Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a3a2f34302d3438203d3e20323733313439.roa
File:                     323830313a3135353a3a2f34302d3438203d3e20323733313439.roa (raw, json)
Hash identifier:          y1S/+rcjMMHgEpWnAfxRkyKLobIyl0q54B+x8SxjpKo=
Subject key identifier:   10:66:BA:58:E3:DC:0A:7A:2F:29:B2:17:10:25:2F:B9:FE:A4:FF:2C
Certificate issuer:       /CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
Certificate serial:       749595ABF6680D83B26E15A9B66D805959BED383
Authority key identifier: 70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a3a2f34302d3438203d3e20323733313439.roa
Signing time:             Tue 05 Mar 2024 18:18:38 +0000
ROA not before:           Tue 05 Mar 2024 18:13:38 +0000
ROA not after:            Tue 04 Mar 2025 18:18:38 +0000
asID:                     273149
IP address blocks:        2801:155::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:95:95:ab:f6:68:0d:83:b2:6e:15:a9:b6:6d:80:59:59:be:d3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
        Validity
            Not Before: Mar  5 18:13:38 2024 GMT
            Not After : Mar  4 18:18:38 2025 GMT
        Subject: CN=1066BA58E3DC0A7A2F29B21710252FB9FEA4FF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:db:07:6a:00:bb:80:43:f5:77:88:ad:0f:
                    10:d9:a0:75:c5:33:f3:84:92:c5:3b:a0:2e:98:58:
                    c3:e2:a7:82:6e:5b:da:0f:20:81:4e:17:eb:45:7c:
                    b5:b8:d9:7b:f5:ee:a0:0d:68:ea:c0:a3:09:db:c8:
                    d6:86:65:2b:4e:73:5f:2c:a8:b4:15:ac:b6:4e:c1:
                    0c:11:91:02:17:a9:cf:f6:eb:d1:25:c1:77:e1:e6:
                    2e:d7:f5:07:ef:82:60:7b:b7:47:32:c0:fd:ea:82:
                    6d:aa:4d:35:f6:df:56:37:9b:90:61:54:f9:74:a4:
                    0c:06:a7:ef:4a:78:ed:09:fa:6e:36:1a:01:f7:7e:
                    0e:69:2e:7e:05:cf:81:7c:38:98:b4:8b:7f:6e:9f:
                    a0:29:4c:f1:35:cb:a9:6b:97:17:f4:1b:24:a8:15:
                    05:38:21:53:92:f2:db:06:4c:e9:d8:e8:71:11:22:
                    e8:6f:01:34:06:1d:fb:d1:92:e2:7d:b7:bd:ba:46:
                    08:a2:14:8e:a4:c1:e1:18:e1:eb:48:9d:7c:34:be:
                    4b:55:c7:16:97:9f:4f:f0:ee:99:c0:b4:2d:3c:b7:
                    5c:c5:8d:93:5b:44:8c:68:0c:56:1c:51:26:80:b5:
                    6a:17:e1:c9:6d:3b:86:cd:6b:ee:f5:b0:85:0c:50:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:66:BA:58:E3:DC:0A:7A:2F:29:B2:17:10:25:2F:B9:FE:A4:FF:2C
            X509v3 Authority Key Identifier:
                keyid:70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/323830313a3135353a3a2f34302d3438203d3e20323733313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:155::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:c2:15:43:42:4d:f0:ec:6e:0e:ea:36:0e:31:94:fd:ed:
         c5:31:53:e5:a2:1b:1f:c7:e0:b8:57:ac:19:82:10:3a:98:a5:
         5c:42:87:6a:44:9a:9f:71:61:52:ee:cb:45:62:f5:b5:32:bb:
         c6:b1:8c:c8:92:6d:ed:8f:7f:66:07:3f:12:56:d2:ca:6d:0b:
         4b:b4:c4:8c:66:2c:c3:04:32:5a:2e:89:48:2c:16:6f:44:75:
         b0:37:26:37:5e:62:d7:23:d9:82:d6:0d:e5:86:37:83:d3:3a:
         5c:87:45:15:ff:10:65:ce:95:3d:34:c8:f6:d8:e5:08:56:77:
         6a:91:65:b3:0e:64:04:29:cc:2b:f9:f7:5a:48:38:0c:50:ff:
         53:db:5b:8b:4f:7b:c4:c7:f6:2c:ac:93:f4:d5:79:53:f3:59:
         75:4a:76:dc:bf:08:98:4f:1c:a5:8a:87:15:a6:ee:84:8a:54:
         54:63:a3:e7:63:dc:49:14:63:24:ba:60:0d:ea:e9:63:e7:92:
         cf:47:33:ef:7b:cc:8d:a7:b3:e9:ce:00:0e:2e:cd:f3:1e:a2:
         c6:63:05:05:23:34:98:ba:a5:df:6f:31:94:25:00:87:6b:91:
         42:76:b6:02:47:fd:eb:2c:b8:25:7b:fd:48:07:35:cd:88:00:
         fe:d8:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:09 2024 by rpki-client on console-fra.rpki-client.org