Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/323830313a31373a363030303a3a2f34382d3438203d3e20323633373138.roa
File:                     323830313a31373a363030303a3a2f34382d3438203d3e20323633373138.roa (raw, json)
Hash identifier:          CJpe5DYvzodxb+BsGeMRP9tOaO5eL1s5OJTHHM6VsMc=
Subject key identifier:   A5:DE:F0:B1:7B:37:98:E2:9C:1F:FD:E0:8C:72:9F:76:C6:7D:C9:D6
Certificate issuer:       /CN=74A6C6DAF3A2921015035571DAA0FE9317086F2A
Certificate serial:       178E66BB31A1784EA28221921ED15CEFADC6309A
Authority key identifier: 74:A6:C6:DA:F3:A2:92:10:15:03:55:71:DA:A0:FE:93:17:08:6F:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/323830313a31373a363030303a3a2f34382d3438203d3e20323633373138.roa
Signing time:             Tue 05 Mar 2024 18:22:40 +0000
ROA not before:           Tue 05 Mar 2024 18:17:40 +0000
ROA not after:            Tue 04 Mar 2025 18:22:40 +0000
asID:                     263718
IP address blocks:        2801:17:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8e:66:bb:31:a1:78:4e:a2:82:21:92:1e:d1:5c:ef:ad:c6:30:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74A6C6DAF3A2921015035571DAA0FE9317086F2A
        Validity
            Not Before: Mar  5 18:17:40 2024 GMT
            Not After : Mar  4 18:22:40 2025 GMT
        Subject: CN=A5DEF0B17B3798E29C1FFDE08C729F76C67DC9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:b3:60:bf:9c:06:ca:8e:b7:a0:48:09:ef:
                    d1:c0:69:72:eb:cf:0b:4c:e5:ab:ad:b9:57:0b:62:
                    15:3f:d4:96:3e:3e:cb:5c:d9:56:71:ad:bf:83:8d:
                    ff:0c:44:0d:35:96:a2:a4:07:62:07:26:3f:84:53:
                    40:ea:b7:13:ee:73:0f:77:c9:92:61:79:24:2f:51:
                    94:02:34:1c:5f:9e:62:24:1f:ce:54:52:f8:f9:ac:
                    bc:b2:6e:2d:91:8a:c7:16:5f:06:3e:13:29:55:43:
                    b3:03:39:a3:13:10:9c:e7:51:04:e4:4a:6e:8f:52:
                    d6:5b:ee:a8:94:94:73:46:34:f0:ad:16:5e:09:b9:
                    fe:ca:aa:79:a2:79:1b:b6:d1:64:9c:ff:b7:7e:98:
                    c7:11:0e:c9:c9:62:ad:4e:16:eb:ed:d1:2f:c6:7f:
                    99:f6:03:cb:57:b3:85:5b:60:5e:cd:df:b3:9e:d4:
                    b9:a0:a9:42:8a:33:04:0b:0a:83:f3:05:20:dd:4a:
                    e0:52:f3:a7:c5:11:b4:87:37:f4:91:b7:55:44:dd:
                    cd:00:ba:40:fb:f9:e1:57:e4:a7:80:2b:0b:c8:c0:
                    9c:a2:cb:fa:13:ba:c7:35:d4:77:f3:1f:07:ba:a9:
                    b0:d5:d9:0d:0d:8e:da:3b:53:c3:d7:a9:41:89:7d:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:F0:B1:7B:37:98:E2:9C:1F:FD:E0:8C:72:9F:76:C6:7D:C9:D6
            X509v3 Authority Key Identifier:
                keyid:74:A6:C6:DA:F3:A2:92:10:15:03:55:71:DA:A0:FE:93:17:08:6F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/323830313a31373a363030303a3a2f34382d3438203d3e20323633373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:82:07:3f:81:20:9f:e8:7f:2c:5e:9c:71:9a:ab:98:4b:67:
         15:53:05:bf:aa:88:90:de:0f:17:6f:06:86:dc:4e:66:90:d6:
         ad:53:8c:b2:f2:66:78:de:32:09:be:fe:ee:79:2c:db:01:24:
         52:5d:d1:13:54:00:bd:d6:5c:70:c8:99:b1:4e:eb:27:bf:3f:
         2d:09:61:3b:a3:8f:a9:a9:fb:d1:23:46:e9:c7:1a:a9:8d:82:
         16:79:20:55:0c:db:7c:00:90:59:58:7b:bc:a7:c0:d8:63:31:
         36:85:f0:1e:f9:f7:34:13:9e:c9:02:09:72:50:6c:33:14:11:
         e2:39:f0:28:e4:84:88:59:e6:db:6c:5a:4b:96:f1:98:ae:64:
         bc:58:4c:57:c1:3b:9d:d8:ba:c8:80:3d:c3:16:22:63:d9:3a:
         1e:4d:44:ee:e2:fc:ac:fa:7d:d2:c0:9b:18:92:da:63:e3:ef:
         8c:3c:f3:74:44:07:03:89:0f:a0:43:2a:a3:e6:71:ee:a2:7d:
         a7:bb:c9:80:44:0a:1e:a3:1a:da:cc:7d:1b:d6:26:d8:7d:98:
         c7:4d:d6:95:7c:35:63:d4:e9:20:e3:d6:4d:36:3d:35:e9:2b:
         78:55:20:69:8b:88:e9:69:39:d2:da:3e:22:f0:2d:8a:e6:39:
         bb:09:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org