Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
File:                     323830303a3561303a3a2f33322d3335203d3e203237373932.roa (raw, json)
Hash identifier:          x7qYj86/KT0tdizbfboZQM66v3azdCXH8PTN1AF0At8=
Subject key identifier:   1D:28:AA:5D:4A:73:F8:11:98:0F:86:E6:50:1E:BF:D2:8D:2E:EC:08
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       02C890F30F38E44B1A505B9DAD0C5C196EFE59A8
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
Signing time:             Tue 05 Mar 2024 17:56:44 +0000
ROA not before:           Tue 05 Mar 2024 17:51:44 +0000
ROA not after:            Tue 04 Mar 2025 17:56:44 +0000
asID:                     27792
IP address blocks:        2800:5a0::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c8:90:f3:0f:38:e4:4b:1a:50:5b:9d:ad:0c:5c:19:6e:fe:59:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Mar  5 17:51:44 2024 GMT
            Not After : Mar  4 17:56:44 2025 GMT
        Subject: CN=1D28AA5D4A73F811980F86E6501EBFD28D2EEC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:3c:dc:7b:14:1a:dd:7c:78:63:2f:c3:8e:
                    0c:d7:f3:f8:48:c7:83:0b:73:d9:b4:a9:36:c3:af:
                    31:25:8a:d4:32:39:59:7b:dc:57:90:ac:e3:6e:e7:
                    a4:61:55:01:d6:58:d1:cb:31:c0:0c:f0:96:32:2f:
                    bd:8f:6b:3b:54:80:cc:a6:9d:d1:84:81:3b:6b:21:
                    3f:d0:d1:3e:b3:ad:8f:21:c7:d4:4f:60:72:5b:0a:
                    9b:de:b9:4c:38:ec:d9:ae:ab:c7:78:41:3f:ff:cd:
                    58:a6:88:65:f2:02:2c:df:c4:ae:f5:42:98:5a:33:
                    8e:bf:b6:c1:de:76:ab:94:16:5a:97:cc:a0:eb:ef:
                    6a:19:16:b3:e8:fa:c7:9d:55:8f:41:fd:1b:84:77:
                    9e:f0:ed:0a:5c:bb:e7:6a:32:f7:81:a0:ad:87:29:
                    f0:cb:fe:9d:d6:a7:55:de:9e:bd:af:1c:d3:d6:12:
                    e1:d4:5e:a5:c4:f7:79:93:98:f3:1e:d6:5b:78:cd:
                    0a:47:9a:c5:ca:bd:c7:0b:2a:ac:f2:7f:25:b8:ed:
                    ee:6d:3a:ac:25:1c:5e:c2:9f:e7:44:eb:21:d5:e6:
                    2d:d4:86:a8:5a:90:88:99:e7:f3:58:a0:85:79:97:
                    6a:83:94:b1:3c:3a:00:99:0f:05:3c:a5:fd:1e:b3:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:28:AA:5D:4A:73:F8:11:98:0F:86:E6:50:1E:BF:D2:8D:2E:EC:08
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:02:aa:4d:07:f8:a7:09:98:ee:c7:fa:46:04:01:80:90:cb:
         ec:f8:9f:8b:3c:83:07:4e:6a:9e:13:41:7c:f0:0c:3b:97:43:
         ab:7d:15:74:02:71:e7:ae:24:e7:92:d2:aa:9f:33:6c:a5:a0:
         10:49:c5:00:0c:e3:70:fa:70:b7:cc:54:9d:af:c3:87:d0:1a:
         80:b3:2a:75:f1:99:a8:97:50:b9:fa:b3:69:d5:75:40:08:57:
         7d:ba:5a:f4:7c:2a:70:fa:49:a1:2f:f3:a5:12:27:a5:f9:8a:
         f9:8d:e7:a1:5a:53:d2:5f:39:07:53:94:60:69:b5:df:22:a7:
         ec:90:db:f4:90:9b:be:3b:65:6f:5b:0c:dd:45:4e:5e:8e:69:
         97:e6:9c:d4:5b:e9:e2:28:5e:9f:ac:44:82:95:16:79:c0:2b:
         4c:c4:0e:50:f5:b5:e9:99:96:6f:a0:4e:b6:7c:8c:35:8a:f0:
         7d:89:65:59:5d:9f:0b:c7:fd:d6:24:0d:db:da:c3:68:00:3d:
         0d:a7:7f:62:d7:3f:97:95:69:c9:9c:1b:69:fa:f1:44:8c:90:
         d9:75:15:7d:e2:9e:d0:19:3d:57:65:c1:40:cf:12:ca:50:e9:
         37:14:cc:e3:7a:d5:2a:6c:48:67:99:00:23:ae:f4:6c:59:f6:
         b5:db:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:33 2024 by rpki-client on console-fra.rpki-client.org