Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa
File:                     323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa (raw, json)
Hash identifier:          tEIYACI99Cji9ZDRFtdaU/MZIuoZ1yLdGkla6n9Zf1o=
Subject key identifier:   08:D4:0B:50:C8:3A:03:BB:01:8A:70:2B:B5:02:4D:46:6C:D8:4F:35
Certificate issuer:       /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Certificate serial:       34EF604C12A6B375C4DF1D382BA03C60EC7E7079
Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa
Signing time:             Tue 05 Mar 2024 17:58:14 +0000
ROA not before:           Tue 05 Mar 2024 17:53:14 +0000
ROA not after:            Tue 04 Mar 2025 17:58:14 +0000
asID:                     271821
IP address blocks:        2801:10:6800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ef:60:4c:12:a6:b3:75:c4:df:1d:38:2b:a0:3c:60:ec:7e:70:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
        Validity
            Not Before: Mar  5 17:53:14 2024 GMT
            Not After : Mar  4 17:58:14 2025 GMT
        Subject: CN=08D40B50C83A03BB018A702BB5024D466CD84F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:84:f9:45:68:f7:a9:a6:95:62:1c:12:4f:
                    b3:78:2f:0f:7b:8b:b0:a5:86:f8:7e:ff:38:12:d1:
                    fa:23:e6:da:d7:87:05:91:94:47:8c:5a:8e:86:90:
                    14:8b:36:4d:f8:02:78:e9:62:37:e4:bc:49:14:b4:
                    95:23:ff:5e:da:f2:21:33:c5:a6:ea:36:f5:95:2b:
                    f3:7e:84:10:48:a5:b7:4a:df:9b:78:20:5d:97:de:
                    9c:07:a3:d8:70:3b:5b:51:6a:f3:d2:5b:b1:5a:3e:
                    de:2e:2c:c5:17:32:22:ab:10:b4:ab:ef:3a:2c:d1:
                    95:2f:f9:1d:3d:14:41:20:74:1c:83:ea:1d:4c:7e:
                    51:2d:2a:2e:46:df:2f:07:16:74:70:01:2a:20:7a:
                    98:b8:72:ac:b2:1b:65:eb:13:d3:72:c8:27:1d:42:
                    96:3c:44:9a:f1:18:3c:b9:04:41:87:0a:18:cc:f6:
                    ff:3e:42:53:31:3a:f1:40:34:90:27:63:bf:df:39:
                    70:b1:02:4a:b8:9d:cc:ea:7c:8c:6b:5f:82:88:a7:
                    88:69:70:30:6b:50:bf:ea:65:bc:bd:5f:00:f6:6f:
                    10:5f:d9:14:34:fe:1c:59:9f:60:94:56:51:c0:80:
                    96:19:30:cf:01:9e:be:17:c9:f5:e5:fb:ce:8b:3d:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:0B:50:C8:3A:03:BB:01:8A:70:2B:B5:02:4D:46:6C:D8:4F:35
            X509v3 Authority Key Identifier:
                keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:5f:d4:49:f2:c7:0c:da:61:69:9d:22:bd:40:f8:6e:a6:45:
         87:46:77:17:b2:b5:9b:22:fa:8e:8c:dd:f5:2b:77:1a:c4:a2:
         cd:32:ca:54:aa:49:07:2c:d4:96:ef:c6:e3:61:3c:dc:86:c0:
         4f:4a:bd:e3:12:30:4f:cf:b7:5b:28:a4:53:d3:1a:29:42:8f:
         29:27:0f:f7:bd:71:a7:16:9a:c9:4e:11:d9:7f:77:da:21:02:
         bd:f5:2c:e5:00:8b:bb:fb:71:e2:6f:2f:06:44:f1:31:e8:da:
         4d:24:ab:89:6c:40:5a:1f:39:e3:b7:12:0d:34:8d:e9:9e:e5:
         c6:cd:fe:22:49:b0:84:21:aa:37:dc:d3:dc:80:c3:01:f5:3d:
         01:b6:56:66:9f:bb:cc:bd:3b:d7:fe:a9:78:4a:05:2e:07:47:
         3d:4a:cf:ad:d5:f5:b8:81:59:81:35:9e:4b:fa:9d:ca:ca:2f:
         48:18:67:ce:58:72:80:c7:e5:44:75:18:c3:d6:7b:11:4d:93:
         ad:f4:11:f0:9b:d7:b8:26:c8:89:22:25:cb:49:35:6f:10:dc:
         c3:6b:5e:8b:f2:f4:56:d5:16:15:ff:8a:45:2f:6e:66:3f:10:
         32:ff:d1:09:2b:0a:f3:1b:af:7a:89:06:de:c1:24:f0:65:e6:
         04:6c:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 11:56:29 2024 by rpki-client on console-fra.rpki-client.org