Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa
File:                     323830313a303a34303a3a2f34382d3438203d3e203238303637.roa (raw, json)
Hash identifier:          0m/M2zWaFQ5I40bX3PsVgPqpj5rFHk2MXXc/SijkpXI=
Subject key identifier:   05:39:20:D3:35:4C:4D:31:B9:E0:7C:B6:07:E5:A7:19:AA:4E:1F:3E
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       40B67F038D4907C4608C87B5BF7CD6BD5D9B13C5
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa
Signing time:             Tue 05 Mar 2024 17:48:41 +0000
ROA not before:           Tue 05 Mar 2024 17:43:41 +0000
ROA not after:            Tue 04 Mar 2025 17:48:41 +0000
asID:                     28067
IP address blocks:        2801:0:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b6:7f:03:8d:49:07:c4:60:8c:87:b5:bf:7c:d6:bd:5d:9b:13:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Mar  5 17:43:41 2024 GMT
            Not After : Mar  4 17:48:41 2025 GMT
        Subject: CN=053920D3354C4D31B9E07CB607E5A719AA4E1F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:17:7c:c7:58:bf:27:9f:d6:68:98:48:d3:
                    c9:5b:83:e6:53:37:de:d5:04:f5:03:51:31:cb:fe:
                    c2:27:15:11:a8:e3:ed:f6:a0:e8:88:66:a5:f4:06:
                    67:4f:cc:b1:65:cd:a9:75:1d:b1:db:81:f9:db:76:
                    f0:8a:91:6c:01:e1:ba:62:14:0e:5a:b3:e1:6c:1c:
                    a9:b0:2b:d9:cf:c9:cb:26:4b:74:f1:5b:71:1f:3f:
                    6c:56:d8:86:4f:e3:cf:f1:6b:90:c6:71:65:97:f2:
                    cd:c8:ea:2d:f3:5a:b6:ad:c3:3e:66:85:c6:1f:67:
                    a1:91:cc:23:4d:db:13:39:a3:7f:80:f1:ca:d8:8a:
                    07:78:1c:67:1e:f4:1f:39:f0:4e:8d:fa:e4:1c:dd:
                    f2:b6:6a:83:7e:f8:38:ea:a2:4c:22:6a:05:4d:9f:
                    52:52:11:51:c2:25:64:5a:e1:71:49:f7:1e:bc:e8:
                    c1:ad:90:8b:80:07:f9:f2:83:c9:c8:d9:1c:8d:4d:
                    c8:56:a8:07:34:67:17:75:a3:1e:50:3d:c7:80:4f:
                    6d:f1:40:1f:b8:38:aa:9c:01:3b:5a:39:0b:b4:f2:
                    29:20:47:e5:94:81:39:b1:b6:7a:d8:0e:75:99:76:
                    6a:90:53:06:cf:0c:71:ce:3f:b1:dd:a4:16:87:c8:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:39:20:D3:35:4C:4D:31:B9:E0:7C:B6:07:E5:A7:19:AA:4E:1F:3E
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/323830313a303a34303a3a2f34382d3438203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:b8:1c:57:90:d0:7d:d1:cf:5f:4d:33:b5:b1:92:91:64:c5:
         b4:1c:79:36:31:23:09:fe:30:60:c0:bd:81:a0:c3:73:6d:c5:
         4d:d8:69:2e:b2:b7:10:87:ae:75:be:1b:74:aa:75:b4:77:bf:
         dd:73:32:25:df:62:dc:5d:65:e3:f5:6f:61:35:d5:20:3b:f1:
         40:db:d1:1a:0f:02:e1:b2:0c:18:eb:94:73:bf:c9:50:01:c7:
         17:ab:e5:21:01:39:0e:bd:a4:ac:a9:8e:d1:9f:cf:e9:1f:f0:
         39:44:79:48:1f:e6:ba:2c:aa:76:3b:60:89:01:49:6e:40:14:
         5a:85:14:02:4a:df:61:46:3c:97:de:19:7b:05:81:f9:32:92:
         4e:bb:60:1b:97:da:c5:9e:b3:da:07:8a:87:29:f6:5e:74:2b:
         4f:b3:bc:c3:8b:81:68:18:bc:ad:17:99:fc:ed:ee:a4:71:39:
         4c:00:ad:e1:53:aa:e7:70:d9:b5:7b:06:f3:1f:b3:c3:10:47:
         16:07:65:64:0f:a0:ad:09:ed:b7:c3:ae:27:96:1b:b7:56:4b:
         e7:6c:19:8f:d6:6c:e5:82:95:a1:46:93:f1:ac:58:c7:cf:03:
         1e:50:3b:9f:bd:53:a7:01:5a:24:f9:9d:8a:82:21:c1:f7:b9:
         f5:0d:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org