Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036643a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036643a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          xlEYFjXq2Oy/aZxKu2B6Tsa4GLxWa++0PagEywnNAGA=
Subject key identifier:   D0:0A:4A:21:EC:2E:C0:90:BE:F5:8C:9B:D1:18:2B:4A:F8:9E:11:47
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       30A4A8C750AC9F9E77E4E407536A9CA4742812AE
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036643a3a2f34382d3438203d3e2033353733.roa
Signing time:             Mon 29 Apr 2024 07:10:00 +0000
ROA not before:           Mon 29 Apr 2024 07:05:00 +0000
ROA not after:            Mon 28 Apr 2025 07:10:00 +0000
asID:                     3573
IP address blocks:        2801:1f0:406d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a4:a8:c7:50:ac:9f:9e:77:e4:e4:07:53:6a:9c:a4:74:28:12:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Apr 29 07:05:00 2024 GMT
            Not After : Apr 28 07:10:00 2025 GMT
        Subject: CN=D00A4A21EC2EC090BEF58C9BD1182B4AF89E1147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:52:95:16:ed:84:1b:9d:33:77:d2:2f:04:
                    52:c8:58:3b:ee:6c:b0:21:43:ae:9e:6c:14:53:9f:
                    39:c7:cf:f4:e6:49:f2:55:9f:cd:c6:05:f7:b7:86:
                    13:f4:4a:7e:89:7c:cb:8e:81:f2:f4:83:96:cb:3d:
                    c7:c3:aa:91:cd:d9:ca:7b:85:79:fc:db:d7:a5:c6:
                    00:ab:3d:2d:46:0f:10:8a:67:53:26:05:d7:93:fc:
                    c9:57:cf:41:e0:f2:28:42:04:3f:37:30:51:48:91:
                    f1:1d:97:f8:91:53:e9:9a:12:81:33:73:6f:bd:69:
                    a1:86:33:5d:63:7d:d3:ee:19:36:33:ee:8f:76:c2:
                    8d:d8:e9:1e:d9:5b:27:53:c8:1f:0f:54:a0:5b:29:
                    c2:07:71:76:50:96:37:73:d4:46:18:f3:ea:ab:01:
                    cf:15:58:a8:66:46:bb:ee:c2:8b:4e:00:3b:c6:c3:
                    a6:b1:19:2b:25:24:ed:6e:84:dc:9a:d4:0d:2a:af:
                    6f:ff:c5:c6:70:b8:8b:86:63:ea:bc:36:9d:f2:34:
                    3f:02:bb:cb:ed:3c:c3:ea:6b:fe:18:a5:ad:c6:84:
                    32:6f:72:6d:93:26:be:6a:c0:45:7c:89:ff:58:2c:
                    34:6a:80:2a:35:38:37:e1:03:aa:5a:fb:20:6a:78:
                    57:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0A:4A:21:EC:2E:C0:90:BE:F5:8C:9B:D1:18:2B:4A:F8:9E:11:47
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036643a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406d::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:8c:2a:d5:a6:c7:da:9e:67:88:5b:dc:0d:05:35:1a:84:52:
         76:07:e4:d5:12:f5:96:5d:50:59:e7:84:ed:d7:97:1b:ef:44:
         9f:cd:ca:53:e7:e9:ec:7d:80:2a:5a:02:fb:1c:38:1e:b6:1c:
         4b:e2:80:88:86:c9:21:5e:40:68:7f:07:7f:0e:d8:09:d5:b5:
         a9:b9:d9:a9:3f:ca:d8:61:86:0b:63:96:e6:40:87:ca:34:64:
         9a:aa:bc:65:3d:b2:c3:c2:81:9d:b2:d4:d2:13:56:ae:f8:46:
         a4:2c:5e:96:fa:35:62:57:73:08:a9:81:2d:dd:65:70:54:1f:
         b4:f9:6a:42:c1:b7:73:39:39:cc:89:a8:88:e0:89:48:56:88:
         71:0b:08:5e:3d:96:6a:f2:66:bc:b0:f2:01:f4:06:4f:0f:b2:
         0e:7d:8d:f9:a6:02:99:4d:2b:55:ff:91:83:76:71:66:55:d8:
         94:ba:f6:5f:d4:ac:6b:b3:b7:2d:0c:eb:ca:0c:6e:34:49:a4:
         09:b4:74:f2:c4:50:89:5e:0a:a4:77:e3:d7:e6:13:8a:f9:24:
         79:f4:0e:3f:20:bc:ca:54:a8:a1:75:4c:db:15:8d:05:b2:2c:
         86:b1:77:88:6b:fb:4a:bc:95:2f:81:cf:6e:59:40:47:63:1d:
         ce:fb:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:00:13 2024 by rpki-client on console-fra.rpki-client.org