Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          spVojjQQMAGhFYhvnlQpsQUvMbjPLyS0kk0l6Yil1rs=
Subject key identifier:   FA:83:B3:B5:7F:DA:66:77:42:F8:E0:7C:23:6F:BF:36:95:BD:60:5D
Certificate issuer:       /CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
Certificate serial:       3B48E0AB49B2CB30E64D350C2C30FD41885DEC8C
Authority key identifier: 4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:18:51 +0000
ROA not before:           Tue 05 Mar 2024 18:13:51 +0000
ROA not after:            Tue 04 Mar 2025 18:18:51 +0000
asID:                     14080
IP address blocks:        2801:11:c800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:48:e0:ab:49:b2:cb:30:e6:4d:35:0c:2c:30:fd:41:88:5d:ec:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF83FFE47E5A125AB23CD0A47439078CA9E1198
        Validity
            Not Before: Mar  5 18:13:51 2024 GMT
            Not After : Mar  4 18:18:51 2025 GMT
        Subject: CN=FA83B3B57FDA667742F8E07C236FBF3695BD605D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:82:e0:9c:6c:41:b6:da:bf:c0:36:43:df:
                    fc:b5:94:95:45:1c:51:1a:29:a9:d7:0f:f1:1d:c0:
                    5d:5e:40:a4:1f:36:9e:b2:6f:8e:2d:4b:f7:ca:2d:
                    e2:0f:67:af:45:74:81:50:2d:d7:be:e2:43:46:4b:
                    40:d6:a5:c5:6d:00:54:9d:c6:09:c0:f9:b8:7e:a7:
                    a2:a1:a2:b4:ae:2b:d0:65:c9:19:49:bd:5a:1a:15:
                    56:c9:f4:e5:ef:d5:79:d4:da:44:29:38:a6:86:b0:
                    74:a5:34:8b:1c:d6:ca:7f:c6:6e:dc:53:4d:ee:fb:
                    40:37:89:a7:1a:41:93:75:1c:71:a1:65:cb:e7:20:
                    b6:42:41:f8:e0:e9:b6:c6:6b:05:8e:ac:85:7d:d0:
                    93:c4:68:c0:0e:d2:5c:e1:2b:b5:a3:a7:9a:d6:ff:
                    26:da:e6:dd:86:7b:42:74:cd:fe:a1:c9:d9:dc:7f:
                    3d:35:20:4b:3e:e3:27:81:27:d4:1e:9d:a3:5c:01:
                    2f:fe:54:ff:26:34:d3:b4:05:ba:dc:4b:a7:04:61:
                    cf:27:eb:99:93:de:8d:61:d9:4a:1a:6c:c1:b8:a8:
                    92:c3:56:bd:82:48:ee:1c:f1:74:a4:5c:ab:2d:ff:
                    00:0a:31:24:73:48:aa:0e:35:1c:14:39:8d:b0:5e:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:B3:B5:7F:DA:66:77:42:F8:E0:7C:23:6F:BF:36:95:BD:60:5D
            X509v3 Authority Key Identifier:
                keyid:4D:F8:3F:FE:47:E5:A1:25:AB:23:CD:0A:47:43:90:78:CA:9E:11:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF83FFE47E5A125AB23CD0A47439078CA9E1198.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EFE3B0B593CE9F1C7266017473369445C5290364A2B01685B07ED13E7BA6D7B/0/323830313a31313a633830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:98:5f:da:ad:76:2d:25:ee:e7:4d:e2:ea:86:18:13:67:0f:
         43:d4:c1:22:a9:c9:eb:b9:28:59:45:f9:04:92:e9:56:d9:45:
         b6:c1:6e:4d:3c:ed:0a:d2:ee:f5:c1:50:b6:f8:90:bb:48:88:
         c5:c1:a1:5d:df:78:18:4d:29:99:1f:ce:ec:d1:0c:39:61:1b:
         4c:00:c0:a4:eb:91:a9:8c:a8:b3:af:bb:ed:3f:12:4a:e3:13:
         9e:d8:12:3d:43:48:e3:bc:c2:7c:0e:a4:e6:38:fa:23:41:1f:
         19:b3:d2:52:54:32:07:d9:17:f3:ed:26:0f:df:56:c6:e2:1d:
         1a:c9:db:d3:e2:46:05:22:55:f0:a2:6d:75:19:2b:ef:fb:b8:
         de:68:c3:83:7a:60:84:2e:59:96:e1:67:b1:b6:01:ab:a0:31:
         a9:aa:18:87:e2:94:a6:85:9f:e4:2c:c0:18:de:26:6f:d3:e9:
         b5:70:2e:f8:b1:e5:74:33:b9:ee:1a:23:21:f5:86:a6:bd:b2:
         b0:b7:7d:aa:bc:ab:d9:9c:00:3b:73:67:2c:4d:f1:be:39:8b:
         6a:14:7b:bc:37:c6:b2:bd:e3:a2:65:e6:b7:82:6f:bb:b9:c0:
         15:7c:2d:b3:a5:25:df:4d:eb:68:2f:15:e4:c5:f6:66:a4:39:
         11:7f:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org