Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          Me0Y2TxmHCyCOKg2TcMZYABdo6kXZ+UQ6OHXz5rPbuw=
Subject key identifier:   9A:52:71:2D:CF:59:A9:B2:9D:D2:68:A3:CE:74:7A:20:EA:DE:0C:B5
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       3BC3FCA56AF5F4D746E9E0901ED4E1D6E65359E2
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:41:30 +0000
ROA not before:           Tue 05 Mar 2024 17:36:30 +0000
ROA not after:            Tue 04 Mar 2025 17:41:30 +0000
asID:                     18747
IP address blocks:        2801:111:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c3:fc:a5:6a:f5:f4:d7:46:e9:e0:90:1e:d4:e1:d6:e6:53:59:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Mar  5 17:36:30 2024 GMT
            Not After : Mar  4 17:41:30 2025 GMT
        Subject: CN=9A52712DCF59A9B29DD268A3CE747A20EADE0CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:fd:f3:22:c4:a0:5a:17:10:54:68:b4:6b:
                    61:a7:6e:39:49:93:7d:e1:e4:1f:55:4a:85:1c:fd:
                    cf:27:f7:9b:f5:0d:06:ae:71:e1:12:f1:55:16:c8:
                    ef:43:af:cf:ef:fa:ca:29:d1:7b:57:47:86:91:88:
                    8c:52:08:6b:e9:04:39:f7:c7:d6:b6:33:da:f5:5e:
                    47:b3:61:53:d5:1c:a4:75:db:f7:f8:12:60:59:d2:
                    b3:65:aa:cb:ad:f3:50:77:a0:c8:a7:a7:42:c1:4b:
                    08:39:5a:34:a9:2b:3c:66:ec:a9:1e:6b:ee:2b:c2:
                    00:d8:94:ee:3e:90:11:53:53:d0:e6:4d:46:90:3e:
                    22:b8:97:d9:55:ae:96:35:36:65:7e:af:80:48:c1:
                    9f:cf:fa:67:ce:b5:ba:02:58:0f:e5:b9:5c:77:bb:
                    40:80:51:08:2b:12:ab:66:7c:41:b8:6f:04:85:cb:
                    56:3f:39:23:62:5e:57:29:ac:77:dc:2f:52:b3:a2:
                    17:7a:24:b0:5f:7b:bd:df:73:ee:9a:ec:c5:23:65:
                    67:fb:40:72:98:78:17:b6:7b:39:b4:75:eb:e8:ed:
                    0f:51:c2:2f:b6:d8:92:47:ff:ae:71:8a:5c:c4:96:
                    b3:37:c9:d0:70:62:58:1d:da:eb:f3:2e:0a:5e:2b:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:52:71:2D:CF:59:A9:B2:9D:D2:68:A3:CE:74:7A:20:EA:DE:0C:B5
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a343a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:14:8f:27:1b:94:da:5a:c0:3a:eb:84:6b:9b:d5:74:21:b9:
         a7:f4:70:71:54:fb:08:65:4b:65:a0:9b:ce:82:dd:0e:47:67:
         8e:bd:21:9e:05:f3:df:32:97:54:f0:75:d4:09:60:f2:23:a8:
         26:8e:27:8b:54:e2:45:72:ee:77:bb:c0:29:6b:a8:ff:71:f8:
         fa:cd:47:dc:64:fc:0b:e7:85:de:3e:fd:23:37:88:a7:43:fa:
         6b:9c:ca:52:05:e7:c0:f7:fd:29:21:c7:a2:f2:4e:e1:40:3f:
         ee:b0:1b:bd:07:e1:7b:89:73:33:9e:e1:06:db:0a:8f:21:b9:
         33:bf:df:e0:4b:d9:29:4b:5b:a1:70:35:25:7c:8b:0d:03:3f:
         79:c3:f2:f3:56:23:6a:2d:0f:ea:b0:f7:ca:95:58:0f:1a:fb:
         c3:17:94:65:74:69:e4:0a:55:6c:55:ba:dc:bc:66:8c:1b:15:
         7d:03:eb:4a:7a:b9:05:0e:5f:f3:d2:2a:43:e1:38:d8:dd:07:
         5d:14:24:e5:22:c7:4f:01:ad:3c:61:bd:20:41:99:ba:2c:c5:
         a3:b1:b6:ed:b9:ec:7f:b0:a3:fd:74:ee:04:49:55:ba:e8:4a:
         2a:e4:fb:2b:56:c9:57:71:a1:38:97:ed:8a:96:e0:82:f1:a4:
         1d:b8:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org