Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31343a363830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          m3T5+OAykTAiY/DDAt24E1az7gft/RjWtvd+CCmEs9E=
Subject key identifier:   83:4A:A8:D6:DA:0D:46:BE:AF:C5:B1:7C:6A:A8:37:E5:69:85:B7:08
Certificate issuer:       /CN=C8A753C34C3D19437CC9662E899183E9CB05BDE5
Certificate serial:       4F249ECBEBC41C0C9368C5322132B67E3F672196
Authority key identifier: C8:A7:53:C3:4C:3D:19:43:7C:C9:66:2E:89:91:83:E9:CB:05:BD:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Thu 06 Jun 2024 16:50:00 +0000
ROA not before:           Thu 06 Jun 2024 16:45:00 +0000
ROA not after:            Thu 05 Jun 2025 16:50:00 +0000
asID:                     19429
IP address blocks:        2801:14:6800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:24:9e:cb:eb:c4:1c:0c:93:68:c5:32:21:32:b6:7e:3f:67:21:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8A753C34C3D19437CC9662E899183E9CB05BDE5
        Validity
            Not Before: Jun  6 16:45:00 2024 GMT
            Not After : Jun  5 16:50:00 2025 GMT
        Subject: CN=834AA8D6DA0D46BEAFC5B17C6AA837E56985B708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6d:57:e1:e4:17:b7:57:2d:74:af:f4:a5:ed:
                    da:60:5b:d0:e4:88:a5:8d:a3:69:8a:bc:7a:e3:12:
                    05:db:93:36:53:07:c4:e7:b3:5b:49:02:d5:1c:4a:
                    c5:5c:83:44:95:f8:9c:bc:fd:a9:b4:3e:60:b8:29:
                    1a:29:01:df:3b:5a:5f:5a:6a:3b:6a:de:6d:f3:48:
                    1f:d6:15:36:df:87:bf:11:52:b4:e3:3b:0f:d1:5b:
                    7c:77:40:ff:6e:58:55:e3:27:cd:bf:b7:df:c4:58:
                    27:5c:75:57:6a:ea:33:58:36:4a:2e:c5:58:b9:7d:
                    42:f3:e7:1d:63:6d:b3:e0:05:63:9a:48:ab:a1:18:
                    e1:92:9f:56:2e:98:b6:04:27:04:f1:b8:c9:92:d1:
                    b9:11:5a:38:3a:93:04:5c:58:c1:9e:04:9d:94:2f:
                    7f:25:21:aa:a9:2b:78:e6:65:b1:8e:0b:1a:5a:14:
                    12:28:bc:7f:c6:5a:3e:ce:87:f1:30:c0:7d:48:e2:
                    5a:c9:cc:00:69:9f:45:ff:c2:73:0f:dd:9c:3f:41:
                    d0:12:2b:21:32:fa:1a:97:4d:4d:28:be:65:0f:d3:
                    55:72:4e:0f:eb:45:6e:06:9b:35:15:c5:64:b6:9e:
                    1b:be:38:e9:0d:b3:b5:da:dd:2b:30:50:19:a2:52:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4A:A8:D6:DA:0D:46:BE:AF:C5:B1:7C:6A:A8:37:E5:69:85:B7:08
            X509v3 Authority Key Identifier:
                keyid:C8:A7:53:C3:4C:3D:19:43:7C:C9:66:2E:89:91:83:E9:CB:05:BD:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:9b:e4:bb:27:6b:53:78:09:f3:5a:15:f2:47:dc:23:3e:
         29:38:46:e8:b9:11:ee:cf:b4:79:16:40:17:9d:b4:bc:8b:22:
         4e:7e:1a:31:3e:cc:bf:e6:66:1b:ac:4b:5d:42:01:7e:f2:96:
         0e:e6:bc:97:98:b5:19:48:ed:70:2d:7c:ab:45:d2:81:44:d0:
         97:cd:8d:79:fc:22:06:64:39:69:9a:c3:af:5b:46:14:c8:20:
         69:bb:0e:22:e2:a4:3f:db:d4:9a:cf:a1:b2:71:8c:68:84:75:
         60:c4:85:85:b9:a7:57:f0:2d:ae:07:45:05:5d:fe:ab:13:74:
         02:90:6a:9c:a5:45:c0:0d:2c:3a:07:37:7f:a1:9d:c3:e4:54:
         13:bc:cf:23:ae:ab:b3:69:9d:ce:94:01:02:76:90:68:1e:00:
         12:74:19:44:ee:a9:e4:eb:c2:18:65:05:51:6b:fa:c9:fd:c7:
         3a:cf:72:39:93:69:96:58:a5:e3:a5:ba:10:a4:24:e2:17:00:
         02:19:af:e7:03:d0:5d:0e:8e:42:2b:40:f6:cf:cb:08:47:51:
         5d:d4:d5:93:52:47:12:5f:ec:63:41:18:97:51:cd:20:3b:11:
         11:44:0e:37:f4:31:6a:ca:3f:fe:28:8f:29:48:79:54:1e:16:
         b8:6a:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:29:24 2024 by rpki-client on console-ams.rpki-client.org