Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/323830303a3832303a313a3a2f34382d3438203d3e203130363937.roa
File:                     323830303a3832303a313a3a2f34382d3438203d3e203130363937.roa (raw, json)
Hash identifier:          HBqkSdJYUPTKLbNcAyq8Vk28CjHaWCbKbPSGS/XSX+Q=
Subject key identifier:   BC:7F:06:CB:E5:F1:9B:DC:53:87:04:5B:C3:B3:78:35:A0:EF:E3:FA
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       16B248B582719281CA11749D4E973DDD84719977
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/323830303a3832303a313a3a2f34382d3438203d3e203130363937.roa
Signing time:             Tue 05 Mar 2024 18:22:03 +0000
ROA not before:           Tue 05 Mar 2024 18:17:03 +0000
ROA not after:            Tue 04 Mar 2025 18:22:03 +0000
asID:                     10697
IP address blocks:        2800:820:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b2:48:b5:82:71:92:81:ca:11:74:9d:4e:97:3d:dd:84:71:99:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:03 2024 GMT
            Not After : Mar  4 18:22:03 2025 GMT
        Subject: CN=BC7F06CBE5F19BDC5387045BC3B37835A0EFE3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:94:83:f2:14:68:49:21:23:c9:7d:4b:b2:
                    05:00:87:9c:80:fc:36:cc:e1:25:d8:33:9f:bc:46:
                    2f:e1:f7:9e:3e:64:4a:b5:f7:aa:28:cd:60:24:d2:
                    8a:c5:af:3f:c7:c1:e8:21:8a:5d:0b:eb:64:60:b4:
                    13:14:3e:96:a3:8e:d2:ec:ff:f1:3a:5a:51:16:35:
                    2b:14:7a:27:ef:4e:da:c7:84:78:68:55:91:bf:83:
                    3d:0b:a0:84:c1:6d:af:5b:69:74:b5:a5:aa:9e:36:
                    b2:e5:7e:d2:83:f9:5d:8a:09:36:49:e9:f6:2a:d1:
                    72:37:c1:fe:18:e0:dd:e6:35:11:36:8b:52:b4:1f:
                    33:48:db:51:43:9b:18:1f:2c:6a:7b:b3:d7:69:96:
                    ce:ab:7f:30:57:3a:35:ab:ed:05:1b:17:da:07:2d:
                    1c:42:a7:50:b1:30:7c:15:61:a3:f7:97:4f:b9:5a:
                    96:3d:26:e3:28:7d:fa:a3:d2:53:14:a7:34:b2:fe:
                    98:58:20:f1:4f:a5:9d:4b:dd:78:43:05:db:51:70:
                    ea:ea:9c:51:a7:36:9f:d8:fe:dc:5c:85:45:06:71:
                    01:7c:c6:05:75:48:bc:b8:5e:ae:9d:b8:55:9c:cc:
                    04:0f:2b:fc:0a:b2:37:7e:ca:c3:40:b6:7f:1d:2e:
                    13:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7F:06:CB:E5:F1:9B:DC:53:87:04:5B:C3:B3:78:35:A0:EF:E3:FA
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/323830303a3832303a313a3a2f34382d3438203d3e203130363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:820:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:25:34:ce:85:30:95:16:6c:58:15:2a:0d:79:94:d9:dd:
         53:73:d7:13:28:f8:9a:94:2d:99:55:6f:85:b9:2c:51:f2:44:
         bd:e1:d4:b3:a3:31:c6:36:f1:a4:93:21:b3:e2:0f:58:98:4a:
         7e:b3:52:5b:26:70:f6:fa:a5:cb:20:dd:df:03:04:b0:a2:f6:
         30:3e:a8:ff:88:76:f6:e0:21:6f:ad:4c:84:47:d4:9a:38:16:
         c6:ee:30:ee:6f:4a:36:a0:57:0a:cc:21:11:79:94:5f:6b:eb:
         c8:bc:55:dd:4e:32:a2:43:24:71:42:09:c1:94:ef:85:28:51:
         76:7c:3b:f3:ef:a9:3e:b8:1a:99:5e:52:75:3c:a0:43:af:ef:
         85:c7:7c:41:62:c5:0c:74:eb:f8:c7:03:30:46:3a:e7:ed:c4:
         e4:f7:73:dc:b8:56:40:d5:9f:7a:21:a6:76:68:91:b9:f3:7d:
         9e:cb:96:44:e6:44:53:27:b7:25:38:7b:45:a7:54:5e:68:8e:
         6e:78:98:32:3b:42:b7:16:39:7c:d4:c2:c3:f4:c0:d7:6b:d5:
         3e:f2:5f:fe:45:45:ee:a4:be:c9:25:77:f8:13:3a:44:32:e6:
         68:6b:10:3b:00:6d:53:30:77:4c:47:ee:41:68:45:ae:76:94:
         c3:6c:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org