63:e9:5b:0e:6d:0e:74:18:36:d4:72:d7:35:64:
                    91:3f:1b:78:f8:a0:53:9a:97:fa:bc:b9:05:b8:2d:
                    a2:1d:c8:b9:34:19:82:19:ac:fa:ec:b3:84:03:55:
                    c3:e6:4a:52:8c:c4:eb:23:f0:e1:12:ae:01:dc:4c:
                    66:36:1b:3a:ab:b3:12:e3:f4:4f:dd:47:48:30:e7:
                    5b:53:b4:95:d7:03:32:ce:0e:62:fb:67:0e:1e:42:
                    4e:62:01:b6:97:ac:f5:a1:30:7a:3e:cb:e7:b0:a4:
                    3e:7a:e6:8c:9e:69:99:34:ea:3c:83:cc:fb:38:78:
                    7a:84:98:35:c4:4a:6a:33:70:b9:eb:ec:2d:24:d7:
                    2a:01:c9:92:9e:e8:0e:ad:cb:5e:d0:e4:b9:24:a3:
                    a7:0f:0c:56:80:24:15:c6:58:45:e1:28:a9:5f:33:
                    f7:05:a3:ac:ba:29:ed:d3:7d:8a:10:bf:91:fd:95:
                    1f:b3:72:80:aa:25:d7:7a:29:88:9e:3a:39:f6:63:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:11:66:1E:40:39:FA:6E:9E:30:85:9C:33:4D:93:56:9B:8A:62
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531343a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e14::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:30:0b:b1:cb:58:20:30:dd:16:19:bb:83:ce:e6:63:bb:1b:
         91:7c:b6:8d:ac:fd:2e:45:14:20:83:d8:ad:65:ae:d8:10:02:
         2f:5a:db:c3:c9:35:ce:39:dd:e7:ef:03:57:78:32:8e:fb:e2:
         b6:41:aa:a9:01:14:5c:63:05:c5:fd:e1:85:69:4f:bf:7b:d8:
         0f:ec:88:06:ed:88:54:a0:3c:61:24:3d:36:96:00:4d:ea:58:
         4b:3c:e2:cf:9e:12:f9:c6:02:b7:97:1a:b9:90:b0:6f:65:49:
         d4:89:b1:fd:e3:54:f1:2f:9c:25:ba:4d:cf:07:60:00:a8:d8:
         23:74:00:8d:d7:d9:73:09:79:46:de:38:58:18:e9:54:70:9f:
         4d:94:e5:f3:ed:f1:ee:1f:95:c9:5c:ed:a9:64:4b:9e:4d:16:
         85:9a:43:81:c9:d6:3c:89:5b:54:3e:4c:49:db:48:e8:1b:52:
         c2:dd:d5:26:f9:3b:d9:66:5a:62:bb:49:3f:f5:53:5b:ed:bd:
         a4:2f:a4:a4:99:1c:4f:fd:3b:be:86:2e:f7:5b:87:e7:c7:12:
         fe:15:c2:dc:ac:15:ee:7c:8d:12:51:70:67:96:85:e0:47:4a:
         44:f4:aa:d2:56:86:c9:61:c5:f7:88:7d:af:20:07:e2:ae:42:
         f2:ed:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org