Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/323830313a31613a353830303a3a2f34382d3438203d3e20323732383036.roa
File:                     323830313a31613a353830303a3a2f34382d3438203d3e20323732383036.roa (raw, json)
Hash identifier:          8ZFFZlT2bKrE1SbYlIlq8a+2XFBAhIsVLlwV0dMUKoQ=
Subject key identifier:   C6:F6:A8:12:E3:FB:8E:66:25:59:4C:38:D1:2B:8C:A5:F9:5C:D3:8F
Certificate issuer:       /CN=626DF4797B0744D66925A916672340501DC8D2CB
Certificate serial:       40E2C6B0F02AAFFAABBD389C359865F7C5B6A6E6
Authority key identifier: 62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/323830313a31613a353830303a3a2f34382d3438203d3e20323732383036.roa
Signing time:             Tue 05 Mar 2024 17:40:35 +0000
ROA not before:           Tue 05 Mar 2024 17:35:35 +0000
ROA not after:            Tue 04 Mar 2025 17:40:35 +0000
asID:                     272806
IP address blocks:        2801:1a:5800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e2:c6:b0:f0:2a:af:fa:ab:bd:38:9c:35:98:65:f7:c5:b6:a6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626DF4797B0744D66925A916672340501DC8D2CB
        Validity
            Not Before: Mar  5 17:35:35 2024 GMT
            Not After : Mar  4 17:40:35 2025 GMT
        Subject: CN=C6F6A812E3FB8E6625594C38D12B8CA5F95CD38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:82:6a:bc:c5:eb:f3:f8:ec:68:92:d2:6e:
                    d2:26:e7:d8:25:1c:23:82:01:cd:75:a3:4d:ff:6e:
                    a3:70:2f:62:58:9f:fa:c9:c3:7d:fa:f0:b3:0d:96:
                    a3:a8:8f:a3:1d:2c:d6:19:3a:02:9f:e2:b9:54:04:
                    76:c2:98:15:9f:5a:5b:01:fa:89:ca:b4:1c:d4:a6:
                    7b:67:1e:de:e5:71:23:e8:4d:67:de:44:87:dd:da:
                    93:ff:cb:d9:c2:11:51:d4:f9:f5:d1:45:f2:7d:dd:
                    1e:ee:35:3b:a7:0a:59:e9:61:7f:7c:94:06:b0:58:
                    c2:40:ec:73:a1:ec:c4:bd:0b:ea:00:92:35:d4:35:
                    54:97:8c:80:cc:21:ce:ff:fd:12:67:c3:24:bf:b7:
                    6f:e1:d5:e2:86:48:f8:85:9b:b4:40:89:03:00:99:
                    60:1d:ac:7e:1f:54:e5:0e:0c:f9:01:e0:cd:07:cf:
                    6c:5d:a5:58:e8:23:89:b8:91:e2:5a:88:01:c4:93:
                    1d:23:ed:e0:ee:27:50:48:9b:07:fa:75:33:cc:c8:
                    03:fe:3c:d4:58:59:79:eb:14:ae:6f:da:5e:d8:c8:
                    7e:57:c8:63:4b:0c:64:3a:b9:40:70:ff:4e:14:c1:
                    c1:8c:97:88:9f:b0:d1:d5:e6:84:cd:d4:e3:cd:88:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F6:A8:12:E3:FB:8E:66:25:59:4C:38:D1:2B:8C:A5:F9:5C:D3:8F
            X509v3 Authority Key Identifier:
                keyid:62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/323830313a31613a353830303a3a2f34382d3438203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:a9:86:b7:ce:14:f2:0e:8f:f1:7f:3a:4e:56:4a:00:97:34:
         7b:18:b7:f7:9f:7e:0f:a8:e9:c3:fc:11:33:69:9f:2e:4d:e8:
         cc:f7:30:eb:6e:a7:a4:cf:69:1d:37:b7:ca:a1:2f:3d:b5:0c:
         8a:77:d5:c7:0b:47:59:8a:6e:e3:29:47:fe:2d:14:f5:a7:7a:
         9c:7c:f1:cc:d5:18:0d:17:55:ff:92:63:96:f8:3c:0b:96:ae:
         ec:7c:3f:88:f7:27:a4:4d:ff:1c:c8:c1:22:21:17:5a:e0:59:
         3d:fb:12:b7:76:cf:46:72:b7:eb:4b:ba:4b:a1:a5:fe:d4:88:
         f3:5f:4e:33:32:c7:4b:a1:7b:9d:2b:b3:e7:7e:f3:c8:8e:0c:
         a1:d7:4f:a5:60:4a:01:b8:e6:aa:ce:2f:eb:21:91:f6:3d:26:
         6d:a3:68:29:7d:e4:f6:06:f1:0b:b6:f9:6d:32:1a:71:f3:9a:
         6c:a0:28:b8:b9:61:cd:97:52:50:0a:97:f4:9d:08:19:80:eb:
         42:95:36:29:91:b3:a3:ab:a0:4a:ba:7e:19:dc:b6:fb:46:19:
         59:ef:35:ea:1b:6c:4b:2d:2d:db:22:35:4c:5b:c9:a1:04:7c:
         af:ee:50:e8:d3:72:21:93:60:04:21:a7:1d:c7:e7:fb:07:a7:
         29:40:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org