Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/323830313a31323a393830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31323a393830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          2FJm6+xCC3SVsYDhEo8Q7xDQFJ3VoERnzd8mFhgAF/0=
Subject key identifier:   F3:9B:A2:B8:B6:06:1E:EE:24:93:E8:CC:8A:2E:BE:AA:5D:E5:E5:00
Certificate issuer:       /CN=9AD9774FD60FD938A234B990EB8F69705567FCEB
Certificate serial:       5DD5C3CBCF1D4918D2AD3656B98C5F9FB99B2F17
Authority key identifier: 9A:D9:77:4F:D6:0F:D9:38:A2:34:B9:90:EB:8F:69:70:55:67:FC:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/323830313a31323a393830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:23:50 +0000
ROA not before:           Tue 05 Mar 2024 18:18:50 +0000
ROA not after:            Tue 04 Mar 2025 18:23:50 +0000
asID:                     262589
IP address blocks:        2801:12:9800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d5:c3:cb:cf:1d:49:18:d2:ad:36:56:b9:8c:5f:9f:b9:9b:2f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD9774FD60FD938A234B990EB8F69705567FCEB
        Validity
            Not Before: Mar  5 18:18:50 2024 GMT
            Not After : Mar  4 18:23:50 2025 GMT
        Subject: CN=F39BA2B8B6061EEE2493E8CC8A2EBEAA5DE5E500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:fd:44:c6:21:00:46:e2:02:72:23:d6:64:
                    93:2d:66:ad:6a:99:04:f4:4f:df:23:1e:72:91:11:
                    32:c7:db:f9:d2:6d:c9:4e:be:4d:33:a4:24:94:0f:
                    17:61:82:c2:55:9c:35:48:ad:1f:e0:53:66:8a:6b:
                    d9:dc:18:17:0d:31:d7:c5:18:b5:11:97:4e:2e:7d:
                    08:d7:98:d5:e6:bf:73:23:d9:ea:24:93:e7:10:91:
                    b6:89:8f:6c:ed:06:65:a5:77:49:aa:00:f5:f0:95:
                    10:9e:d0:31:c7:e6:72:27:b2:25:66:c6:bc:ee:b2:
                    48:cf:5d:6b:d1:6c:f9:76:92:e1:a4:38:f9:32:df:
                    b5:f5:80:d5:5b:49:5f:0d:c1:06:5a:5a:6f:af:ea:
                    0c:ba:7e:4e:70:d2:5c:ab:db:cf:94:26:87:8d:e8:
                    9f:76:3e:f1:de:59:05:f3:83:8b:5a:24:f7:59:10:
                    62:21:85:6c:62:ed:cc:d4:c4:28:19:99:66:36:b6:
                    0c:6d:4b:1b:1e:4f:ee:75:69:c8:04:f7:5a:6c:22:
                    db:d0:c7:df:e5:5e:3c:42:19:50:4b:df:11:c6:99:
                    10:99:28:4f:92:6a:0b:ad:6b:c0:0d:a2:83:53:3c:
                    e8:71:fe:1e:d7:ee:a9:5f:e3:fb:6a:1c:97:28:c6:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9B:A2:B8:B6:06:1E:EE:24:93:E8:CC:8A:2E:BE:AA:5D:E5:E5:00
            X509v3 Authority Key Identifier:
                keyid:9A:D9:77:4F:D6:0F:D9:38:A2:34:B9:90:EB:8F:69:70:55:67:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AD9774FD60FD938A234B990EB8F69705567FCEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74661B9402645030C6DDE7C75D839563B649EFC73E30A136A8D47B026E67E926/0/323830313a31323a393830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:54:72:20:8a:12:b7:2c:12:2c:34:a3:27:d0:48:1d:be:
         21:e7:3a:d4:78:d8:fe:c2:f1:d7:08:e4:f6:36:bd:31:32:ed:
         e5:82:1c:07:38:86:5f:71:4f:31:b8:03:3f:20:9a:81:4f:09:
         a2:86:1a:8d:ba:b3:fc:2c:c8:04:13:c8:9d:6c:f5:89:ec:6c:
         c9:53:3a:14:8e:0b:1c:f3:0b:29:b0:5b:c5:98:90:1c:8d:f9:
         53:a9:12:6d:d6:0a:f5:b9:cb:cd:cf:d2:f0:59:4c:78:93:72:
         c6:2e:0d:b0:2d:68:25:e8:70:12:57:ed:9f:6d:43:f1:39:30:
         0e:17:f1:58:0c:27:6f:a1:4e:3e:62:36:2b:98:ee:e5:74:50:
         a5:f7:c2:ba:b2:da:78:1e:52:12:0f:42:f7:03:73:c7:2d:46:
         1b:e4:ff:9a:db:3d:77:06:00:53:7b:53:67:91:a4:9e:05:00:
         0c:d6:01:c0:dd:cc:fa:a4:5b:0d:88:95:22:d6:27:e5:aa:97:
         ef:6d:93:af:60:46:84:1d:b7:15:e1:5f:76:f2:68:a5:6d:f1:
         f7:90:86:21:b6:54:39:7c:dc:df:8f:a2:b7:06:a2:bb:4c:63:
         33:14:6c:38:cd:c4:36:95:cb:69:66:ad:42:ea:c3:e8:47:13:
         93:f2:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:05 2024 by rpki-client on console-fra.rpki-client.org