Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/323830313a31393a3830303a3a2f34382d3438203d3e20323637383031.roa
File:                     323830313a31393a3830303a3a2f34382d3438203d3e20323637383031.roa (raw, json)
Hash identifier:          hXxys4yiFj60AoPoDScpjsECd3XbOeKtOGunPg6heq8=
Subject key identifier:   67:0C:23:42:9D:45:C4:A0:18:BD:66:16:31:6B:0F:4B:F8:DE:49:7E
Certificate issuer:       /CN=9644ECC99A7803741A541FDFD8422B9726740EA2
Certificate serial:       3ABC4BA7FBAA35F36A316B8F811C08F6FC47914A
Authority key identifier: 96:44:EC:C9:9A:78:03:74:1A:54:1F:DF:D8:42:2B:97:26:74:0E:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/323830313a31393a3830303a3a2f34382d3438203d3e20323637383031.roa
Signing time:             Tue 05 Mar 2024 18:19:25 +0000
ROA not before:           Tue 05 Mar 2024 18:14:25 +0000
ROA not after:            Tue 04 Mar 2025 18:19:25 +0000
asID:                     267801
IP address blocks:        2801:19:800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bc:4b:a7:fb:aa:35:f3:6a:31:6b:8f:81:1c:08:f6:fc:47:91:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9644ECC99A7803741A541FDFD8422B9726740EA2
        Validity
            Not Before: Mar  5 18:14:25 2024 GMT
            Not After : Mar  4 18:19:25 2025 GMT
        Subject: CN=670C23429D45C4A018BD6616316B0F4BF8DE497E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:b1:64:f1:03:c1:38:59:f9:93:ae:83:aa:
                    a7:54:54:73:8c:65:61:fc:48:59:06:29:c5:f8:d5:
                    53:c4:ab:19:f1:e1:09:51:5f:05:54:0b:77:ad:6f:
                    05:eb:64:c6:ab:97:05:9d:a4:aa:fd:40:08:ae:30:
                    6f:cb:fe:c6:48:61:f7:b7:52:f5:5a:89:a9:1b:10:
                    a2:5d:1c:e1:61:f9:12:1c:91:66:05:19:43:ef:aa:
                    f5:50:ab:69:e1:6a:41:4f:e4:ab:a0:75:71:91:64:
                    b1:2b:6b:2c:d7:51:6b:cb:0f:d5:56:4a:3c:62:5b:
                    57:78:8a:7e:f7:b5:ed:a9:5c:e9:62:11:d1:9e:74:
                    02:07:a1:be:70:d0:cb:32:27:45:ba:a3:68:5e:ea:
                    dc:76:8b:39:a5:25:8f:0a:88:d9:4d:6c:eb:1e:1c:
                    3f:8c:9f:f3:9a:5e:fb:80:42:9d:f2:22:b5:e9:44:
                    63:57:76:0b:b0:9d:d1:37:e2:3d:ee:ca:59:e6:67:
                    eb:90:99:6b:28:31:f8:be:a5:e7:23:4d:de:0a:17:
                    15:8e:9f:28:37:25:f9:06:e7:62:70:eb:a7:37:f2:
                    e1:35:bc:be:bc:bf:78:36:3d:2d:e2:ca:df:5c:4e:
                    d4:78:0d:e2:3c:0f:5d:5f:d4:f1:e9:b4:6c:a2:5d:
                    bd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:23:42:9D:45:C4:A0:18:BD:66:16:31:6B:0F:4B:F8:DE:49:7E
            X509v3 Authority Key Identifier:
                keyid:96:44:EC:C9:9A:78:03:74:1A:54:1F:DF:D8:42:2B:97:26:74:0E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/323830313a31393a3830303a3a2f34382d3438203d3e20323637383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:94:53:33:bf:71:2d:1b:8c:7b:ff:44:2c:6b:0a:82:f1:
         8e:45:4c:cc:1a:08:6d:eb:78:1a:6c:7f:3b:b4:ea:40:b9:b0:
         18:aa:cd:1a:dd:be:e5:2d:a5:88:3a:f1:1f:72:70:82:d7:54:
         83:e3:59:2e:e0:7c:5a:42:0e:0e:9c:66:13:df:4c:ee:81:e3:
         ad:d2:65:ad:4a:1b:99:cd:e4:9a:bc:0c:d0:df:55:aa:13:79:
         a4:e9:c6:48:74:04:da:9f:69:12:1e:7b:bb:e0:fd:95:d2:a6:
         a4:29:88:c2:9b:0c:fe:aa:0a:92:ce:a6:93:63:6d:b7:01:fe:
         48:60:0d:e9:41:90:75:98:11:cc:4b:58:a0:08:c6:d5:bf:b4:
         db:95:a1:90:0f:01:b6:73:c4:bd:27:57:02:51:d0:c4:d3:41:
         87:69:22:cf:8b:01:0f:72:88:18:36:d1:87:e3:91:8b:e0:88:
         09:62:cf:1c:17:db:3b:37:a3:55:61:eb:8f:3e:b8:14:97:e1:
         7a:52:a0:28:b5:f0:db:e6:28:b7:17:4a:b8:76:6c:48:28:5c:
         16:33:f6:8c:53:d6:01:06:ff:dc:b9:83:4a:26:35:50:84:7a:
         d0:1d:58:63:49:5f:c0:ae:25:78:ab:10:8b:a8:2c:c4:44:e6:
         1e:1f:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org