Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31313a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          uBAEk9kQJkxy7j0N0LUv9Elc6MkJgleUxZQw1GvcRcI=
Subject key identifier:   0A:BD:12:E3:35:0E:82:9A:CE:30:3D:58:00:55:0E:8B:00:3A:0C:68
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       255CDFCD2259618FD777BF9B530A1D6D2D4C7FBE
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31313a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:14 +0000
ROA not before:           Tue 05 Mar 2024 18:11:14 +0000
ROA not after:            Tue 04 Mar 2025 18:16:14 +0000
asID:                     262191
IP address blocks:        2800:b70:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5c:df:cd:22:59:61:8f:d7:77:bf:9b:53:0a:1d:6d:2d:4c:7f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:14 2024 GMT
            Not After : Mar  4 18:16:14 2025 GMT
        Subject: CN=0ABD12E3350E829ACE303D5800550E8B003A0C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:1b:d8:0d:c8:4e:8c:b9:2c:33:36:3a:55:
                    eb:62:c4:11:f5:83:b0:90:22:84:44:e5:c3:18:2b:
                    22:6d:a2:ae:0f:65:84:9b:a6:d4:77:2b:af:2d:85:
                    b9:48:91:70:3f:cd:01:ff:ea:27:70:d6:78:ce:8a:
                    43:ac:db:0f:a4:ea:09:ed:af:26:58:aa:ca:1a:3a:
                    58:4f:80:23:64:b3:27:b5:66:df:69:a7:19:bb:91:
                    75:6d:df:03:27:aa:ac:fb:3d:28:7e:00:db:3e:2e:
                    7f:5d:8a:26:bb:63:31:b3:eb:b5:2f:b7:91:39:56:
                    53:af:4c:9d:d2:fa:d1:76:85:51:c7:0d:7f:e7:de:
                    1a:d8:a6:60:d9:f3:3a:cf:e1:0a:69:96:a3:ee:26:
                    11:df:cc:fc:01:92:34:d0:5d:3c:51:cb:22:6d:7f:
                    52:07:94:8f:61:d1:67:27:fa:5e:1a:b4:a0:69:0b:
                    10:fb:fa:a8:23:23:3e:75:72:30:7b:d8:e4:11:1b:
                    04:0f:ed:1f:ba:f7:54:55:2d:21:a8:98:8c:96:9a:
                    c1:32:ac:47:cf:25:e9:81:a4:e2:bd:ff:be:e9:2c:
                    36:76:1a:a8:d0:b3:1b:40:ed:b0:ee:48:43:24:06:
                    84:f1:70:08:89:b1:55:43:4a:cf:d3:d5:ca:24:dd:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BD:12:E3:35:0E:82:9A:CE:30:3D:58:00:55:0E:8B:00:3A:0C:68
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31313a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:82:55:d5:a1:a5:b4:45:20:00:d4:0e:1f:bc:63:d3:d6:
         91:c8:5e:65:d0:85:14:ff:69:43:87:3b:88:9b:b9:42:d2:56:
         0e:8b:59:77:25:8f:ac:e1:f5:07:fc:99:5a:8d:67:d0:66:64:
         76:31:86:b9:63:f3:98:2c:a3:32:21:73:87:68:5b:a3:67:b6:
         fa:20:55:f0:c3:9e:f3:80:bf:c2:e5:30:56:eb:34:4c:a4:cb:
         41:3c:8f:8d:4c:92:e0:2c:e9:4a:e4:9a:da:21:70:32:d9:78:
         62:76:eb:0b:78:61:13:91:42:1f:fb:44:1d:2c:8a:24:91:d4:
         d6:a8:40:1a:23:91:b0:8d:b3:2b:b9:9d:35:33:3d:08:4e:3f:
         41:d6:36:bf:bb:5e:fc:e3:f6:c6:5a:96:bd:af:44:ef:1c:2c:
         d4:c8:83:fe:f2:1f:39:f0:e7:eb:b6:e9:74:e8:31:3a:58:12:
         de:d8:d6:d3:e7:a1:5a:fd:bc:48:f6:4d:b2:87:50:fe:c8:01:
         e4:f8:6f:e6:45:b6:25:9c:f8:30:b9:a6:30:39:70:c9:46:34:
         5f:99:9b:b1:b4:af:22:fe:c3:03:bf:21:af:0f:b6:c3:e8:7d:
         eb:12:f8:ea:88:98:1e:ce:6a:c4:dd:34:d5:89:ff:7b:2b:97:
         98:06:61:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:52 2024 by rpki-client on console-fra.rpki-client.org