Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e2033313332.roa
File:                     323830313a31663a363830303a3a2f34382d3438203d3e2033313332.roa (raw, json)
Hash identifier:          S5sm2xxkCysvQHRntnpDr2NOmFLrRqtjF6ZSBgdlT6w=
Subject key identifier:   85:FB:86:F8:23:08:01:53:EB:40:F5:A3:30:AB:B1:B9:B8:1E:19:53
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       478837786B83316E718FD3A3D90032EA510472C8
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e2033313332.roa
Signing time:             Tue 05 Mar 2024 18:12:02 +0000
ROA not before:           Tue 05 Mar 2024 18:07:02 +0000
ROA not after:            Tue 04 Mar 2025 18:12:02 +0000
asID:                     3132
IP address blocks:        2801:1f:6800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:88:37:78:6b:83:31:6e:71:8f:d3:a3:d9:00:32:ea:51:04:72:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Mar  5 18:07:02 2024 GMT
            Not After : Mar  4 18:12:02 2025 GMT
        Subject: CN=85FB86F823080153EB40F5A330ABB1B9B81E1953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:0c:80:64:9d:4f:53:9b:56:56:aa:5b:e5:
                    be:97:11:45:84:94:c7:96:f9:7e:cc:47:d9:10:33:
                    6c:39:32:19:2a:f8:a4:6b:d9:dd:06:1c:92:89:f8:
                    23:8b:64:3d:74:b2:b9:22:72:f9:0e:d1:64:3d:aa:
                    66:2c:f1:f6:00:85:87:30:63:79:24:d5:4c:a0:ef:
                    58:d7:43:2f:c5:11:23:91:14:49:75:04:ba:db:a5:
                    55:83:2b:c5:43:5c:d6:a7:74:03:7b:08:5c:b7:a3:
                    14:25:38:5a:89:99:f4:46:cc:00:e4:c3:e7:61:eb:
                    16:3c:a8:1f:b1:fb:0f:e5:4b:b9:e6:fa:b2:fa:94:
                    14:f8:3f:db:22:94:bb:e4:46:dd:a9:59:67:38:33:
                    cf:e4:21:9f:2c:a3:3f:a1:74:40:ff:54:60:03:8d:
                    ab:a7:91:56:74:2c:5b:30:95:0b:98:72:77:59:22:
                    71:f6:48:01:0b:98:c5:e8:ce:5d:ad:5f:98:46:79:
                    81:3b:5a:5d:58:43:31:5d:40:f6:07:50:bb:f8:7c:
                    1b:c6:b5:41:36:06:44:ab:e1:ea:4e:e8:52:35:5c:
                    f4:72:23:ec:18:fe:e4:5f:24:29:5b:5a:a4:e2:ea:
                    3b:3f:c8:68:da:60:1d:4c:ac:77:81:95:bb:a0:64:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FB:86:F8:23:08:01:53:EB:40:F5:A3:30:AB:B1:B9:B8:1E:19:53
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/323830313a31663a363830303a3a2f34382d3438203d3e2033313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:a4:dc:eb:99:44:30:7f:08:6d:f5:30:c2:ee:96:b9:63:
         e8:8b:61:82:0b:c9:82:3f:eb:19:12:40:e7:c1:b1:8b:b9:6b:
         82:2c:b8:b0:3f:4b:08:41:f0:dc:e5:99:9e:92:5d:69:ce:e7:
         60:58:e9:d6:28:c5:93:f6:dc:4b:11:69:d8:fd:1d:5d:cb:d9:
         88:7a:1e:11:26:76:c0:63:5a:ab:8d:b1:be:3b:f8:68:d7:c8:
         b9:95:e5:50:00:22:7a:fd:20:a4:91:e3:57:f5:a6:cc:da:81:
         f2:02:5c:a2:ed:d1:67:39:97:2f:fb:af:f9:c4:d6:f9:e3:35:
         3d:42:29:33:1f:41:03:23:5e:f1:0c:7f:63:77:5d:8c:14:d2:
         a5:82:e6:87:a4:c0:8d:d0:c4:d8:86:5b:fa:a5:2e:e8:b2:c4:
         75:91:bb:d9:b2:5d:95:37:6a:d3:6d:2a:48:98:6b:21:56:f0:
         bd:ab:61:84:ab:3c:c9:5f:c5:45:bf:df:5f:a9:9c:48:a6:80:
         bb:f5:a9:ea:74:c3:35:40:58:5e:3f:dd:55:69:62:75:17:8c:
         f1:fe:a4:a0:9d:98:da:5a:15:ed:a9:fd:eb:56:53:8e:20:a0:
         a2:de:da:02:25:73:2b:71:7f:22:fb:e9:9b:91:6f:9b:8b:ff:
         c7:c1:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org