Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e20323634373838.roa
File:                     323830303a3261303a3a2f33322d3438203d3e20323634373838.roa (raw, json)
Hash identifier:          FqkSCAYanSX82SC7i9c6ZrmBI/ZuGGPIkPD/q6kHPq4=
Subject key identifier:   58:32:1A:9F:77:5D:9C:9E:40:F2:06:6D:88:9A:4F:92:94:32:52:77
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       68B2492303573D30604BF96D3F7A5DA3D5B70E46
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e20323634373838.roa
Signing time:             Tue 05 Mar 2024 18:10:33 +0000
ROA not before:           Tue 05 Mar 2024 18:05:33 +0000
ROA not after:            Tue 04 Mar 2025 18:10:33 +0000
asID:                     264788
IP address blocks:        2800:2a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 16:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b2:49:23:03:57:3d:30:60:4b:f9:6d:3f:7a:5d:a3:d5:b7:0e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:33 2024 GMT
            Not After : Mar  4 18:10:33 2025 GMT
        Subject: CN=58321A9F775D9C9E40F2066D889A4F9294325277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:dc:ac:78:4a:f1:73:53:4f:2d:35:ff:5d:
                    40:ee:09:6b:cc:7f:28:04:ac:8e:06:f7:09:e4:96:
                    18:c1:90:94:80:7d:18:cb:40:28:2f:b6:2a:33:76:
                    9a:db:ee:12:85:b8:77:95:81:25:85:cb:b3:61:8b:
                    7d:36:7c:ba:18:37:e4:16:bd:0d:ee:43:ce:28:1d:
                    7a:09:e6:5c:30:6b:86:b5:58:7d:6c:21:ea:3f:74:
                    1e:3e:b5:e5:42:69:ab:35:45:08:7e:ea:7a:99:57:
                    6a:01:f5:d9:39:d4:26:bd:84:cc:bf:94:95:80:24:
                    48:0b:3c:61:82:1a:dc:e4:9c:48:f1:7f:aa:e6:f1:
                    6f:4c:1a:72:83:8d:6c:bb:f2:07:a0:af:a0:3a:80:
                    87:37:d6:cf:95:00:ae:34:0d:8b:28:e0:2a:71:4b:
                    5f:00:ef:6c:e3:7c:96:54:94:7e:d8:84:31:bf:e0:
                    97:60:80:24:1d:9c:35:83:b1:69:4b:84:22:1f:95:
                    f9:29:03:52:b7:46:c7:24:11:09:c0:6f:96:53:3d:
                    49:20:03:b2:14:83:b5:9f:79:c3:e8:6a:09:5f:e4:
                    ad:35:7d:91:8b:4d:fa:d7:97:b5:cb:fd:07:15:e3:
                    85:e2:e2:62:ba:84:3f:c2:3b:5d:e4:b7:16:15:17:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:1A:9F:77:5D:9C:9E:40:F2:06:6D:88:9A:4F:92:94:32:52:77
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e20323634373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:44:26:4e:a7:15:2c:46:b5:48:b6:95:9f:8f:67:0d:ae:
         43:58:01:3f:1f:01:a4:2b:27:1a:8c:e3:fb:ef:3f:25:97:4c:
         ad:fb:cf:9b:35:1a:3a:73:04:61:6a:99:7f:88:d4:ca:42:9e:
         2e:20:34:7c:a4:09:84:35:0c:48:fe:d6:71:65:e1:29:a3:b8:
         23:7f:d7:1f:42:43:41:85:91:58:cf:65:42:c5:32:0e:88:1b:
         f1:19:45:c0:8d:5d:36:12:7c:92:44:96:b3:11:a7:c0:20:e5:
         a4:40:23:cd:0a:9a:d2:36:d9:b9:92:56:4d:09:72:39:50:e0:
         f9:72:2a:c5:6e:16:14:3a:08:e1:9d:56:f6:7b:c2:65:9c:0e:
         20:e7:61:93:cd:f7:5a:0c:c8:6d:0a:79:6a:81:e0:60:90:e8:
         7b:bf:48:b6:ea:a7:f8:2f:c3:d4:7c:89:1b:0c:00:26:52:7d:
         9b:5d:ac:a3:c1:31:16:fe:57:33:fb:9b:07:44:1a:3a:62:7e:
         c3:79:75:82:33:53:f2:c5:02:6d:05:23:2f:f6:0e:b1:41:99:
         d8:e6:f5:67:50:dd:5e:1a:7c:8f:fa:e0:bd:4b:ac:60:c0:c7:
         a4:09:df:45:9e:ba:1b:6d:45:68:dd:3b:fb:a1:6f:b1:64:e9:
         08:db:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:19 2024 by rpki-client on console-fra.rpki-client.org