Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/323830313a31663a323830303a3a2f34382d3438203d3e203532343638.roa
File:                     323830313a31663a323830303a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          gnYTzh9b/uE56oMcLVG/TxqBviPq8TGYRYUK946/fz8=
Subject key identifier:   FB:03:58:99:D7:1C:C6:3E:8D:E5:DE:55:EE:21:F6:DB:B4:C4:A4:B0
Certificate issuer:       /CN=07E63C866CF5AD3474792D028F7B00BEF4184E8D
Certificate serial:       2526849BDF8EE1195C170350678B6B2BC0DE5022
Authority key identifier: 07:E6:3C:86:6C:F5:AD:34:74:79:2D:02:8F:7B:00:BE:F4:18:4E:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/323830313a31663a323830303a3a2f34382d3438203d3e203532343638.roa
Signing time:             Mon 22 Apr 2024 17:00:00 +0000
ROA not before:           Mon 22 Apr 2024 16:55:00 +0000
ROA not after:            Mon 21 Apr 2025 17:00:00 +0000
asID:                     52468
IP address blocks:        2801:1f:2800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:26:84:9b:df:8e:e1:19:5c:17:03:50:67:8b:6b:2b:c0:de:50:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07E63C866CF5AD3474792D028F7B00BEF4184E8D
        Validity
            Not Before: Apr 22 16:55:00 2024 GMT
            Not After : Apr 21 17:00:00 2025 GMT
        Subject: CN=FB035899D71CC63E8DE5DE55EE21F6DBB4C4A4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8c:37:00:4a:5e:82:12:90:49:98:ed:66:d8:
                    45:84:b7:a2:82:79:77:e0:79:6b:99:ef:d4:3d:da:
                    da:26:55:ad:69:26:96:35:26:f1:50:a7:a3:b9:6b:
                    bd:97:08:b7:d8:92:96:e5:09:75:7a:ff:a2:0f:4f:
                    c2:b4:df:b8:6f:41:e3:78:d0:0c:0e:eb:3e:7d:44:
                    92:5e:c6:ae:04:70:06:38:65:e5:a8:f6:16:f3:0d:
                    e3:f7:07:84:30:35:d6:de:42:20:0f:ce:a1:07:f8:
                    61:d9:8d:48:e8:69:f7:de:11:ee:99:60:f6:1c:3b:
                    a5:d1:a6:79:cf:1a:6e:7c:c9:46:e2:cd:6f:d5:b9:
                    d1:3b:fd:2d:b8:53:ae:ca:0b:0f:07:42:b2:7e:1d:
                    8f:d3:64:c3:cb:cf:1c:db:4f:c4:86:dd:29:ba:70:
                    1b:ec:07:6e:29:da:de:c1:17:cb:32:8f:6b:ce:83:
                    df:10:2b:94:ef:96:17:71:0f:c6:2a:64:95:e7:ed:
                    6f:41:d4:65:2b:38:f5:d6:4e:33:a7:d2:7b:e5:b1:
                    48:a5:e8:46:b4:03:89:52:97:72:40:fc:6b:8e:b1:
                    7d:b1:e7:85:0d:0b:e6:80:b5:15:a1:ad:0d:bc:a1:
                    cf:88:0e:5c:f2:17:1a:a1:d3:a5:8b:cf:a7:6f:d5:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:03:58:99:D7:1C:C6:3E:8D:E5:DE:55:EE:21:F6:DB:B4:C4:A4:B0
            X509v3 Authority Key Identifier:
                keyid:07:E6:3C:86:6C:F5:AD:34:74:79:2D:02:8F:7B:00:BE:F4:18:4E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/323830313a31663a323830303a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:91:28:45:ec:e8:cb:55:af:ef:44:c3:74:7f:85:72:29:06:
         d0:a4:63:67:fc:df:99:0d:c7:4d:2e:35:26:8f:3d:22:79:44:
         5b:85:7d:ca:90:b3:9b:5f:8d:4f:e8:cd:ce:84:dc:fd:63:cc:
         8f:5e:70:31:14:a1:98:d2:53:cb:28:d4:73:65:86:5d:b1:13:
         47:86:42:e7:c3:b1:ec:0c:42:39:44:5c:ac:12:11:5b:ae:04:
         73:5e:70:b8:34:dd:88:98:cf:12:f9:6d:6e:5b:18:67:c5:fa:
         47:d6:74:af:6a:0f:aa:7a:7d:c2:d3:f9:c3:2e:ba:21:22:02:
         45:ef:a5:07:c4:59:67:61:3f:b1:73:9a:c4:78:59:1a:6b:78:
         04:fc:09:ce:cf:60:33:1c:34:96:b6:ef:ba:6d:58:2c:1e:b0:
         9c:1a:ff:17:ad:f4:97:dc:b5:70:62:87:b2:ec:e7:66:37:6e:
         97:78:ef:3e:00:7a:96:a9:10:b1:15:c2:f9:de:ec:44:6c:1e:
         ad:93:7d:26:28:e0:2a:fc:75:1d:cc:39:85:c8:12:dd:b2:67:
         69:78:85:a1:32:79:d8:c5:0c:10:f8:27:f0:53:02:ab:92:48:
         77:08:64:b3:02:bc:bf:8e:f4:ab:4e:9e:6f:a9:c9:94:ef:89:
         35:c3:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:10 2024 by rpki-client on console-fra.rpki-client.org