Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/323830313a31363a643030303a3a2f34382d3438203d3e20323635363531.roa
File:                     323830313a31363a643030303a3a2f34382d3438203d3e20323635363531.roa (raw, json)
Hash identifier:          iN0BqIG54Wt3fdMfyFFhUWDt1kWlMlTLJm1eaJ8vuaE=
Subject key identifier:   A6:26:AC:F6:01:33:85:E3:54:B2:8B:56:81:DB:27:B7:D8:5A:EA:23
Certificate issuer:       /CN=3078FCD65C80F975A17BFA4071FD505B1BA67413
Certificate serial:       506D618532FE0BFD47F29003FD62D5DEBBA9B878
Authority key identifier: 30:78:FC:D6:5C:80:F9:75:A1:7B:FA:40:71:FD:50:5B:1B:A6:74:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/323830313a31363a643030303a3a2f34382d3438203d3e20323635363531.roa
Signing time:             Tue 05 Mar 2024 18:08:48 +0000
ROA not before:           Tue 05 Mar 2024 18:03:48 +0000
ROA not after:            Tue 04 Mar 2025 18:08:48 +0000
asID:                     265651
IP address blocks:        2801:16:d000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6d:61:85:32:fe:0b:fd:47:f2:90:03:fd:62:d5:de:bb:a9:b8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3078FCD65C80F975A17BFA4071FD505B1BA67413
        Validity
            Not Before: Mar  5 18:03:48 2024 GMT
            Not After : Mar  4 18:08:48 2025 GMT
        Subject: CN=A626ACF6013385E354B28B5681DB27B7D85AEA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:92:e5:c7:60:73:a9:d9:c4:d5:09:bf:35:
                    fe:93:de:1a:fe:b7:ed:94:f8:1e:2f:e7:52:6d:8f:
                    52:a7:d9:4c:2c:33:0c:e0:00:43:86:43:3f:46:a7:
                    c8:e8:92:ef:97:04:36:ac:f9:35:3c:61:10:b4:ae:
                    16:15:4f:35:b7:11:13:dc:d3:44:ef:73:a8:38:3f:
                    10:21:bd:bd:5b:c0:54:09:c5:94:28:c4:a6:f9:e3:
                    81:4f:d1:58:f7:70:b9:a0:e0:ca:97:3a:5a:79:db:
                    18:05:1d:50:11:0d:ea:78:36:80:af:1a:ee:3c:2c:
                    f6:b3:af:c5:bc:c2:44:58:18:b1:ac:b8:04:f6:7f:
                    0a:bf:bc:c5:02:f7:c6:be:8f:06:0c:a9:1f:96:18:
                    43:e6:a4:37:a2:e4:b6:d5:05:c0:5b:14:1a:fe:e5:
                    69:63:c5:a0:49:fd:f8:48:2b:c0:2d:f7:04:7b:f9:
                    e3:82:b7:6a:e6:31:c4:0b:82:33:e7:ea:23:7f:17:
                    38:fd:e4:93:4c:49:8c:09:72:a8:1d:af:3a:06:89:
                    5b:64:1f:5d:e5:81:59:f9:2e:20:fd:46:0c:cc:0c:
                    5f:99:e3:51:ad:96:52:fb:61:ce:fb:ee:8c:25:fd:
                    06:bb:12:b5:42:e2:63:3a:ad:2b:95:a4:7a:f0:94:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:26:AC:F6:01:33:85:E3:54:B2:8B:56:81:DB:27:B7:D8:5A:EA:23
            X509v3 Authority Key Identifier:
                keyid:30:78:FC:D6:5C:80:F9:75:A1:7B:FA:40:71:FD:50:5B:1B:A6:74:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/323830313a31363a643030303a3a2f34382d3438203d3e20323635363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:4c:7c:c8:a1:d1:ed:bb:a8:09:1c:80:f1:75:98:1e:09:
         60:ee:e4:e7:46:b5:e2:62:cf:b5:b9:54:27:41:82:58:fe:6c:
         72:16:e9:23:2d:ac:f7:6a:8e:d5:cc:bb:57:21:95:dc:fe:68:
         36:6b:05:3b:e6:0e:b6:3e:0f:ee:51:fc:03:61:e3:d2:89:c4:
         fc:a5:95:69:30:14:46:06:47:20:9a:4a:05:25:59:39:a6:5d:
         2f:f1:e6:87:3f:cd:ed:32:25:a9:1d:f9:1b:d6:2a:bb:2f:19:
         d0:69:aa:bc:76:d4:6b:b2:ce:cc:53:35:79:0f:cb:e5:09:aa:
         78:54:5c:64:6a:14:1b:b2:08:09:a9:8a:ca:68:53:d2:bf:8d:
         c8:ee:52:08:38:22:17:1f:a5:49:a6:a4:7e:e0:40:73:22:44:
         47:57:f1:74:fc:c9:28:ba:2f:a0:13:94:84:cc:42:15:aa:91:
         bf:a0:8b:af:eb:21:14:bc:6d:8b:c9:74:a9:d2:66:96:cc:8c:
         f3:1d:4e:fb:06:72:28:86:21:97:aa:0f:43:19:6f:2d:63:6a:
         30:7b:ee:95:5f:6a:42:24:cf:fe:4e:ef:7c:91:b9:25:36:a5:
         b0:4e:ae:cb:49:8b:2f:bc:e5:ec:9d:0e:9e:fd:8e:e9:21:24:
         c1:39:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 00:19:20 2024 by rpki-client on console-ams.rpki-client.org