Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          cvOfyiLl5swBiECGnjH5T/8CRHVLzYTZxCeqk39IfHU=
Subject key identifier:   5D:64:62:92:4D:87:0B:BE:81:F7:E9:CF:31:C9:0D:A3:B6:EB:BD:A4
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       066DA546DD87D783F0E2C690232AAF3F40842018
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:13 +0000
ROA not before:           Tue 05 Mar 2024 18:11:13 +0000
ROA not after:            Tue 04 Mar 2025 18:16:13 +0000
asID:                     262191
IP address blocks:        2800:b70:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6d:a5:46:dd:87:d7:83:f0:e2:c6:90:23:2a:af:3f:40:84:20:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:13 2024 GMT
            Not After : Mar  4 18:16:13 2025 GMT
        Subject: CN=5D6462924D870BBE81F7E9CF31C90DA3B6EBBDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:1e:36:bc:ab:78:ca:62:51:e5:8f:2c:dc:
                    dc:97:44:ce:80:65:1c:f0:44:9b:49:be:34:08:f4:
                    37:ca:ea:44:1b:1b:58:80:c0:55:6b:1f:74:1f:4b:
                    e3:47:de:d8:fb:07:33:9b:81:84:62:61:c3:62:12:
                    9c:d6:a1:f2:d1:bb:d6:60:e2:a8:a3:72:90:6c:78:
                    c1:23:42:bd:38:d1:6b:75:ce:95:00:bf:ad:86:8f:
                    76:08:0e:0c:27:7e:b7:9e:80:c7:33:8c:2b:86:19:
                    40:9c:99:cf:93:db:11:0f:de:bb:52:8f:43:eb:cc:
                    7e:d5:b1:90:fa:58:e3:b9:09:62:ee:00:ef:87:6e:
                    83:2d:fe:8e:33:44:2a:65:0c:ee:66:14:46:62:fd:
                    c4:59:41:cb:0c:b4:5a:19:4f:48:9b:4b:e6:a3:cb:
                    21:ba:b2:7b:ed:dd:9f:f7:47:e7:ea:6f:4e:c8:95:
                    35:5e:1d:86:47:3e:2f:fe:86:8f:58:bc:54:06:40:
                    f3:46:c2:02:e1:87:55:21:c6:99:fd:5e:04:83:bb:
                    5e:7b:85:a4:96:38:13:1c:ac:34:68:f1:df:60:00:
                    ec:fb:77:6e:a2:9e:0e:3a:a5:ad:89:13:71:a2:13:
                    c3:ad:1d:93:13:3a:bc:dd:76:4b:2e:c9:6f:0f:f7:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:64:62:92:4D:87:0B:BE:81:F7:E9:CF:31:C9:0D:A3:B6:EB:BD:A4
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a613a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:14:c9:1e:58:ed:f1:89:52:9e:fd:7a:98:2b:dd:ae:d0:
         bb:c0:1e:d5:c3:ac:70:4c:ba:0f:fe:3d:4d:5e:55:1d:5c:22:
         f6:c6:15:eb:9a:07:28:f7:46:5a:13:f5:0f:5e:21:0e:33:63:
         ef:4a:9d:ee:04:28:4f:b4:f8:10:b1:82:7c:eb:5f:81:5f:3f:
         9f:0d:23:b0:9e:6c:fe:bd:bf:ff:dc:bc:f8:63:66:91:d8:39:
         36:e9:ad:14:16:6b:8d:43:93:1a:42:21:08:14:9f:42:09:fb:
         09:dc:34:ac:35:61:10:57:16:bb:e3:8c:3c:da:60:39:a0:86:
         84:10:82:c4:7e:b6:b2:64:62:00:f6:cf:48:6b:9b:83:48:66:
         83:68:bf:0c:e9:83:d2:af:6d:d2:2f:4f:57:65:88:84:af:e7:
         1b:db:85:1e:1f:2a:93:5e:d3:5e:c4:68:de:1e:b0:66:65:e1:
         ee:9c:3c:0a:d0:cb:09:d2:ba:9b:4e:a7:cd:84:b5:65:d4:d4:
         42:97:16:33:fd:5f:e0:a7:81:79:5d:8c:03:2c:72:da:9e:14:
         f4:28:2a:53:b8:6c:ee:7a:6c:3b:80:34:d3:4d:04:41:31:77:
         4a:f2:92:ec:3d:d5:cc:e6:9d:5c:41:c0:85:96:83:c2:87:03:
         68:75:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org