Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34342d3434203d3e203532343638.roa
File:                     323830313a3163393a3a2f34342d3434203d3e203532343638.roa (raw, json)
Hash identifier:          zQJrH0vrQVSajdLt7zvk5rUDRV+cio79cVOyJLsmHGo=
Subject key identifier:   DC:B5:5D:58:5A:42:33:75:EA:DA:DE:43:0B:DE:48:E2:A0:B3:13:FA
Certificate issuer:       /CN=0A60287FCFC03A930FA4A0AD2D5562D53F568984
Certificate serial:       7EB80722BD23E9DD8070719A245B1BED058D4748
Authority key identifier: 0A:60:28:7F:CF:C0:3A:93:0F:A4:A0:AD:2D:55:62:D5:3F:56:89:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34342d3434203d3e203532343638.roa
Signing time:             Tue 29 Oct 2024 13:30:00 +0000
ROA not before:           Tue 29 Oct 2024 13:25:00 +0000
ROA not after:            Tue 28 Oct 2025 13:30:00 +0000
asID:                     52468
IP address blocks:        2801:1c9::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b8:07:22:bd:23:e9:dd:80:70:71:9a:24:5b:1b:ed:05:8d:47:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A60287FCFC03A930FA4A0AD2D5562D53F568984
        Validity
            Not Before: Oct 29 13:25:00 2024 GMT
            Not After : Oct 28 13:30:00 2025 GMT
        Subject: CN=DCB55D585A423375EADADE430BDE48E2A0B313FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:6c:c5:23:e8:78:7e:09:68:71:45:8b:1d:
                    ec:2b:c7:40:b9:44:b8:d6:e3:ed:5f:ea:3d:b7:aa:
                    e7:ce:c5:44:26:ac:25:bf:b2:85:bf:44:cd:ce:9e:
                    d0:15:cc:d6:4a:8d:b1:10:c1:f5:17:1f:16:e9:c0:
                    b3:8c:7f:4b:40:01:3a:d6:5c:0f:ba:5a:cd:c0:cb:
                    13:cd:bf:a3:64:2d:b3:c0:27:dc:70:38:62:91:9f:
                    58:1b:02:e7:f8:a8:cb:a6:c9:c9:b1:6d:0c:0a:e1:
                    fc:2f:5f:a7:67:8d:97:0a:d5:91:a3:93:1d:6f:16:
                    ac:65:f7:2b:0d:a7:94:4f:58:a3:99:68:6b:f3:9a:
                    85:8d:8e:e6:5d:3f:24:97:a5:be:1d:74:c8:22:e6:
                    fb:13:ac:c4:77:43:07:2c:4b:78:11:59:80:2e:d9:
                    8f:c8:42:95:1d:d4:cc:7e:e8:d5:ca:88:be:d1:80:
                    e1:0c:7b:77:94:d5:e8:95:00:6c:6c:3c:2c:85:dd:
                    36:82:f0:73:68:ac:ec:2c:cc:23:6d:13:73:15:5c:
                    d0:e5:1c:5c:d8:91:73:96:41:da:bc:75:fb:86:b9:
                    03:e7:ef:58:63:18:1f:30:bd:ab:10:9b:f5:55:f3:
                    4a:81:ed:3a:bb:07:06:88:27:1b:f2:fc:db:2c:f0:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:5D:58:5A:42:33:75:EA:DA:DE:43:0B:DE:48:E2:A0:B3:13:FA
            X509v3 Authority Key Identifier:
                keyid:0A:60:28:7F:CF:C0:3A:93:0F:A4:A0:AD:2D:55:62:D5:3F:56:89:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34342d3434203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c9::/44

    Signature Algorithm: sha256WithRSAEncryption
         bd:1b:a2:74:78:09:e0:af:9f:f9:8b:c3:4c:3f:93:6f:f1:e0:
         82:43:6d:d1:5d:a4:b9:52:85:a8:cb:22:4c:c1:eb:68:8c:25:
         a8:ed:6f:1e:95:d1:ef:22:3d:4d:7e:6e:ed:41:4d:21:5d:3e:
         be:0b:72:6f:4e:52:99:69:0d:d7:ef:60:6d:8b:4f:fd:db:dc:
         1a:af:c9:c7:df:62:56:a7:6e:3a:72:c1:2e:a1:89:f2:56:fe:
         ef:33:b1:85:29:b2:40:ed:ca:94:dc:5e:08:43:cb:dd:ab:e1:
         54:e9:d7:be:75:59:74:f6:b4:d5:5a:46:54:3f:68:16:95:0f:
         14:c3:b7:91:b9:0c:b6:4e:9f:aa:cd:88:06:dc:c8:c1:e6:d9:
         b2:87:0a:33:1a:cb:e8:6f:bb:37:ca:a1:ab:68:b0:52:32:83:
         19:f1:0d:11:06:cb:a7:ff:a8:f1:a6:31:79:0d:db:1b:7c:bb:
         6e:bb:81:47:4e:9b:c5:f6:5e:57:8d:92:cb:03:84:cb:89:3b:
         9e:f9:cf:3d:d2:0e:9b:3d:45:92:39:72:45:e2:e9:53:0d:d3:
         9c:bc:89:59:ea:b2:f3:ab:1c:ae:4d:4b:b1:a8:e6:3a:cb:4b:
         45:0b:42:a5:84:44:25:d4:27:72:3d:4f:bc:28:e8:b3:5f:4a:
         6a:a7:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org