Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31353a343830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          pUj0nbY9pvvsHUdnMIIHrGz6U1WC+ZN1GS8pf4l76eI=
Subject key identifier:   18:F3:0F:8D:0B:33:72:C4:D7:4C:9A:2C:F3:0C:A7:E9:DA:52:F3:64
Certificate issuer:       /CN=B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40
Certificate serial:       3D87B21EA89CFE8D306EDAD18AA0E8C1AF52EF55
Authority key identifier: B7:FA:9D:28:81:EC:FE:3F:0A:3B:0F:EC:F2:34:D1:87:FD:1F:6F:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:51:56 +0000
ROA not before:           Tue 05 Mar 2024 17:46:56 +0000
ROA not after:            Tue 04 Mar 2025 17:51:56 +0000
asID:                     19429
IP address blocks:        2801:15:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:87:b2:1e:a8:9c:fe:8d:30:6e:da:d1:8a:a0:e8:c1:af:52:ef:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40
        Validity
            Not Before: Mar  5 17:46:56 2024 GMT
            Not After : Mar  4 17:51:56 2025 GMT
        Subject: CN=18F30F8D0B3372C4D74C9A2CF30CA7E9DA52F364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3b:35:0b:04:58:c5:25:e3:59:07:b4:8f:16:
                    ac:e3:f5:19:64:fb:ca:09:d7:ad:fc:c7:03:5a:1e:
                    e2:91:05:d8:f5:72:5e:86:8d:c1:bb:8d:e5:e5:b8:
                    90:a8:aa:dd:a6:76:3b:75:f4:25:82:1e:93:6e:51:
                    a5:2f:46:d5:ef:81:95:23:8e:9b:a6:f3:bc:c8:c2:
                    50:c5:cb:d7:a9:05:c8:01:63:e5:a9:cd:9c:bf:8d:
                    0e:68:23:5d:70:a3:ad:28:32:a5:16:e9:6c:d1:52:
                    83:3b:24:1d:d4:88:41:5d:64:8b:68:ed:50:68:15:
                    99:14:f4:d6:3b:da:e3:56:1e:9a:4e:93:db:41:57:
                    d4:cd:2b:ab:74:67:55:1c:2d:e4:ae:44:ea:30:3a:
                    f7:71:48:81:db:24:9d:ca:ab:5c:76:57:ab:5f:26:
                    12:8b:c3:77:9d:32:cd:85:7c:f3:d8:18:a5:96:64:
                    ee:19:09:39:39:8c:01:8b:10:01:2a:2d:00:9a:9e:
                    74:ac:8f:7d:da:ce:95:ef:7a:7e:bb:1e:b7:69:a5:
                    79:82:76:75:b1:a4:85:26:82:4b:3a:c7:1e:d9:1b:
                    61:66:88:4e:5b:dd:ed:13:63:5a:22:21:74:54:6c:
                    7c:2d:ff:a3:bc:a1:e1:70:1d:1e:f6:81:71:7c:3f:
                    cb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:0F:8D:0B:33:72:C4:D7:4C:9A:2C:F3:0C:A7:E9:DA:52:F3:64
            X509v3 Authority Key Identifier:
                keyid:B7:FA:9D:28:81:EC:FE:3F:0A:3B:0F:EC:F2:34:D1:87:FD:1F:6F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7FA9D2881ECFE3F0A3B0FECF234D187FD1F6F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2948BDBD53942318E0C496853D24C1D70E673D0FA3A2E28669B66579722000C7/0/323830313a31353a343830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:8c:7a:6b:69:3b:12:66:6e:98:9a:bd:12:87:48:d3:e4:
         ef:42:81:f8:91:af:67:1e:ab:f7:c0:7c:4f:01:00:49:91:01:
         fe:3e:d4:a9:bc:f2:3a:39:a3:60:5b:01:b7:d6:88:28:15:47:
         6c:4d:ac:0c:6e:77:a4:dd:b8:5f:75:db:50:e6:91:15:c9:bf:
         38:4c:e3:0a:c3:fc:1f:b8:72:28:ba:25:45:18:a2:c2:f0:84:
         24:6e:a0:ca:33:3a:d6:d1:1b:a4:32:aa:f7:d9:44:87:65:8e:
         36:40:ce:f7:42:37:c7:04:30:68:7c:bf:c4:c7:56:87:6a:a8:
         da:1a:03:22:a8:bf:9c:0a:5a:1d:22:bd:c3:fb:60:61:14:f9:
         a5:23:76:6b:70:b7:9f:8e:98:91:ef:cb:2f:62:69:ab:5a:3b:
         bd:d3:cd:fe:df:c1:3b:3e:dc:47:fc:50:16:bf:fe:ca:f5:0f:
         47:b9:e5:08:99:79:c7:96:f2:9a:4c:dd:8a:a2:d9:37:a6:88:
         b4:37:8a:2a:6e:fb:34:17:c5:b0:08:93:6d:37:4b:98:ee:10:
         e3:bf:4e:8e:5a:93:70:96:ce:01:24:00:b9:27:25:ce:04:89:
         b2:df:48:c9:0c:79:05:df:65:72:fb:09:7c:f8:62:55:52:91:
         d3:7f:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:36 2024 by rpki-client on console-ams.rpki-client.org