Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237393531.roa
File:                     323830313a3162633a3a2f34342d3434203d3e203237393531.roa (raw, json)
Hash identifier:          tq4rQbjKRp0IkeaFMhB8fYGzeXeEjCs65WlZ9c4ukOs=
Subject key identifier:   42:C0:39:54:81:61:5F:74:AB:1A:F9:35:B4:BD:E4:D5:65:AF:11:A1
Certificate issuer:       /CN=3E359261CE8701012A5C81FF73726D0ED63ED7F7
Certificate serial:       54A971CAEEB4FAE5D442F7290A67760CA06F8635
Authority key identifier: 3E:35:92:61:CE:87:01:01:2A:5C:81:FF:73:72:6D:0E:D6:3E:D7:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:05:59 +0000
ROA not before:           Tue 05 Mar 2024 18:00:59 +0000
ROA not after:            Tue 04 Mar 2025 18:05:59 +0000
asID:                     27951
IP address blocks:        2801:1bc::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a9:71:ca:ee:b4:fa:e5:d4:42:f7:29:0a:67:76:0c:a0:6f:86:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E359261CE8701012A5C81FF73726D0ED63ED7F7
        Validity
            Not Before: Mar  5 18:00:59 2024 GMT
            Not After : Mar  4 18:05:59 2025 GMT
        Subject: CN=42C0395481615F74AB1AF935B4BDE4D565AF11A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f6:75:ca:0d:66:07:64:f7:d5:18:5c:30:07:
                    c4:9d:96:a0:63:d3:a7:10:73:4f:d7:18:0d:3e:83:
                    ff:b8:3b:63:9c:4f:47:36:6c:96:37:96:fc:07:8e:
                    5a:43:bc:8f:81:dd:c4:49:1a:04:6f:e7:b4:89:26:
                    16:2f:76:28:ec:9a:8d:20:44:c8:d0:2a:1f:9d:ef:
                    b5:ae:48:20:b7:43:7e:98:3c:56:db:63:f9:81:17:
                    21:8f:31:d8:f3:b0:2b:a6:a3:f4:99:86:71:9d:08:
                    6b:5c:1c:2d:f0:86:fc:33:a5:f1:30:3a:6f:48:33:
                    4b:a2:ad:cd:e4:ab:93:6a:2b:4f:24:cb:f0:f2:2f:
                    5f:a8:40:74:d9:1f:81:d2:40:d0:46:b3:2a:4b:3a:
                    60:3c:73:0f:01:77:66:1d:87:e4:10:5b:e5:dc:a2:
                    5c:55:ef:06:5a:53:10:54:8b:4f:cf:e6:ee:e7:d7:
                    b5:66:4e:6b:37:ee:fa:dd:b3:ed:65:29:47:2e:40:
                    11:8b:74:18:f0:0b:9b:44:2f:fc:e7:84:89:bd:f8:
                    ef:5a:e9:3b:44:f4:2f:d3:e3:af:85:99:1f:06:7d:
                    96:a4:14:09:aa:44:69:40:88:f0:48:80:73:ba:ad:
                    a4:e9:76:0b:51:e0:b1:15:74:56:fa:15:64:51:87:
                    4d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C0:39:54:81:61:5F:74:AB:1A:F9:35:B4:BD:E4:D5:65:AF:11:A1
            X509v3 Authority Key Identifier:
                keyid:3E:35:92:61:CE:87:01:01:2A:5C:81:FF:73:72:6D:0E:D6:3E:D7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E359261CE8701012A5C81FF73726D0ED63ED7F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEE58E98E40A39ECD2784E00D2D608D7FFCA41006F2D180E41C6EC4D77DAA7D/0/323830313a3162633a3a2f34342d3434203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1bc::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:72:f6:1a:9b:44:26:c0:64:f9:db:fe:58:89:fb:f8:b8:
         54:87:74:e0:c6:60:83:35:9e:7a:7d:6a:b2:12:c0:8a:78:46:
         4f:bf:36:02:42:49:b4:c0:44:64:57:31:30:e9:72:10:bd:97:
         53:8e:d1:58:13:01:c8:10:c0:2b:1c:1e:94:c7:10:4d:2a:bd:
         d6:b7:da:0c:db:8f:7b:a0:90:9d:5d:3a:29:93:c5:e3:87:f8:
         6d:2b:b3:d5:a1:4c:cc:bd:50:fd:10:d0:7f:52:6f:66:87:50:
         a5:eb:57:29:bb:51:f4:ff:95:5a:b5:2b:f4:3b:42:d4:d1:4c:
         89:19:46:a4:f5:ea:71:70:f5:96:f9:2b:33:18:4f:56:dd:49:
         85:1f:07:a9:09:73:2f:fd:4d:31:df:ef:fa:7b:fc:61:09:26:
         ba:58:44:60:f4:f1:42:56:29:94:f7:01:70:17:cd:0d:cb:65:
         a8:92:4f:fa:db:3e:e6:6d:78:ed:dd:89:49:28:51:e0:c0:5d:
         4a:e7:52:5f:56:75:a3:f5:bc:34:7a:3d:0b:0c:86:6c:ec:f0:
         2d:f1:3c:0c:96:59:ce:90:63:09:e7:26:80:0c:f5:68:96:30:
         2b:85:d0:76:db:d7:98:f1:48:b0:11:47:3c:86:dd:d1:c1:34:
         25:3f:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:16:39 2024 by rpki-client on console-ams.rpki-client.org