Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e203237393531.roa
File:                     323830313a3135343a3a2f34322d3432203d3e203237393531.roa (raw, json)
Hash identifier:          F80Vsa+zM2xkO7s8YBp4LfHphwneYJQP2KB13oqOlB0=
Subject key identifier:   9E:65:6B:DB:A4:83:5B:89:97:E8:08:E7:C0:6C:46:51:0C:60:BD:7A
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       4CF90941FBBA6A02A249EDF089187496786FC4D8
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e203237393531.roa
Signing time:             Mon 04 Nov 2024 16:20:00 +0000
ROA not before:           Mon 04 Nov 2024 16:15:00 +0000
ROA not after:            Mon 03 Nov 2025 16:20:00 +0000
asID:                     27951
IP address blocks:        2801:154::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:09:41:fb:ba:6a:02:a2:49:ed:f0:89:18:74:96:78:6f:c4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Nov  4 16:15:00 2024 GMT
            Not After : Nov  3 16:20:00 2025 GMT
        Subject: CN=9E656BDBA4835B8997E808E7C06C46510C60BD7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:d7:40:c0:ab:48:81:58:90:f0:04:f1:fa:
                    51:e1:96:86:b6:ba:45:11:b9:05:8a:a9:e5:0d:89:
                    c4:70:8d:bc:2c:a8:93:73:8c:1f:1e:9c:1a:fd:64:
                    c8:9d:7f:d0:85:bb:bb:03:c3:ff:a5:91:6e:d9:81:
                    bd:ce:6b:69:6e:f8:0c:f6:14:14:c4:e4:58:29:5e:
                    4f:06:f8:b8:13:65:5e:5b:40:98:49:81:46:45:a7:
                    cc:8e:a6:34:8e:ae:46:1a:21:2b:4f:93:cb:fd:1d:
                    f5:b0:77:5f:7c:05:1e:49:41:8c:f2:ba:1c:a8:34:
                    79:aa:88:ed:9d:3b:33:a6:7c:2a:11:1b:79:1c:1c:
                    ce:73:97:04:f8:8b:45:ac:07:49:86:1a:fd:0c:42:
                    12:2e:9d:58:33:cf:5d:62:9f:a8:30:85:d7:3b:ff:
                    21:a3:5c:0b:ae:a5:3b:7c:c1:46:b1:f9:93:97:80:
                    1f:1a:04:a8:a7:6f:46:e6:68:3a:3c:0b:e5:f4:38:
                    e4:f0:66:fd:fb:ae:6f:cf:de:40:17:3f:51:6f:79:
                    13:e0:60:27:e2:2e:56:da:17:55:01:9b:d1:40:e6:
                    34:a3:b3:ba:c5:ca:73:85:a8:14:79:91:d3:48:aa:
                    d6:90:02:05:16:9f:b4:1f:a4:02:65:48:f9:19:46:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:6B:DB:A4:83:5B:89:97:E8:08:E7:C0:6C:46:51:0C:60:BD:7A
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/323830313a3135343a3a2f34322d3432203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:154::/42

    Signature Algorithm: sha256WithRSAEncryption
         bc:76:dd:cc:0b:de:6e:59:a6:48:d7:f3:05:c9:25:18:3f:3d:
         2b:c5:dc:b4:39:e8:54:59:79:96:c6:f4:47:71:25:4c:f7:a2:
         3d:a1:25:4d:ac:97:79:8a:a1:9f:a5:2b:77:44:6a:e2:20:dd:
         90:a7:84:96:76:a4:ba:46:19:9a:a6:4c:83:31:53:18:20:97:
         16:17:92:cc:4f:62:1f:b9:c0:44:b7:ba:a4:3d:40:d6:d2:1d:
         a7:27:bb:86:c5:49:91:ac:ea:c3:4c:a2:c5:c8:44:75:24:28:
         02:97:0d:fa:c5:0d:4d:49:93:6f:ae:50:27:ec:7f:38:0c:e0:
         8b:f0:f8:30:a6:7c:a3:30:af:d5:39:92:78:4e:58:75:5d:12:
         c9:b9:1b:b5:67:4a:02:13:7a:dd:e5:22:1b:a9:02:bc:a4:e3:
         23:7a:73:53:2c:74:54:57:ca:a7:29:dd:ce:3c:2f:1d:2e:25:
         60:6b:25:e6:e6:97:67:29:07:7a:4b:93:19:eb:57:47:2a:6a:
         aa:8a:23:3a:31:03:e6:ad:5d:b2:71:98:c8:1e:5b:9f:74:a0:
         3f:6e:5a:5f:33:e9:84:1a:e9:79:62:c9:ea:af:7b:39:f1:34:
         67:42:c2:8f:49:17:a8:95:5d:ad:6a:89:5c:f6:bf:b4:bc:3c:
         61:60:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org