Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/323830313a3164363a3a2f34302d3430203d3e20323731383333.roa
File:                     323830313a3164363a3a2f34302d3430203d3e20323731383333.roa (raw, json)
Hash identifier:          n2R4AUjI/XbUW0z8VBuRRsRPwS9lbgISvwjl7BWHouw=
Subject key identifier:   B2:17:C1:F8:3B:45:D3:AD:86:2B:07:EE:C2:F0:07:3A:80:4E:D9:F8
Certificate issuer:       /CN=4A648B9AA824EEB55A850CA3644D1FABA947AC35
Certificate serial:       719F4F256864B72D6544E5EB50EE77280EE15F22
Authority key identifier: 4A:64:8B:9A:A8:24:EE:B5:5A:85:0C:A3:64:4D:1F:AB:A9:47:AC:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/323830313a3164363a3a2f34302d3430203d3e20323731383333.roa
Signing time:             Tue 05 Mar 2024 18:03:45 +0000
ROA not before:           Tue 05 Mar 2024 17:58:45 +0000
ROA not after:            Tue 04 Mar 2025 18:03:45 +0000
asID:                     271833
IP address blocks:        2801:1d6::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9f:4f:25:68:64:b7:2d:65:44:e5:eb:50:ee:77:28:0e:e1:5f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A648B9AA824EEB55A850CA3644D1FABA947AC35
        Validity
            Not Before: Mar  5 17:58:45 2024 GMT
            Not After : Mar  4 18:03:45 2025 GMT
        Subject: CN=B217C1F83B45D3AD862B07EEC2F0073A804ED9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:11:33:df:13:7e:9c:48:64:bf:6b:eb:ae:
                    b7:54:a2:1a:56:d3:0e:96:5d:d6:3d:f7:79:ca:91:
                    59:df:55:89:c7:22:a4:50:ae:b6:f0:42:9e:a5:2b:
                    c9:7c:b5:19:23:87:2d:cf:ab:50:d0:57:72:cf:80:
                    82:93:1c:7a:27:82:3a:36:1e:8b:89:02:97:0d:a7:
                    ad:83:f4:b9:ee:21:5e:e2:51:6f:ec:6a:37:1c:5b:
                    d2:89:34:43:b9:cd:7e:6e:cc:41:0c:92:7a:7b:7f:
                    46:da:3d:37:89:4f:68:9b:6f:02:fe:71:0e:c2:58:
                    4c:6a:4c:6f:4f:8c:6b:3d:ef:05:05:c4:8c:52:a1:
                    43:bb:61:45:94:f6:2f:37:f1:d3:21:70:fa:f8:cc:
                    f5:82:65:b9:36:1f:23:4b:d6:5b:ed:da:28:33:06:
                    ee:c3:4b:ac:5b:1b:1f:5e:07:6b:32:d3:c6:59:57:
                    2f:75:49:48:33:a3:8b:ad:19:ce:57:8a:70:73:01:
                    34:f7:c5:15:24:b5:49:6c:79:ac:50:9d:fe:82:79:
                    bb:f1:a4:73:f7:15:a8:6f:13:c3:bb:09:3f:e5:24:
                    08:ad:1e:87:17:5f:31:12:3f:e0:ce:37:69:24:7b:
                    02:a5:aa:d9:46:6f:26:b8:ec:54:3b:e3:f2:80:c0:
                    e0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:17:C1:F8:3B:45:D3:AD:86:2B:07:EE:C2:F0:07:3A:80:4E:D9:F8
            X509v3 Authority Key Identifier:
                keyid:4A:64:8B:9A:A8:24:EE:B5:5A:85:0C:A3:64:4D:1F:AB:A9:47:AC:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A648B9AA824EEB55A850CA3644D1FABA947AC35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2780D2BD7F6D2F137999F69B00097CA965EE96A7DCD9F62E5AD59CD74E5757A9/0/323830313a3164363a3a2f34302d3430203d3e20323731383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d6::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:92:78:fa:a3:cd:00:09:81:79:e8:5f:02:24:fb:a8:89:
         d0:7e:5a:a5:37:bc:ec:1c:bb:cf:d1:9e:7b:ff:ee:d6:05:fc:
         81:f4:6f:4b:51:3a:47:ab:1d:20:6e:e3:74:25:f0:4b:34:96:
         2b:58:01:d3:17:04:e6:c1:74:da:be:80:42:23:f5:69:e4:38:
         b6:a9:e3:6b:0d:0f:61:09:29:cf:48:03:12:b4:42:96:3a:27:
         62:c7:c2:9b:7b:e6:2e:10:24:07:c8:20:b6:95:8f:ad:0a:fb:
         6c:fa:ab:c6:96:fc:ce:35:81:9a:53:e1:19:46:12:b6:ef:76:
         d3:92:9c:d5:09:3b:0a:8e:84:4a:28:fa:4d:1f:1f:a4:7e:78:
         39:79:a2:5c:1a:d1:6c:5a:fb:a1:40:c6:87:77:89:39:23:a1:
         8b:15:0a:1a:b2:1b:d9:65:61:11:60:73:ac:56:97:b7:2f:ef:
         cf:ee:eb:4d:da:33:2d:58:9c:82:72:c5:4e:a2:b8:6c:da:33:
         8d:95:17:50:6f:46:4f:01:3d:e8:3b:4a:21:74:7e:eb:a4:05:
         bc:d9:c8:b3:5d:a1:2a:5a:2d:2b:a4:d9:75:c5:f9:1c:9a:7b:
         5b:f1:31:50:17:32:a0:7e:6b:6c:27:a8:46:10:05:fb:c4:c5:
         9d:64:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org