Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          7DDnas+F776CXGxahjvQVjMBhiVSZx2TyWeZISUfCvI=
Subject key identifier:   33:77:41:C4:D1:93:4B:22:F5:4C:73:E5:65:D2:B7:33:8E:60:18:5D
Certificate issuer:       /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
Certificate serial:       62445E877B1920D632E05665B77D8BFA69161B0B
Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:44:58 +0000
ROA not before:           Tue 05 Mar 2024 17:39:58 +0000
ROA not after:            Tue 04 Mar 2025 17:44:58 +0000
asID:                     19429
IP address blocks:        2801:11:8800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:44:5e:87:7b:19:20:d6:32:e0:56:65:b7:7d:8b:fa:69:16:1b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
        Validity
            Not Before: Mar  5 17:39:58 2024 GMT
            Not After : Mar  4 17:44:58 2025 GMT
        Subject: CN=337741C4D1934B22F54C73E565D2B7338E60185D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:f2:73:11:c6:0f:fd:c7:19:9e:3c:8c:cf:
                    7c:7c:e5:4c:cf:7c:3b:a1:21:a0:a6:34:88:09:91:
                    8d:e4:21:4e:c8:a2:39:c5:63:89:d5:ed:00:3f:57:
                    d6:3b:2e:92:e8:89:e5:5d:b4:e1:48:2b:bc:3d:95:
                    f5:66:18:8f:71:0f:00:7a:d2:79:17:cf:c9:fc:b5:
                    bb:53:77:4a:be:90:03:15:91:81:a7:8d:5c:bf:33:
                    e6:bd:0d:c8:19:da:dd:2e:85:25:35:e6:23:56:fc:
                    41:ba:3f:70:df:46:10:fb:b8:11:5a:00:9e:43:18:
                    84:2d:21:29:dd:5e:4a:df:1b:14:76:60:79:0d:bc:
                    3a:79:12:1e:1f:a3:ef:21:0c:0c:8e:2a:0c:c3:62:
                    1a:6d:ec:87:c2:65:75:a0:bb:13:3d:04:11:ea:b9:
                    00:47:bb:9a:d6:38:12:38:af:a3:76:7b:78:49:b2:
                    81:18:19:b9:b4:fc:f3:24:30:90:ba:78:a7:9a:5c:
                    b2:e9:50:44:32:c3:39:92:93:d6:65:70:79:fe:e0:
                    3c:ef:f4:65:a0:7d:34:6e:80:f6:bf:c0:a3:0f:e6:
                    50:19:b7:03:d5:50:dd:2d:d9:90:fb:34:69:d2:0e:
                    11:2a:6f:f2:e7:70:7f:74:9a:a6:79:14:87:fb:5c:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:41:C4:D1:93:4B:22:F5:4C:73:E5:65:D2:B7:33:8E:60:18:5D
            X509v3 Authority Key Identifier:
                keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:96:05:a2:98:cd:ef:47:a8:59:0f:9d:ec:fd:fe:d2:24:
         6b:fa:2f:34:d6:42:51:80:29:0f:21:e0:49:49:ac:48:9c:40:
         d6:e8:58:65:b1:53:cf:97:ef:7e:6f:e1:18:5c:f7:57:96:67:
         fc:25:c0:5e:f2:f9:ca:a4:92:c4:a6:7a:7e:71:61:01:c2:43:
         d1:ce:b0:a1:d4:9d:38:78:79:af:45:bf:3e:d6:02:8b:2d:a9:
         34:62:63:8f:95:86:3c:e7:04:97:be:42:dc:0d:7e:50:db:d0:
         91:de:b0:46:54:a8:40:a5:c7:81:89:52:7b:21:31:8e:3b:cc:
         3f:3a:11:c0:2d:1f:39:15:1b:b8:8f:bf:eb:29:c8:1f:6e:28:
         5f:d8:ef:c8:52:2a:06:fc:10:40:1d:8c:8f:39:71:16:ab:73:
         5f:a4:e5:89:56:71:c9:25:31:e6:cb:fc:99:3c:29:5f:66:12:
         89:a9:6e:c0:fd:0f:cf:b1:2a:04:4f:01:5b:01:d1:9f:36:dc:
         af:98:21:47:30:db:61:a4:56:42:97:85:35:65:37:8e:a4:32:
         38:cd:2f:f2:49:ff:97:fa:43:75:52:e7:d8:3d:4b:90:ab:39:
         dc:cb:d6:de:13:13:10:e0:a8:11:72:9c:88:ff:60:9b:1e:74:
         19:c0:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org