Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203232383232.roa
File:                     323830313a3131343a3a2f34342d3438203d3e203232383232.roa (raw, json)
Hash identifier:          jjxRcWcyj8LmU1sxlHxqeymVMmuvaVkFzx3kMyQN4pQ=
Subject key identifier:   DB:9A:D1:C1:43:9C:28:E9:8A:24:6E:44:6D:BD:AF:C5:FE:BB:3E:1F
Certificate issuer:       /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial:       22E9AF0B4A0D3EF50A2901887D3E79864DE3572B
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203232383232.roa
Signing time:             Tue 05 Mar 2024 18:03:11 +0000
ROA not before:           Tue 05 Mar 2024 17:58:11 +0000
ROA not after:            Tue 04 Mar 2025 18:03:11 +0000
asID:                     22822
IP address blocks:        2801:114::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e9:af:0b:4a:0d:3e:f5:0a:29:01:88:7d:3e:79:86:4d:e3:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
        Validity
            Not Before: Mar  5 17:58:11 2024 GMT
            Not After : Mar  4 18:03:11 2025 GMT
        Subject: CN=DB9AD1C1439C28E98A246E446DBDAFC5FEBB3E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:2c:f4:0a:d7:76:d2:c7:9c:be:15:bb:28:
                    13:9c:0f:bc:eb:46:ca:cd:69:9e:64:07:16:bd:35:
                    d1:de:40:4b:82:e3:5d:f5:71:1f:29:85:bc:26:ba:
                    e4:1c:dd:05:dc:35:3f:66:50:f6:65:61:7b:71:8d:
                    7d:3f:d3:a9:c2:ed:6c:2b:67:07:af:ab:09:55:20:
                    82:44:45:5c:ca:f5:e2:46:af:f0:b2:2a:84:b7:2a:
                    6a:c3:6f:bb:14:7a:38:4c:dd:c0:93:c2:96:3c:47:
                    63:12:76:c2:dc:a5:5f:80:ea:fa:e3:fe:f0:02:56:
                    26:43:eb:9b:43:cc:bf:30:6b:f6:6d:03:15:01:ff:
                    62:88:fd:73:7b:8f:76:84:80:61:27:12:d2:4a:aa:
                    38:1e:01:e6:f8:8e:f8:2e:b0:33:5a:45:9a:a8:c7:
                    ee:39:ca:b8:7e:7a:7d:70:99:ae:23:8f:51:dc:26:
                    e3:de:ea:6e:23:d7:90:ae:1e:f0:bd:4d:03:1b:a4:
                    fa:50:9d:b5:ac:66:b7:9f:dc:24:fc:0d:5f:39:cc:
                    87:b3:b4:0f:6d:a7:4c:13:85:08:7b:2e:98:4e:df:
                    97:00:32:cd:4d:2a:7b:ab:ca:4d:80:21:73:8c:2f:
                    47:84:5e:e6:73:79:11:6f:95:a5:5e:2e:e9:8b:17:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9A:D1:C1:43:9C:28:E9:8A:24:6E:44:6D:BD:AF:C5:FE:BB:3E:1F
            X509v3 Authority Key Identifier:
                keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a3a2f34342d3438203d3e203232383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:114::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:6c:73:21:b7:34:78:e3:59:ca:4d:ce:74:8f:6f:b9:ca:d1:
         41:cb:7a:11:a1:53:2e:07:f3:e4:21:1c:f3:30:88:f2:8a:7a:
         d7:18:6e:c9:dc:1d:57:27:1f:6f:cd:03:b3:7f:0c:ff:8c:7b:
         d3:b7:78:88:83:49:9f:ce:37:2f:f3:f2:e1:c5:4d:75:02:26:
         2d:30:eb:92:f4:1a:94:ae:0f:0d:1b:eb:4d:c9:76:c5:f1:f3:
         dc:bb:71:41:80:8e:08:1a:cb:81:70:24:04:b5:64:0f:7e:1a:
         7c:8f:00:99:2e:9c:33:5f:56:5c:e0:7e:42:58:17:86:0b:24:
         cb:57:66:d7:8c:da:5e:8e:36:59:f5:dd:f0:9e:ba:32:60:b4:
         bc:d9:39:98:a7:d5:fc:84:6b:49:14:58:41:0c:15:0e:d3:10:
         8a:30:82:33:e1:0f:1b:34:5e:cb:34:0b:09:f6:b2:0a:9c:72:
         1e:86:fb:8d:7d:19:4e:c5:2d:b7:e1:46:6e:3a:99:bb:ff:88:
         2e:e9:61:eb:5f:70:24:8a:df:15:42:44:05:0d:71:16:2f:6c:
         7c:f2:b9:88:e6:fb:44:7d:f0:1e:4f:b9:b9:b3:ed:09:ab:c9:
         19:fa:d8:81:55:5f:bb:91:80:00:92:e6:6a:e9:54:3a:df:55:
         3d:54:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org