Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa
File:                     323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa (raw, json)
Hash identifier:          9hd/Re8+gjeRQnzbrjQU+kuBbEfnxMV+A2zlALl/E3Q=
Subject key identifier:   D1:59:2B:B3:33:4F:49:76:90:C6:BB:F3:0F:27:86:AE:1E:B2:EC:8A
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       71FAC5175C7845080A12AF11643A5CD3F7D95656
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:41:30 +0000
ROA not before:           Tue 05 Mar 2024 17:36:30 +0000
ROA not after:            Tue 04 Mar 2025 17:41:30 +0000
asID:                     18747
IP address blocks:        2801:111:4::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fa:c5:17:5c:78:45:08:0a:12:af:11:64:3a:5c:d3:f7:d9:56:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Mar  5 17:36:30 2024 GMT
            Not After : Mar  4 17:41:30 2025 GMT
        Subject: CN=D1592BB3334F497690C6BBF30F2786AE1EB2EC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:1b:d9:cf:34:5f:b9:1c:e0:21:15:c0:47:
                    a3:dc:5c:f1:5a:e8:8f:94:14:3f:fe:66:4d:07:40:
                    7f:b6:2f:44:42:32:ac:cb:b9:0b:67:d2:8e:e6:57:
                    52:b6:23:b6:71:0a:8c:1e:99:bc:1f:82:1c:a5:83:
                    d2:42:96:08:fb:93:4b:a7:af:0a:42:5d:32:6f:57:
                    19:4d:97:48:fe:69:e2:dd:f8:5a:a6:a8:d4:f1:72:
                    16:28:bb:c6:cd:28:b9:cb:b4:88:e8:13:03:1d:6a:
                    e9:c6:07:8d:45:c5:95:e0:b9:3a:03:46:29:08:cb:
                    66:4a:0d:aa:b4:b6:58:cf:ce:18:f0:5b:8b:28:da:
                    0e:4e:76:c5:db:c3:02:8e:c1:44:df:34:54:7a:21:
                    3e:c1:93:70:fc:96:be:a4:ea:24:e7:d1:01:2d:3c:
                    0b:6d:b5:b9:43:1d:57:ec:60:4c:4e:6e:89:72:cb:
                    9b:67:7d:9a:51:26:db:e6:75:6d:8a:fb:46:8f:51:
                    6b:7d:48:84:46:fc:e5:c8:69:0d:e9:f8:54:b1:c7:
                    27:f5:7f:7c:36:4d:ac:95:d9:cd:8a:af:72:04:5e:
                    56:95:7f:f1:7f:e1:e6:3f:30:fe:06:cd:a2:96:c3:
                    9b:1e:bc:9d:9c:4b:c1:a9:75:c8:22:59:dc:e2:2e:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:59:2B:B3:33:4F:49:76:90:C6:BB:F3:0F:27:86:AE:1E:B2:EC:8A
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34372d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:1f:c2:9a:fe:d7:95:ae:1b:82:a7:59:58:78:34:7a:46:ad:
         3b:c6:50:26:20:bc:17:c7:5f:50:96:b4:f2:b3:c0:cc:b3:05:
         fc:c6:d9:9c:47:22:8a:48:21:e1:d5:f9:b7:d2:08:37:ee:0b:
         d6:e2:70:93:9d:9d:e1:75:d0:bb:48:54:9b:51:ec:a0:59:b1:
         cb:7b:87:49:f7:8f:37:e1:a4:c8:71:2c:5e:67:a4:bd:e9:68:
         1c:26:c4:1e:f7:7b:03:aa:c9:93:b0:25:f1:77:5d:56:74:f5:
         52:24:70:54:f0:10:2b:c4:90:3e:bd:f7:05:b4:81:7d:58:14:
         69:33:ef:ed:01:8c:b3:21:08:20:d4:49:d2:fc:35:68:93:47:
         0b:80:4a:5a:c4:e4:60:bd:2f:2a:dc:81:2a:90:6e:2e:51:13:
         eb:7c:df:07:47:6d:2a:5f:5f:8c:e4:b0:69:10:2c:fb:3d:eb:
         95:55:ff:86:ad:09:7e:a6:b6:14:c6:69:03:a5:30:a1:44:ad:
         8a:51:4a:26:e3:64:6a:aa:ac:f1:64:8d:d8:01:6a:f6:32:49:
         e5:a6:38:4f:6b:bf:41:2e:3c:d4:a0:bf:0b:15:d5:65:f3:52:
         94:cd:c7:18:67:94:fc:3e:7c:5e:6c:e8:c0:87:2c:b1:ff:1f:
         0a:3c:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:16:06 2024 by rpki-client on console-ams.rpki-client.org