Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          pB8Ymudd6xNOlFbToyhot+6PKK7LA9Owiw7Xl7XDtFM=
Subject key identifier:   51:4B:DD:9F:6D:BB:A9:51:D0:7C:24:82:21:AA:29:6F:29:CC:A2:05
Certificate issuer:       /CN=0CBCF0206A415643408AB138E12C0382581355FF
Certificate serial:       58C328C33D966D0B6D830137817C196AB4520254
Authority key identifier: 0C:BC:F0:20:6A:41:56:43:40:8A:B1:38:E1:2C:03:82:58:13:55:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:16:43 +0000
ROA not before:           Tue 05 Mar 2024 18:11:43 +0000
ROA not after:            Tue 04 Mar 2025 18:16:43 +0000
asID:                     19429
IP address blocks:        2801:14:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 03:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c3:28:c3:3d:96:6d:0b:6d:83:01:37:81:7c:19:6a:b4:52:02:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CBCF0206A415643408AB138E12C0382581355FF
        Validity
            Not Before: Mar  5 18:11:43 2024 GMT
            Not After : Mar  4 18:16:43 2025 GMT
        Subject: CN=514BDD9F6DBBA951D07C248221AA296F29CCA205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:b6:80:98:57:15:f1:a7:d3:b5:1d:d1:5c:
                    a7:9f:71:be:a5:0c:0b:0f:bb:70:5c:72:0a:41:30:
                    90:88:6f:f8:ca:fd:d3:df:b2:7f:85:6c:84:ea:31:
                    49:28:09:ba:a2:2c:d7:8c:39:71:cf:e8:e3:1f:58:
                    28:62:93:a1:3a:b8:72:75:9c:0b:10:20:c5:b8:7f:
                    3f:9e:7c:30:ee:93:66:1c:40:88:d1:6a:ab:56:40:
                    33:35:72:27:ef:c7:9c:d7:5a:53:4e:bc:3e:29:03:
                    ef:0f:84:2a:f0:af:41:ab:f4:b3:f3:f5:2e:d2:82:
                    d8:cc:5b:06:bf:6c:56:da:ec:16:e3:a9:72:c7:eb:
                    69:18:e2:bd:0b:22:9f:ed:93:7d:c0:c0:32:4c:ea:
                    1d:26:d0:82:0e:3d:b3:40:92:49:32:cc:81:1f:80:
                    5a:09:36:a0:b2:1d:f7:94:d6:55:a4:78:f7:89:bb:
                    5c:ad:d6:3e:f9:e6:06:83:8a:a5:da:68:6b:ab:aa:
                    12:9a:05:29:75:29:27:e7:df:f7:74:3c:03:ae:01:
                    df:35:66:0d:6f:07:b7:41:66:a2:53:5d:4c:fc:dc:
                    67:b7:9c:56:7d:2d:cc:56:cb:c1:b5:e6:1d:54:48:
                    b8:0d:b1:72:c7:0a:da:01:d0:bf:60:3b:85:92:90:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:DD:9F:6D:BB:A9:51:D0:7C:24:82:21:AA:29:6F:29:CC:A2:05
            X509v3 Authority Key Identifier:
                keyid:0C:BC:F0:20:6A:41:56:43:40:8A:B1:38:E1:2C:03:82:58:13:55:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/0CBCF0206A415643408AB138E12C0382581355FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CBCF0206A415643408AB138E12C0382581355FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/134D1B7863761757BFFCC2572A0B7734B839C1FEB720070573D31ACD97225A65/0/323830313a31343a343830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:0f:4b:76:4d:1a:da:1a:6d:60:f8:ad:d3:0f:a4:2e:36:
         ec:a4:a7:42:23:51:bb:2f:9c:19:37:43:60:de:30:ce:e5:5e:
         6d:f7:3e:2f:7c:7c:00:79:fc:90:ba:1a:7c:91:d7:ea:ca:96:
         5a:39:0b:0c:5e:c5:69:8f:13:ba:79:15:04:8e:96:d8:4e:b1:
         52:4a:94:a7:63:5b:8a:a4:60:4c:b5:2a:09:65:43:b3:ca:2f:
         ca:a2:2d:10:53:2b:10:42:15:41:f2:b7:05:5a:94:d2:68:ff:
         c2:64:b6:8f:b7:49:76:f5:f9:83:57:01:85:61:f9:e9:08:da:
         8b:94:18:8e:54:2e:cd:d8:d5:a8:47:00:03:cb:03:3c:46:d5:
         d5:96:9d:b4:bf:03:16:e4:0b:e2:1c:73:6a:30:a9:0c:f4:e3:
         d4:bb:ec:b1:69:89:ea:ab:c2:cc:1c:9c:00:1d:d3:c1:c8:eb:
         90:28:1f:bd:47:7b:09:c6:f0:f9:ab:08:90:2a:98:97:4f:e3:
         fc:31:be:09:be:0a:78:42:29:d1:a4:0f:c9:e0:58:c9:42:14:
         1b:3b:19:cb:3e:53:52:74:a1:e9:f9:bb:c5:c5:f2:e7:9c:5a:
         61:d3:e0:ab:da:8e:46:09:f0:9d:80:53:de:38:3a:99:92:99:
         41:10:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:32:19 2024 by rpki-client on console-fra.rpki-client.org