Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32323a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a32323a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          IoeMO5vfZLHM3p2+jL94sltH9CZNg5Vcr+WcBAbzsco=
Subject key identifier:   61:DC:14:8C:96:9A:92:EF:65:10:B9:83:6E:55:CB:52:F6:66:BB:A8
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       18152210F5B7A4ECB32D4637B06FB7B8ADFE8014
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32323a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:13 +0000
ROA not before:           Tue 05 Mar 2024 18:11:13 +0000
ROA not after:            Tue 04 Mar 2025 18:16:13 +0000
asID:                     262191
IP address blocks:        2800:b70:22::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:15:22:10:f5:b7:a4:ec:b3:2d:46:37:b0:6f:b7:b8:ad:fe:80:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:13 2024 GMT
            Not After : Mar  4 18:16:13 2025 GMT
        Subject: CN=61DC148C969A92EF6510B9836E55CB52F666BBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fb:ad:66:1a:80:d2:d3:25:57:be:89:ea:9e:
                    f8:b6:87:f6:24:28:4b:b3:48:37:e5:f2:a3:bf:f5:
                    4b:b3:09:e3:a5:ec:91:35:f0:65:64:c2:df:aa:cb:
                    01:1e:5f:2c:b1:76:95:14:24:16:be:69:06:95:d9:
                    30:45:39:bb:d3:b6:d7:2c:31:84:fb:5e:80:05:e3:
                    0d:bd:0e:40:71:86:52:f5:29:cc:2a:32:63:4e:78:
                    e0:16:88:f5:cd:60:d6:de:3c:3c:5d:c8:18:ca:c1:
                    3b:82:b8:91:4a:0d:96:c7:35:82:4f:7f:ed:e6:16:
                    33:43:71:2e:62:96:e0:07:43:50:00:74:ee:96:2a:
                    a6:bd:4e:d3:18:50:b0:9a:d8:57:8d:41:ac:47:ad:
                    16:b3:d0:30:91:d3:15:08:37:09:ab:52:57:0f:4b:
                    a5:53:f8:b8:f9:54:db:c8:f8:85:b8:65:8b:a8:8b:
                    09:fe:58:7c:c2:90:c2:1a:6d:80:cb:a6:27:63:36:
                    0b:d9:31:e1:57:ad:6d:00:d7:4f:b8:fa:3d:95:47:
                    f2:6f:bf:54:35:1c:47:d7:73:52:e2:a5:1d:71:3a:
                    3e:a9:9a:64:53:18:21:d1:e8:69:c8:fe:a2:28:16:
                    9e:0c:68:0b:eb:a9:40:5f:38:f6:70:e3:22:89:ab:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DC:14:8C:96:9A:92:EF:65:10:B9:83:6E:55:CB:52:F6:66:BB:A8
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32323a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:ec:3a:e6:11:c8:50:b1:b4:90:0f:43:6f:a7:81:c3:db:73:
         f6:cc:bb:84:af:8c:a7:26:b0:4e:ce:86:43:37:9e:67:b2:65:
         ae:a6:28:68:aa:16:30:ef:48:a5:a2:31:c7:57:04:93:d1:df:
         ef:43:f5:d8:3e:81:9e:a2:e3:83:0c:be:cc:f0:be:18:a8:2e:
         43:a0:d3:35:7f:80:1f:46:9b:5a:2d:de:15:76:62:45:7b:64:
         02:32:14:0e:f8:bd:1f:1a:eb:cc:d8:68:b2:f8:dd:88:78:2d:
         1d:51:80:bf:49:9c:c8:f6:c9:ca:68:aa:90:7c:64:b2:da:32:
         a4:15:39:8d:e4:b8:be:aa:00:87:14:55:a3:a7:b6:16:f9:e8:
         6b:89:4d:e5:bf:1b:01:79:b4:ea:ec:fd:91:bf:c3:39:27:74:
         08:10:28:14:85:f6:ce:f5:37:5f:df:f3:bb:6d:70:5e:25:92:
         ea:b4:44:fd:0c:53:60:38:01:f4:98:79:ac:ce:af:9c:a2:1c:
         de:f4:4e:88:74:39:40:82:17:c1:d9:ca:be:8f:73:dc:00:be:
         f8:4f:5e:ee:fb:ba:13:92:95:bf:7c:01:74:1e:fd:82:53:37:
         7a:59:65:50:b3:2b:c6:33:3c:d9:df:b8:4d:c2:a2:13:c6:5a:
         17:53:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org