Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3630313a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3630313a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          6YPH6HDoy83o2lSVzpolJ3U3K2wUwJMesDJ/sbM2Qf8=
Subject key identifier:   79:52:DB:42:72:7B:EE:AD:5A:F7:D1:FF:E5:2A:2D:38:C1:90:87:BC
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       6BBEA0866B61FDCBDB82616ED2868E963EDCD1A2
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3630313a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:11 +0000
ROA not before:           Tue 05 Mar 2024 18:11:11 +0000
ROA not after:            Tue 04 Mar 2025 18:16:11 +0000
asID:                     262191
IP address blocks:        2800:b70:601::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:be:a0:86:6b:61:fd:cb:db:82:61:6e:d2:86:8e:96:3e:dc:d1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:11 2024 GMT
            Not After : Mar  4 18:16:11 2025 GMT
        Subject: CN=7952DB42727BEEAD5AF7D1FFE52A2D38C19087BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:77:89:50:a6:95:12:28:86:c9:33:6d:4f:
                    98:ad:55:0b:9b:2b:c9:6f:8f:64:fd:6c:c8:25:a7:
                    76:77:fd:bd:f5:4e:9c:90:3b:b7:48:50:aa:a4:05:
                    51:20:fe:a3:11:0b:88:7f:ed:12:74:9c:7e:e9:11:
                    8d:2e:34:41:fc:d2:28:4b:65:1e:3f:13:09:26:22:
                    85:00:39:e8:02:e0:4a:dc:da:c7:bd:45:d5:85:f3:
                    1f:0a:80:bf:88:f9:fa:b6:6d:79:bd:e8:18:59:54:
                    02:8b:bd:e3:c1:a2:77:d1:b4:c9:f2:45:df:58:21:
                    6b:4f:af:63:06:72:5e:0b:8b:6f:b6:d7:31:99:14:
                    d8:f9:4b:07:52:f0:97:4d:39:ed:bd:d1:7b:21:80:
                    c4:07:21:e1:d9:65:58:64:15:38:bd:bd:c6:71:cf:
                    ca:47:9f:92:87:b5:09:2c:36:41:cb:3f:9b:ce:3a:
                    ba:5a:be:54:2a:58:e0:d2:48:60:9d:ef:84:bb:09:
                    f0:6d:b9:08:1c:b7:1a:8a:39:69:c3:48:d0:a0:de:
                    78:e7:0d:60:f6:fc:dd:30:a6:68:68:2d:62:6e:d5:
                    b6:d9:09:a7:15:ab:6f:2d:1d:02:9a:19:0b:d1:22:
                    f0:4a:80:8b:7f:57:c7:75:e1:11:28:6b:51:82:49:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:DB:42:72:7B:EE:AD:5A:F7:D1:FF:E5:2A:2D:38:C1:90:87:BC
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3630313a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:601::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:fb:a6:1e:27:de:55:94:75:3c:ab:bb:1c:38:69:f5:87:
         68:e9:98:17:e4:9e:6a:16:d7:9d:da:98:1e:e5:81:c4:79:c4:
         37:65:02:a2:76:40:a8:4d:2a:2f:28:43:c9:8f:a4:3a:85:41:
         93:65:dc:94:f8:0e:e7:91:c3:8e:79:79:ed:29:58:1f:af:a2:
         49:d6:29:1e:76:f5:3e:f9:e1:90:d9:ee:b6:88:4e:4c:33:fb:
         85:c0:98:18:f7:c4:25:2e:9c:56:c7:ae:07:0c:6f:19:3c:69:
         f6:cf:50:f4:a3:71:d7:ba:15:e6:89:fc:aa:2c:95:85:e6:75:
         16:3c:22:2d:bb:de:46:8c:f9:4b:f7:25:ac:cd:fc:ed:55:a6:
         82:3c:c4:92:85:f6:eb:92:b8:f1:0a:20:a0:1b:dc:6c:46:4a:
         30:5c:d8:56:26:fd:ae:1a:b6:99:19:ef:72:1d:5b:ed:b1:10:
         c7:7f:b0:73:21:16:7b:f4:8e:84:bf:b0:2c:93:e2:81:63:a2:
         88:2b:43:33:a4:84:80:46:5e:bb:59:8a:ff:67:6f:28:25:51:
         5a:45:56:69:38:48:40:3b:32:ec:e4:d3:4d:97:85:5f:32:16:
         c0:3b:26:e1:bd:8d:05:28:e7:f0:3a:14:37:8a:e9:34:63:69:
         ef:5c:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:13:48 2024 by rpki-client on console-ams.rpki-client.org