Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          hicxUsg1W9f/04GmO8ZrT3u1Gpd92OCZuhR290AdIlY=
Subject key identifier:   4C:A3:44:17:A8:17:AA:58:0F:99:79:ED:91:C7:30:67:EF:5F:AF:C5
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       46057DD8D9833A7975297E9EB8A6257EFEBF1BC4
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:19 +0000
ROA not before:           Tue 05 Mar 2024 18:11:19 +0000
ROA not after:            Tue 04 Mar 2025 18:16:19 +0000
asID:                     262191
IP address blocks:        2800:b70:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:05:7d:d8:d9:83:3a:79:75:29:7e:9e:b8:a6:25:7e:fe:bf:1b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:19 2024 GMT
            Not After : Mar  4 18:16:19 2025 GMT
        Subject: CN=4CA34417A817AA580F9979ED91C73067EF5FAFC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:e5:7c:72:87:06:36:86:5b:26:e7:d6:e0:
                    e8:55:41:2e:61:50:a2:9e:5d:7e:ef:1a:1e:b1:35:
                    b5:0f:06:00:e2:06:96:a5:3c:da:ed:98:9a:8f:17:
                    f8:61:bd:89:9b:30:5b:77:b5:e9:d3:24:c8:9b:89:
                    2c:4c:b9:a7:85:23:f9:b9:fd:3e:73:20:7c:eb:a7:
                    c7:dc:4b:5b:da:59:a4:b5:9a:e2:62:91:c9:d0:fa:
                    ce:a4:fb:c5:e0:93:20:7d:98:b3:f5:e6:35:2c:9e:
                    86:05:c0:9f:62:26:f7:48:a2:58:41:dd:cf:e2:f3:
                    20:93:16:b7:33:79:e2:9b:e5:5d:58:46:9d:f6:88:
                    86:1d:94:36:60:89:df:fe:f5:fa:ee:ca:08:85:5d:
                    fa:4c:70:01:a2:87:5b:49:47:2d:0a:b8:fe:f1:36:
                    71:9c:fe:8d:c5:48:67:27:1c:a1:b3:ef:8a:f4:c6:
                    c8:c9:fd:6d:c2:06:64:0c:0d:06:10:1f:f5:78:58:
                    c2:09:26:a7:4a:13:07:ce:8a:eb:7d:90:06:03:36:
                    03:ad:61:7c:84:cc:93:78:60:7b:0c:e5:b1:5a:12:
                    b0:5d:d2:86:4d:a9:85:51:a1:59:dd:04:bd:fe:0f:
                    88:c7:53:3e:fc:58:8f:fe:b1:fd:f3:ee:d2:91:74:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A3:44:17:A8:17:AA:58:0F:99:79:ED:91:C7:30:67:EF:5F:AF:C5
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130323a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:ec:b7:f1:a2:14:98:d9:9c:3e:03:97:7c:6c:eb:e7:34:
         dd:8b:0b:9c:e0:45:6e:cb:c2:a6:a2:63:c0:c6:f4:35:be:04:
         2c:ef:a7:82:36:fa:ae:8e:b3:3a:41:66:bb:90:ea:72:1d:44:
         30:b2:c6:14:be:06:18:6d:3d:de:66:1c:6f:f0:e8:3b:a8:1a:
         67:32:a2:80:92:c2:cb:95:a1:a7:18:81:6c:84:4c:69:7d:3a:
         5d:5f:a5:60:54:40:76:05:e9:36:e0:17:9c:7c:39:15:76:c5:
         e3:b3:28:14:f2:1f:d8:40:bb:d7:2b:99:98:a9:f1:93:60:3a:
         bd:e7:25:d8:8c:22:e5:ef:44:ae:b6:8c:c3:31:1e:c8:37:f6:
         e5:db:92:91:25:33:a8:2c:7b:82:31:69:c6:4f:83:32:cd:b0:
         c0:5a:48:ba:98:23:51:6f:5e:ab:98:b0:58:6f:c3:47:17:9d:
         b5:4d:57:f9:07:81:51:9c:bf:64:9f:70:21:ef:58:d2:73:47:
         21:52:35:99:b1:31:68:c8:85:e9:2b:26:c2:f4:ac:72:c0:de:
         a6:45:45:0a:e1:40:1a:e8:8a:98:dd:c6:b7:c2:db:ae:f8:24:
         2c:dd:2e:71:0c:66:97:ff:94:3a:47:94:1c:00:5f:7e:02:dd:
         d0:26:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org