Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          ORhtby7SjsTUxZvNyW7qWEdyi6Zqy2xHB0QDwNcsuoM=
Subject key identifier:   B1:D0:AE:65:48:39:3E:56:EE:63:8E:EF:9E:1D:5A:2C:82:A1:BB:FB
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       51EA92944871143AE35AE0642036F49653B33142
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:41:29 +0000
ROA not before:           Tue 05 Mar 2024 17:36:29 +0000
ROA not after:            Tue 04 Mar 2025 17:41:29 +0000
asID:                     18747
IP address blocks:        2801:111:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ea:92:94:48:71:14:3a:e3:5a:e0:64:20:36:f4:96:53:b3:31:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Mar  5 17:36:29 2024 GMT
            Not After : Mar  4 17:41:29 2025 GMT
        Subject: CN=B1D0AE6548393E56EE638EEF9E1D5A2C82A1BBFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:a6:bb:52:79:2c:11:a7:e3:44:3e:fd:e6:
                    19:dc:ab:dd:43:2f:42:3e:53:99:33:df:de:78:1e:
                    96:aa:be:37:9d:13:cf:02:de:7a:c2:1f:f1:b1:45:
                    60:d7:70:fa:36:b3:b8:da:a4:99:99:5d:22:45:83:
                    5d:9a:0d:19:0e:d2:5e:f0:9c:9c:80:07:5d:da:58:
                    63:ce:7b:f0:4b:8a:f4:98:c5:df:37:e0:70:b5:cf:
                    2a:ef:de:3d:f4:c3:80:12:5d:1d:53:f2:f0:88:08:
                    d8:0c:28:07:46:77:1c:11:0b:38:5a:5f:37:08:9c:
                    a3:1c:28:f2:4b:ed:5d:05:da:59:33:ca:11:78:67:
                    71:0c:2e:df:03:5a:3d:0f:a4:f7:93:57:2e:53:f3:
                    b4:18:8d:59:65:15:34:3d:f3:ab:54:9e:af:7d:35:
                    52:f4:e8:e1:80:aa:68:d8:bb:97:e1:ef:2c:20:76:
                    bc:5b:04:72:44:17:c3:f8:b0:c9:0d:1f:93:fc:0b:
                    45:5e:6b:47:34:4f:41:15:af:51:21:25:17:1c:08:
                    3c:b8:c0:3b:76:f4:7c:be:ef:50:88:1c:04:88:dc:
                    bb:86:90:67:8d:92:7b:5a:bf:0f:d8:69:f3:bb:99:
                    a3:cd:8c:54:8d:c4:cd:e9:f9:e2:72:12:ab:64:24:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D0:AE:65:48:39:3E:56:EE:63:8E:EF:9E:1D:5A:2C:82:A1:BB:FB
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a353a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:32:b9:88:58:ac:9b:7b:73:ae:e1:6c:e7:a6:e0:65:8c:
         78:eb:a8:52:14:81:7e:9d:4a:ef:25:23:f5:67:7d:5a:71:0c:
         1c:1d:19:a3:1f:06:88:8c:af:f0:76:18:3c:77:82:29:a7:58:
         af:85:23:2d:0a:f8:38:92:8d:8e:9d:68:1c:81:0a:4e:0a:d9:
         8e:35:16:ca:25:fb:7c:1f:0a:2c:97:83:66:c0:7d:ec:f4:e2:
         77:22:e3:d3:41:58:a1:77:a0:fa:42:8d:6c:a7:f6:af:3c:02:
         ed:ec:7d:58:9d:a3:d5:2c:47:d3:14:a7:d4:6f:49:d0:83:91:
         97:db:27:9d:70:38:84:62:ec:e5:a2:a6:e6:0e:a6:c9:34:89:
         92:3e:51:b5:1c:05:91:c3:a7:79:7e:83:a5:52:f5:c5:6b:15:
         dd:6a:45:93:89:5b:40:ce:91:a4:d6:f1:41:25:cb:d3:14:ed:
         46:e6:ca:4d:d9:d9:af:84:c3:3e:f1:7b:bd:d2:0d:55:08:97:
         7e:0d:07:ee:10:94:17:1f:e7:9e:24:cf:12:6b:e0:34:2c:ad:
         df:33:77:22:5d:ec:05:dd:8a:3e:95:23:01:a2:25:89:4a:19:
         52:12:d6:17:64:52:47:3a:e8:ed:88:a0:92:4e:95:30:10:79:
         69:6a:fb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org