Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          FNKrenpqhbvlu2XVGsDW+s5VyCfltBMmf9YY2VWqKuM=
Subject key identifier:   F5:F1:0D:D8:50:13:43:A8:2F:CE:CB:A2:79:FB:2E:29:CE:C4:81:D2
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       05A16D148AF02B9D68806A9A92BE01B2C2C72DB9
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:12 +0000
ROA not before:           Tue 05 Mar 2024 18:11:12 +0000
ROA not after:            Tue 04 Mar 2025 18:16:12 +0000
asID:                     262191
IP address blocks:        2800:b70:1f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a1:6d:14:8a:f0:2b:9d:68:80:6a:9a:92:be:01:b2:c2:c7:2d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:12 2024 GMT
            Not After : Mar  4 18:16:12 2025 GMT
        Subject: CN=F5F10DD8501343A82FCECBA279FB2E29CEC481D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:ad:56:3d:81:a6:73:64:b1:b5:08:86:ba:
                    e8:ec:eb:ac:3e:da:ff:8e:7d:40:48:43:f1:d7:f9:
                    58:ea:01:51:31:f9:6c:d0:bf:95:9c:26:57:d4:94:
                    06:c6:05:e0:25:28:27:15:a3:61:4f:42:a9:5a:07:
                    2f:74:2a:9b:15:19:2d:5d:a1:4f:6b:59:c0:e1:d3:
                    e4:aa:e2:0b:f9:db:be:b1:32:78:f7:2d:dd:39:8d:
                    43:2d:ba:50:67:7e:53:40:73:a5:1e:93:15:e6:a3:
                    62:99:e2:b7:98:54:a4:69:12:99:55:52:cb:a8:fe:
                    aa:d4:3a:0b:7b:0a:e2:c6:21:1e:71:af:d1:4f:09:
                    b5:c1:83:72:b4:78:f7:3e:a7:dd:50:f7:8c:7b:a8:
                    fa:38:4a:fa:d8:0d:21:44:95:16:44:4b:32:6b:9a:
                    0b:04:82:76:8c:94:b0:2d:c0:41:49:1d:06:79:08:
                    c9:44:29:30:67:7c:d5:62:8a:3e:39:9f:c4:ab:ac:
                    ed:67:44:eb:1e:e1:5e:23:a2:d9:c5:1a:cf:1c:f9:
                    63:35:64:e4:b7:46:7e:4c:fc:67:0b:26:e6:2a:a9:
                    d4:bc:ef:de:69:f8:12:f5:84:e7:00:fc:f3:9d:98:
                    06:08:49:41:23:bf:16:52:6e:7f:b8:ef:9e:4e:48:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F1:0D:D8:50:13:43:A8:2F:CE:CB:A2:79:FB:2E:29:CE:C4:81:D2
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31663a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:5f:5a:3a:3f:74:80:08:44:46:0e:2f:27:3e:f5:d2:ec:
         2f:f8:4a:8f:0b:6c:a1:70:36:9a:6b:61:4c:d8:66:ac:aa:21:
         c1:d6:76:4d:46:18:9a:f1:84:e3:7c:b8:2f:a9:d1:8d:f6:f2:
         2f:79:74:65:50:0d:bd:6f:8b:d1:bf:c9:df:37:0a:8c:c4:35:
         6e:98:27:76:54:6f:77:9e:5c:52:15:a6:4a:2a:20:8d:d0:33:
         78:54:29:30:98:d4:bc:f9:ec:0b:5f:52:df:2f:84:3e:3a:9f:
         6a:cd:e4:41:ad:0e:d8:24:a5:f8:43:77:8f:41:c9:02:4a:a6:
         20:be:81:20:38:23:29:27:48:de:92:10:0d:1b:f2:da:55:5e:
         72:68:2d:59:69:c1:ea:20:6b:df:6a:26:47:e5:d6:7e:13:e6:
         3c:65:35:0e:18:f6:99:9d:3a:5d:94:60:ac:ce:7d:74:08:20:
         fb:b1:d7:f4:db:fa:a7:49:11:2d:b8:a3:f1:1c:64:75:40:5c:
         d9:e5:04:e8:8a:9d:9e:fc:f3:28:95:88:3a:a4:e9:7d:8a:3c:
         c1:d3:40:46:27:e0:90:41:aa:f8:c0:0f:3d:eb:e5:59:d9:0d:
         af:3d:83:43:9b:fb:8a:a4:95:16:fd:28:62:e2:9d:4f:d3:c8:
         7c:62:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 19:50:07 2024 by rpki-client on console-fra.rpki-client.org