Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a323a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3130613a323a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          59x1CGqX3RudOo5L7zFQMuZjH9YX0YMhtDKAvtbdCa0=
Subject key identifier:   00:80:FE:78:EF:45:4A:48:79:5E:72:BE:51:90:0F:D6:CD:EB:69:F0
Certificate issuer:       /CN=511D240C04FA2233FA6D8D0DDB140BDADA90FFB7
Certificate serial:       679EBA31D4309EFF19FBC26FA67B24F01A0CCADE
Authority key identifier: 51:1D:24:0C:04:FA:22:33:FA:6D:8D:0D:DB:14:0B:DA:DA:90:FF:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a323a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:20:32 +0000
ROA not before:           Tue 05 Mar 2024 18:15:32 +0000
ROA not after:            Tue 04 Mar 2025 18:20:32 +0000
asID:                     19429
IP address blocks:        2801:10a:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9e:ba:31:d4:30:9e:ff:19:fb:c2:6f:a6:7b:24:f0:1a:0c:ca:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511D240C04FA2233FA6D8D0DDB140BDADA90FFB7
        Validity
            Not Before: Mar  5 18:15:32 2024 GMT
            Not After : Mar  4 18:20:32 2025 GMT
        Subject: CN=0080FE78EF454A48795E72BE51900FD6CDEB69F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:ef:8f:81:02:f9:d3:e8:7f:e3:83:9d:1a:
                    33:e6:f2:5b:c6:41:a5:d2:e8:cb:0b:6e:fa:23:08:
                    db:01:1a:7a:64:26:de:84:10:6c:99:68:f7:56:a4:
                    e5:8e:da:ec:11:22:b4:93:bd:aa:84:ef:cf:41:99:
                    6e:9e:66:5f:49:d3:bd:a1:da:1e:85:48:15:94:ba:
                    1d:34:ab:9a:6f:c2:fa:79:db:48:86:1f:35:cb:b6:
                    06:84:ec:cb:fa:d8:a8:5b:aa:de:54:f9:3b:c8:a1:
                    fa:ef:6e:88:17:01:e4:34:01:b5:49:68:bb:c6:2e:
                    39:b6:20:e5:8c:e7:47:38:6d:51:97:45:5c:4c:72:
                    9d:cf:d5:2e:77:14:31:a3:62:ce:9a:95:cb:47:ce:
                    38:77:61:09:6d:63:4f:1a:9d:c9:22:2f:44:ac:65:
                    29:01:77:96:7e:a8:c5:ba:e2:d4:86:e9:4d:3c:63:
                    39:67:39:a9:07:71:62:98:1d:47:b2:28:23:54:20:
                    00:cb:d6:c8:f5:55:31:d6:f6:10:7e:27:9b:1c:7b:
                    a8:8f:05:cf:67:35:4f:5f:bc:46:02:1f:72:f1:ef:
                    1c:1a:7c:03:72:09:c0:8f:60:10:0d:9a:d6:e4:09:
                    16:44:b9:23:d1:a4:c0:bb:13:39:af:4b:fa:42:7c:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:FE:78:EF:45:4A:48:79:5E:72:BE:51:90:0F:D6:CD:EB:69:F0
            X509v3 Authority Key Identifier:
                keyid:51:1D:24:0C:04:FA:22:33:FA:6D:8D:0D:DB:14:0B:DA:DA:90:FF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a323a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10a:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:bc:7a:13:2b:23:4f:b1:13:98:54:f3:11:91:8a:1d:c1:
         33:14:ae:c3:1d:8e:d6:95:3e:27:1d:a4:6f:25:2c:22:84:43:
         01:63:36:bc:d6:ca:64:c8:a3:e0:f7:a5:79:f9:cb:df:e9:d1:
         e8:40:f8:d5:28:33:b2:93:57:00:26:4b:3c:ee:f5:c5:c0:78:
         8c:62:56:64:84:fa:e4:88:6e:7a:e9:24:39:dc:b0:26:3c:24:
         a9:75:65:93:f1:5a:c8:56:ef:c3:04:f3:ea:2e:51:70:56:ba:
         27:cf:b0:97:ae:a5:60:cc:86:b8:a1:d3:69:3f:46:a9:31:fa:
         23:dd:b9:e8:27:88:da:06:f1:cf:9b:0e:5d:93:70:43:8f:a7:
         32:a5:e9:ea:4a:f0:08:6e:02:61:19:19:1d:26:c8:00:e0:26:
         6a:03:13:f5:90:76:8c:4c:8f:57:08:e3:e1:48:70:bb:bb:ec:
         f8:aa:43:0f:ea:a6:59:3f:a1:13:96:6e:23:93:34:2d:54:02:
         ac:a4:13:3f:5f:2b:4e:dd:8b:15:4d:a1:70:d7:6f:a2:46:57:
         f2:cf:49:05:63:77:32:c7:7f:2a:fe:f6:83:98:b7:96:d4:54:
         1a:8c:69:7a:dd:51:a0:a9:e0:33:75:23:e5:bb:f6:f1:2c:e0:
         73:cb:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:31 2024 by rpki-client on console-fra.rpki-client.org