Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa
File:                     323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa (raw, json)
Hash identifier:          Lo71gSpitVIhNW9yFA6k1bHNLRYH0yps5CBw9iYiSP4=
Subject key identifier:   EE:26:AE:90:7A:A3:BC:B0:CF:46:A7:42:34:78:CF:CB:05:7A:64:3B
Certificate issuer:       /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial:       0ABBD9CFCD8CC47286DCBBD3E7109E32FD9DAB45
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa
Signing time:             Tue 05 Mar 2024 18:03:10 +0000
ROA not before:           Tue 05 Mar 2024 17:58:10 +0000
ROA not after:            Tue 04 Mar 2025 18:03:10 +0000
asID:                     26506
IP address blocks:        2801:114:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bb:d9:cf:cd:8c:c4:72:86:dc:bb:d3:e7:10:9e:32:fd:9d:ab:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
        Validity
            Not Before: Mar  5 17:58:10 2024 GMT
            Not After : Mar  4 18:03:10 2025 GMT
        Subject: CN=EE26AE907AA3BCB0CF46A7423478CFCB057A643B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:f9:4b:a9:61:c1:c1:a4:71:8f:6b:ca:e6:
                    c0:2c:01:ab:25:c9:2c:3b:ad:51:d4:11:dd:80:2a:
                    3c:76:06:cc:75:f3:a3:58:37:04:d2:70:95:5a:8a:
                    49:f5:30:e2:55:d5:aa:65:21:ed:ab:c2:75:f2:21:
                    98:70:9a:f7:d2:f2:e7:f4:a2:cc:f2:d2:99:47:f6:
                    ba:b6:df:1f:0e:93:47:8b:4d:47:2e:27:cc:af:1d:
                    21:7e:95:a3:e6:ad:d7:d7:23:26:aa:43:a7:7d:f5:
                    f7:ea:80:2e:fb:b1:33:8a:e9:8c:66:f3:a9:13:52:
                    c1:03:c8:74:71:5d:04:fa:40:81:00:be:26:e1:12:
                    48:2e:71:91:8b:68:12:fd:86:88:10:0d:8d:a2:25:
                    13:50:a6:9e:50:2d:cf:2a:d7:7d:61:65:7d:d1:5e:
                    38:a4:e5:5a:4a:bc:b0:8b:5f:c1:f0:fa:5b:9a:09:
                    de:ec:a4:ec:0c:43:80:36:16:42:09:00:cd:05:d9:
                    5e:d3:d1:6d:27:53:a6:5f:66:72:10:90:bd:87:b5:
                    6b:5d:55:89:3e:cd:12:da:0d:69:ab:95:53:5f:76:
                    59:7e:89:20:f9:a4:19:2a:19:15:00:12:b4:1b:2c:
                    f1:a8:d0:56:56:06:a7:ca:0e:12:47:08:10:64:1c:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:26:AE:90:7A:A3:BC:B0:CF:46:A7:42:34:78:CF:CB:05:7A:64:3B
            X509v3 Authority Key Identifier:
                keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a383a3a2f34382d3438203d3e203236353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:114:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:15:ef:4a:a8:57:60:88:7b:69:69:ec:69:f9:2d:34:f4:31:
         1e:0b:b8:46:76:b5:91:2f:5f:f5:e9:68:37:ae:04:52:7c:ec:
         83:24:57:a9:f5:17:1e:9b:99:6e:dd:37:21:32:8f:aa:14:1f:
         39:47:c6:65:8c:00:bd:cd:e2:fc:82:99:43:7a:b2:61:64:ac:
         f4:a6:76:3c:a0:fc:3d:b9:58:ce:6d:09:22:ed:b1:0b:37:58:
         87:2a:07:a3:d8:97:34:a6:71:fc:60:ec:a8:bf:dd:77:dd:aa:
         09:61:07:ab:6d:80:13:ce:90:58:95:e9:60:b4:66:58:07:9e:
         a7:4a:48:2a:80:56:a1:ed:96:1e:5f:d5:a9:db:e6:d2:31:69:
         0c:cc:5b:d1:9a:db:a1:18:83:d4:65:1d:0d:24:6e:4e:f6:43:
         92:4a:7c:0d:29:5b:f6:cd:cd:b4:65:d5:82:3b:61:43:a6:15:
         0b:4f:3c:58:8b:79:21:06:64:66:e4:b0:a9:4b:ec:37:bf:c6:
         88:33:b3:19:64:65:e1:b7:e7:36:c4:b9:53:99:12:bb:01:5e:
         89:a3:80:0d:ca:e3:d3:0a:0f:68:01:78:29:2b:cc:38:41:0a:
         21:a6:f0:b5:11:8b:8b:b2:51:0b:36:b5:e8:09:9e:e9:63:64:
         8f:47:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org