Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa
File:                     323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa (raw, json)
Hash identifier:          HDvumBethmreG+c3JdQoCMO3I4SFQYfR9tcjCCiwGiQ=
Subject key identifier:   B9:10:FD:AF:16:05:DC:F6:14:98:3A:ED:B8:7D:D8:91:25:74:04:8A
Certificate issuer:       /CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C
Certificate serial:       0B49B4FE2DF059B51D1B0D031265C43C366BAFC7
Authority key identifier: 2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa
Signing time:             Tue 05 Mar 2024 17:40:57 +0000
ROA not before:           Tue 05 Mar 2024 17:35:57 +0000
ROA not after:            Tue 04 Mar 2025 17:40:57 +0000
asID:                     262238
IP address blocks:        2801:0:310::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:49:b4:fe:2d:f0:59:b5:1d:1b:0d:03:12:65:c4:3c:36:6b:af:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C
        Validity
            Not Before: Mar  5 17:35:57 2024 GMT
            Not After : Mar  4 17:40:57 2025 GMT
        Subject: CN=B910FDAF1605DCF614983AEDB87DD8912574048A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:43:ba:75:c8:fa:71:72:09:a5:ef:29:71:
                    cb:63:79:23:c3:e0:be:11:47:91:79:d7:97:55:45:
                    87:79:c6:ec:e6:98:77:4a:b2:ec:24:75:b3:44:c7:
                    dc:a4:06:e0:57:e9:f9:8f:5d:c9:cc:69:31:d2:dd:
                    70:db:22:d1:ad:8f:da:bb:20:07:67:80:1b:82:9e:
                    76:cf:af:79:8a:df:92:e5:dc:a0:69:51:ba:09:c5:
                    06:68:db:fc:9c:72:e2:ec:a3:46:0e:df:51:cd:2b:
                    3e:ed:e8:bc:5c:cc:c5:8b:9d:e4:e3:ab:1c:e5:04:
                    08:0c:2e:9a:b6:2d:1d:4f:b6:b8:74:30:11:97:8e:
                    83:52:88:65:f9:cf:b1:48:9f:ea:79:6f:e4:1f:fa:
                    7f:5a:b4:eb:b4:1a:f4:dd:07:51:d3:88:2e:ae:4a:
                    b5:35:48:fb:f3:1f:44:ad:45:c9:c3:63:85:94:76:
                    f7:ff:24:24:11:7e:50:9e:ec:eb:00:fb:26:35:83:
                    84:35:99:4b:b6:ca:33:96:91:b0:f1:28:35:3c:6e:
                    f9:fc:44:6d:63:d9:78:12:8a:a6:98:16:29:98:8e:
                    24:38:7a:12:bb:5a:41:8d:70:0b:30:96:2a:e6:23:
                    b1:e1:a3:f8:27:a2:f1:f8:bd:72:69:58:b2:0d:12:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:10:FD:AF:16:05:DC:F6:14:98:3A:ED:B8:7D:D8:91:25:74:04:8A
            X509v3 Authority Key Identifier:
                keyid:2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:310::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:f0:fe:39:44:49:45:2f:87:fd:01:57:d5:fd:f0:36:1c:
         4b:c6:f2:89:4e:61:b6:3e:b0:2c:7c:c3:ac:e7:ce:c1:a8:76:
         c4:c4:6f:3e:e5:a2:68:f6:c0:84:70:da:c8:3b:20:77:6f:8c:
         72:07:12:d8:f4:7c:fd:54:a5:39:b1:82:93:ca:4b:9c:ab:9a:
         2f:73:0d:35:dc:f2:f0:e9:f2:dd:88:06:6a:e1:cd:49:d0:3d:
         b5:a9:a9:ac:30:64:56:6e:12:a8:6b:39:23:fc:ca:4b:c4:b0:
         46:94:9e:bd:59:eb:e4:60:b9:e7:d8:ab:b4:b7:c8:4d:82:50:
         e4:98:51:97:59:34:15:85:55:7a:a4:73:0b:65:a2:32:8b:21:
         85:53:e3:ce:f4:c4:44:34:c2:e9:70:4e:5e:ef:82:ea:40:db:
         f0:e8:62:98:47:41:57:3e:10:a7:87:68:09:50:d0:70:b6:0e:
         4c:f1:62:ff:b9:0d:c1:27:e0:45:0a:e8:45:d7:0c:c7:a1:d5:
         34:0f:b7:1a:8d:d5:cc:dd:f3:cc:36:f4:b4:4c:db:bb:7e:17:
         68:32:f4:95:18:ed:9f:f9:11:2d:c2:52:de:0b:cc:db:23:b9:
         10:28:3f:14:43:91:47:89:3a:67:e1:9f:f2:5a:9f:a9:5c:6e:
         34:5f:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org