Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32353a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a32353a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          VjzePSibiUvyKyNcKLZAH2z9NQc5t7do0OJpS+9cSkk=
Subject key identifier:   A8:70:3C:78:13:7D:5A:72:B8:D3:B2:17:71:7F:BB:B3:9F:5D:B6:5D
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       3908039AAE24A161965AF74E70F0228E43C30275
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32353a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Fri 08 Nov 2024 12:35:00 +0000
ROA not before:           Fri 08 Nov 2024 12:30:00 +0000
ROA not after:            Fri 07 Nov 2025 12:35:00 +0000
asID:                     262191
IP address blocks:        2800:b70:25::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:08:03:9a:ae:24:a1:61:96:5a:f7:4e:70:f0:22:8e:43:c3:02:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Nov  8 12:30:00 2024 GMT
            Not After : Nov  7 12:35:00 2025 GMT
        Subject: CN=A8703C78137D5A72B8D3B217717FBBB39F5DB65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:ee:d2:7d:62:25:ad:50:24:88:23:04:c0:
                    81:81:f0:35:19:86:03:1e:1d:fc:42:11:7f:08:dd:
                    82:d1:47:61:c1:c6:6c:91:37:6f:17:5e:52:69:b7:
                    fa:9a:5e:1d:49:70:c8:c9:a9:e4:95:09:2e:58:ea:
                    6b:c8:91:af:ad:4b:72:c0:f1:f0:86:9a:4c:ba:5d:
                    a5:0a:99:7f:3c:3f:db:45:84:9b:cc:72:d1:ce:5b:
                    de:31:88:d7:9f:1b:17:be:e7:19:b0:8c:57:9e:e2:
                    fd:8e:3c:a6:0d:1b:2f:54:30:c0:fc:98:b2:58:98:
                    26:ac:b5:e9:5d:73:e4:6e:b8:61:0b:56:24:7e:e8:
                    5b:36:93:74:6b:6a:5b:9a:50:d4:6c:19:e2:af:50:
                    20:2e:65:83:6c:38:48:92:3a:68:ed:52:a9:ce:45:
                    74:56:13:49:70:28:1f:37:f9:dd:b7:ec:61:ef:9a:
                    2c:e5:aa:f3:71:ef:e0:cf:02:e2:9f:83:4b:b2:1b:
                    88:fc:17:e9:af:1e:77:4b:87:c9:92:3b:36:95:df:
                    5c:ed:45:f8:6c:ce:87:e2:95:6a:8f:5a:62:fe:da:
                    ce:10:61:b6:9f:6b:09:54:42:62:e9:cf:63:f2:4c:
                    33:7e:1d:22:07:1e:50:c9:16:5e:4d:dc:28:e2:1d:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:70:3C:78:13:7D:5A:72:B8:D3:B2:17:71:7F:BB:B3:9F:5D:B6:5D
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32353a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:78:8e:39:17:3d:14:a0:aa:ee:6f:cc:6b:22:39:ec:d3:13:
         87:ed:3d:9c:e4:dd:2e:e4:da:7e:02:5a:60:f6:df:6b:7e:4a:
         24:cf:4e:95:64:59:01:68:55:fe:a3:c0:14:f4:9c:49:53:89:
         50:af:7b:7d:f6:07:2e:81:97:7c:e7:47:84:6b:9c:c4:73:5a:
         42:00:30:b2:c2:28:fa:a8:8d:06:9b:d8:09:db:0b:dc:a8:d6:
         21:6e:9f:e4:a4:f4:96:de:7a:77:75:9f:2f:62:73:f4:46:91:
         b6:b5:c0:11:d2:55:bf:53:03:61:e1:f1:dc:d5:5e:97:7f:e1:
         3f:c2:62:f5:e0:12:c1:e1:5c:26:f3:31:0d:05:72:ae:19:85:
         3f:d2:ac:27:0e:5b:23:c7:8f:fb:e9:3d:90:38:fe:50:83:bd:
         5a:28:55:1f:ac:ff:3c:67:87:1c:63:45:be:c1:cb:f6:35:ad:
         87:9c:f3:48:73:ee:ec:17:cc:7c:26:2d:af:81:d2:4e:98:c7:
         ff:e8:6f:1e:8f:76:a1:7a:83:28:d8:c7:59:2a:8c:69:f8:04:
         5c:51:03:38:a4:bb:ab:13:1a:15:cd:b2:6d:c4:5d:65:e3:31:
         e2:da:ea:6f:f3:10:00:4a:1a:8e:3d:53:15:97:0d:11:cf:81:
         26:b9:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org