Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa
File:                     323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa (raw, json)
Hash identifier:          cGSF95l5v9Av6z50bWYZl54/Dqni0i9/deiOKOFSo/k=
Subject key identifier:   34:AE:70:4A:07:28:74:BC:67:DB:CB:3D:CB:81:53:B0:FA:4D:22:21
Certificate issuer:       /CN=F9704454BEEAA5607C017F2A685262F0B549B68B
Certificate serial:       76C27530361D1AB5B074EB1D6BB3CBD8264CAD8D
Authority key identifier: F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa
Signing time:             Tue 05 Mar 2024 18:16:10 +0000
ROA not before:           Tue 05 Mar 2024 18:11:10 +0000
ROA not after:            Tue 04 Mar 2025 18:16:10 +0000
asID:                     263217
IP address blocks:        2801:19:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:75:30:36:1d:1a:b5:b0:74:eb:1d:6b:b3:cb:d8:26:4c:ad:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9704454BEEAA5607C017F2A685262F0B549B68B
        Validity
            Not Before: Mar  5 18:11:10 2024 GMT
            Not After : Mar  4 18:16:10 2025 GMT
        Subject: CN=34AE704A072874BC67DBCB3DCB8153B0FA4D2221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:91:da:f5:30:39:99:dd:cc:7c:07:ce:be:
                    26:50:3d:6f:48:b9:62:5e:60:be:16:f5:6d:12:60:
                    f2:6b:ff:99:59:79:1e:06:67:83:25:d8:33:ef:d9:
                    44:67:ad:87:41:06:40:97:92:a4:d6:aa:ef:8b:7c:
                    b7:65:24:0b:a8:75:0f:71:06:90:64:85:c7:02:63:
                    09:98:fa:be:b8:2e:bd:1a:5c:9e:c9:3f:b2:5a:b8:
                    04:26:e1:90:77:e4:fe:0a:07:20:7f:66:5d:6d:5f:
                    14:12:14:70:a0:b5:d5:a2:cd:84:38:26:8e:06:0a:
                    4f:e3:45:b4:26:d1:96:20:50:2f:9b:79:ff:62:34:
                    89:02:f4:d6:e1:5a:23:27:9a:f8:02:1c:e8:3c:55:
                    a9:08:02:25:d0:25:9e:99:5d:e5:90:fd:cd:ca:ee:
                    fb:ad:98:aa:e9:20:71:fa:b3:a9:ae:b6:ec:58:88:
                    6f:55:33:88:0d:10:92:f8:3b:36:e7:c2:df:71:bb:
                    2c:cb:92:94:8e:fb:04:7e:72:05:b7:f6:88:d5:df:
                    50:66:84:81:b1:89:ea:e5:1b:e4:9b:ab:2b:5d:85:
                    aa:95:1c:ff:9c:5f:dd:bc:21:40:d3:49:07:ac:74:
                    2c:39:30:4d:31:ca:f3:0e:a8:7b:db:f0:e5:6d:0c:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AE:70:4A:07:28:74:BC:67:DB:CB:3D:CB:81:53:B0:FA:4D:22:21
            X509v3 Authority Key Identifier:
                keyid:F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/323830313a31393a633030303a3a2f34382d3438203d3e20323633323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:ae:5f:3d:2a:5e:83:45:c3:e3:ab:73:5a:c9:35:5f:75:ea:
         e6:8d:05:6c:a8:9d:c2:0b:1e:e8:fc:2f:b5:a7:99:f0:be:bc:
         7a:06:a2:f2:eb:51:e7:41:93:30:90:9f:71:09:e4:af:5d:8c:
         65:4b:c7:2a:4d:ad:0b:7c:b1:79:6f:84:1a:59:98:22:6d:c2:
         fa:06:8d:25:ee:c6:42:25:76:3e:9d:ff:bf:ef:a2:6a:b3:66:
         c3:de:a7:bf:8e:08:61:7d:02:57:5d:9c:2f:c7:19:2b:c7:b8:
         c3:82:18:9a:63:32:0f:c7:ab:df:3f:1b:11:53:ae:e5:97:56:
         1b:45:71:51:f7:72:7a:e8:a0:91:75:50:1a:f1:f8:7e:2c:b2:
         22:a0:ef:67:c1:60:9a:96:50:e3:3e:3d:f3:a2:71:d9:c9:66:
         ba:81:77:6f:30:7f:7b:8d:8f:e2:40:ac:1f:64:25:d2:6e:20:
         4f:0b:ab:51:98:c9:df:18:97:c7:a5:3a:14:12:e4:ae:0a:aa:
         bd:b4:89:eb:c5:a5:82:5f:cb:4a:d8:4b:c6:77:02:6a:18:31:
         3c:4e:ef:7e:64:69:f3:95:2a:45:d4:35:56:c9:ca:13:83:34:
         ed:d9:9e:14:90:da:eb:32:c4:74:7d:97:32:c6:c4:87:e0:ec:
         5d:82:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org