Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31383a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31383a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          ksFCig+C6vyDmoTAF6RfCmx6OzbvaQd0ir6Mj2vmoVc=
Subject key identifier:   BC:46:64:3A:16:B2:85:3A:05:C0:41:D2:6C:D5:51:8C:DF:78:8B:CA
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       6EB932CCCF99D38BC3F1C1154564A69182165D1D
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31383a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:09 +0000
ROA not before:           Tue 05 Mar 2024 18:11:09 +0000
ROA not after:            Tue 04 Mar 2025 18:16:09 +0000
asID:                     262191
IP address blocks:        2800:b70:18::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b9:32:cc:cf:99:d3:8b:c3:f1:c1:15:45:64:a6:91:82:16:5d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:09 2024 GMT
            Not After : Mar  4 18:16:09 2025 GMT
        Subject: CN=BC46643A16B2853A05C041D26CD5518CDF788BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:42:9e:67:94:46:81:79:eb:bc:5c:c0:78:
                    5e:7e:cd:81:04:7b:73:4a:6c:fe:b8:21:6c:39:cd:
                    41:4a:6f:a7:63:be:89:9b:93:04:06:63:f6:a0:0b:
                    46:cf:6c:bf:16:40:57:ce:6e:07:cd:16:65:a7:32:
                    4a:22:45:9d:83:10:9d:1f:7e:5a:a5:fa:be:ab:f6:
                    a9:10:9e:be:b3:65:73:51:03:27:e8:57:c8:10:cd:
                    f0:2b:52:8d:d4:86:17:0a:96:27:10:e3:bd:84:b1:
                    46:33:fd:38:1b:3a:9a:ac:80:b7:f7:2a:f1:07:d2:
                    1e:b4:be:d1:ae:c0:83:7f:5b:7f:08:f2:08:33:64:
                    5f:66:6c:1d:9d:74:ab:b2:de:8e:fd:9e:db:e9:c5:
                    be:14:49:b8:50:3a:3a:42:c6:45:f6:bf:c6:3b:92:
                    c4:76:33:de:a9:d2:44:13:19:d3:68:1b:ae:70:8b:
                    ab:97:5d:7d:69:59:c9:36:92:0f:23:b1:96:c2:23:
                    7e:f7:e0:e3:1d:7d:dd:6d:81:b3:1a:4b:76:06:29:
                    2e:10:c4:61:8a:aa:ee:79:50:98:ba:3e:8a:db:bc:
                    56:e3:15:aa:7e:cd:b4:09:5f:b0:e7:f4:c3:a4:de:
                    b8:78:20:e1:16:32:69:35:89:8e:08:0c:4f:d8:6b:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:46:64:3A:16:B2:85:3A:05:C0:41:D2:6C:D5:51:8C:DF:78:8B:CA
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31383a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:82:08:47:bf:f7:42:56:a7:28:be:a3:83:6a:88:ce:a2:de:
         28:a4:c5:48:f1:b3:40:1b:5f:53:90:cc:be:2a:fb:10:8a:28:
         b3:6c:39:64:61:a3:03:ed:84:72:c7:7c:db:41:fa:13:ea:6d:
         42:66:17:ff:77:1c:77:74:da:f0:17:a3:3f:52:85:00:56:a3:
         7c:a3:75:97:2f:63:40:9a:d3:36:4f:5f:06:03:36:50:a8:aa:
         b4:fa:26:a6:77:1c:51:d0:54:06:e0:ac:30:87:c0:05:a7:f1:
         42:c6:20:ea:d9:64:03:f1:97:3d:54:61:60:f6:01:61:e3:1d:
         e8:fc:f5:7f:47:30:b3:8a:da:ec:47:12:c6:3a:34:c0:87:3e:
         8d:e7:07:ca:b9:fb:b9:11:ff:fd:49:4b:46:9c:ea:ce:af:bb:
         e5:36:7a:88:14:d7:44:02:d9:77:85:7e:8e:57:0e:cb:39:5b:
         d3:f6:09:a8:4b:49:65:e4:a3:0a:49:e7:10:cf:1f:bc:7a:4d:
         2b:01:01:ea:2c:cf:76:08:7a:45:b7:06:5c:b3:5a:88:db:a4:
         92:44:4b:0c:79:01:0c:ba:67:1b:19:fe:d7:de:20:16:a0:04:
         7f:da:c9:37:3d:53:79:50:7b:c2:b4:56:dd:a7:b1:8d:bc:b1:
         ed:23:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:52 2024 by rpki-client on console-fra.rpki-client.org