Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3434203d3e203134303830.roa
File:                     323830313a3137633a3a2f34342d3434203d3e203134303830.roa (raw, json)
Hash identifier:          IMxmwHDYBRbrBp58E4N4IdD4zPyy3VWuyHgoOzEeEBQ=
Subject key identifier:   CB:1A:63:53:2D:BF:CC:08:7C:02:CB:06:30:5E:51:DA:60:E3:CB:C9
Certificate issuer:       /CN=81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB
Certificate serial:       0665584CD44FA1D0DEFDE7C851E4A5310470E711
Authority key identifier: 81:26:4D:0C:F8:45:C6:5F:EB:8A:7B:CD:B3:CE:DC:BA:64:65:2E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3434203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 17:48:27 +0000
ROA not before:           Tue 05 Mar 2024 17:43:27 +0000
ROA not after:            Tue 04 Mar 2025 17:48:27 +0000
asID:                     14080
IP address blocks:        2801:17c::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 02:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:65:58:4c:d4:4f:a1:d0:de:fd:e7:c8:51:e4:a5:31:04:70:e7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB
        Validity
            Not Before: Mar  5 17:43:27 2024 GMT
            Not After : Mar  4 17:48:27 2025 GMT
        Subject: CN=CB1A63532DBFCC087C02CB06305E51DA60E3CBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:fe:66:b1:4c:ed:c6:0e:ef:41:3f:70:b2:
                    53:49:b5:87:ef:22:47:f4:d4:9e:49:8e:e5:14:5d:
                    77:4b:0f:b5:12:96:47:dc:ab:72:89:b7:9a:d5:33:
                    9e:8b:e0:e5:69:c8:54:a0:5d:72:32:b8:72:c2:22:
                    bc:ae:f0:ae:f7:72:f4:fc:db:9d:28:c7:72:c0:53:
                    a8:e2:e8:c8:eb:41:89:c7:1c:87:87:41:8c:3f:ca:
                    1f:1f:14:e5:50:1a:b3:ab:33:be:cd:8d:de:c6:b6:
                    5f:6d:15:07:0c:f2:9c:b0:5b:1b:fe:85:34:ca:37:
                    c0:71:9c:e3:3e:66:1f:c7:57:1c:14:58:03:c7:c1:
                    99:78:7a:98:db:f8:f5:ea:bd:b6:cc:07:5e:07:7d:
                    5b:09:c8:2a:4e:6b:cc:5e:a2:17:6d:12:f7:cb:19:
                    8d:cb:b1:38:21:79:83:ab:e0:fe:9d:40:51:e3:6f:
                    fd:1d:77:3d:93:4d:5e:46:24:42:cb:9c:75:b2:b2:
                    3a:d6:0f:50:e4:f4:9c:8b:14:30:fb:a6:5c:35:62:
                    6d:08:42:24:8e:b9:f6:58:a6:75:ea:97:08:0b:6c:
                    c8:cd:cf:8c:e9:bd:1c:b5:e1:28:00:26:45:44:29:
                    f8:f0:1f:82:16:3d:34:4a:18:54:09:c8:79:4c:ed:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1A:63:53:2D:BF:CC:08:7C:02:CB:06:30:5E:51:DA:60:E3:CB:C9
            X509v3 Authority Key Identifier:
                keyid:81:26:4D:0C:F8:45:C6:5F:EB:8A:7B:CD:B3:CE:DC:BA:64:65:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81264D0CF845C65FEB8A7BCDB3CEDCBA64652ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DC0F12CD7F8A1E0B19B363F9025B50C68490FD499080BDD2DC2C42AD7B743A7/0/323830313a3137633a3a2f34342d3434203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17c::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:4c:c4:36:c2:2e:d5:28:db:95:9b:12:83:ea:84:ad:63:bf:
         cf:6e:17:a6:ff:f3:bf:63:79:31:ad:9c:67:30:6a:02:ab:51:
         e1:7d:df:da:a8:39:0b:15:02:e5:5b:a9:4a:70:0d:10:b3:f8:
         1a:ca:f1:fe:44:f3:b6:c9:60:3e:69:de:f7:4f:7f:4b:fc:8b:
         dd:3f:fb:e8:95:3c:0a:d5:01:eb:5e:d0:7b:b1:7b:0c:e5:66:
         83:fb:4a:51:e1:a7:11:10:1d:92:2c:f1:31:e1:14:71:eb:4a:
         29:2a:a9:c0:dd:bc:7d:84:1b:43:a6:54:70:2b:85:77:9d:21:
         88:d7:34:a8:53:5f:69:fe:9a:62:36:19:ba:48:84:f0:de:0d:
         3b:bd:2d:74:4b:5f:90:64:c0:fb:dd:6d:13:ef:5e:84:3b:0e:
         51:1e:d2:24:66:16:f0:7a:ce:aa:a7:e1:a0:9b:e8:f0:6d:37:
         90:29:15:f5:02:0e:5b:57:35:41:eb:6b:02:1c:eb:f3:2e:93:
         b2:21:c1:c8:5a:ec:8d:c8:72:d5:89:0f:b5:fa:a2:99:44:fc:
         b0:17:cd:3b:eb:26:45:35:0e:47:55:09:db:ee:93:76:c1:82:
         51:f6:82:5b:01:9b:df:69:4c:2f:e6:aa:03:8f:d8:9a:32:b5:
         36:69:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:35:26 2024 by rpki-client on console-ams.rpki-client.org