Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203130343831.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203130343831.roa (raw, json)
Hash identifier:          w9R1zwXKu3v71/X6qJo8D1vKCG7SnrtCGPk3yCQdEj8=
Subject key identifier:   A3:0A:58:F6:A1:E7:99:53:92:8A:0E:75:5E:F8:53:F8:02:39:DD:D2
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       40E34D094572E6E4BDBE679326A8651BF5ECE294
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203130343831.roa
Signing time:             Tue 05 Mar 2024 17:41:33 +0000
ROA not before:           Tue 05 Mar 2024 17:36:33 +0000
ROA not after:            Tue 04 Mar 2025 17:41:33 +0000
asID:                     10481
IP address blocks:        2801:0:440::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e3:4d:09:45:72:e6:e4:bd:be:67:93:26:a8:65:1b:f5:ec:e2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:33 2024 GMT
            Not After : Mar  4 17:41:33 2025 GMT
        Subject: CN=A30A58F6A1E79953928A0E755EF853F80239DDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:7a:bf:c2:01:6d:15:a9:a9:f5:e2:07:2a:
                    74:71:55:d6:29:bc:ba:f0:1f:ca:7b:1f:81:d7:f4:
                    4d:7f:f0:5e:07:76:df:14:1c:08:4c:d4:25:93:7c:
                    a5:a1:30:12:f5:6a:a8:98:02:b7:1f:4e:54:f4:cc:
                    a3:e7:4f:72:ea:91:85:09:89:48:3d:4e:9f:17:ce:
                    cb:aa:79:b1:88:8c:9e:bc:3a:4d:da:d1:0e:75:f5:
                    d2:7c:bb:48:8a:1a:d3:37:66:22:37:73:62:10:df:
                    18:23:09:97:d2:1e:96:0e:03:11:e0:06:fa:d9:c7:
                    e4:94:46:48:db:04:ee:60:99:2b:37:a7:1f:45:f7:
                    9a:16:2c:5b:0c:2d:73:13:3c:d6:1f:a1:cd:99:95:
                    21:25:b8:11:fb:c1:af:e4:1d:e7:34:fe:be:bf:86:
                    76:38:3d:a3:68:7c:95:35:91:da:e9:d4:37:ab:f9:
                    fd:59:9c:26:17:21:c7:5b:fa:ff:18:30:c4:cf:73:
                    53:7d:8d:b8:b8:74:38:17:21:2e:77:25:3e:29:88:
                    5b:1b:f9:38:9e:20:a3:c1:63:17:b7:2a:7b:43:a3:
                    65:8c:1a:02:8a:c6:13:cb:9a:21:6b:97:10:ca:52:
                    02:e6:3f:45:cf:5a:06:23:11:40:9e:aa:b3:5d:d8:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0A:58:F6:A1:E7:99:53:92:8A:0E:75:5E:F8:53:F8:02:39:DD:D2
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:b4:31:28:56:79:f0:90:77:b2:b2:f1:30:76:42:50:3f:dd:
         ae:b5:7a:9d:da:db:e4:41:1b:5a:0b:52:63:d5:de:46:57:64:
         97:65:6e:cf:55:ed:ba:00:a8:91:58:62:f9:1b:7d:b1:41:26:
         2a:e8:85:96:a4:05:30:2d:d1:15:28:36:61:6a:0f:da:56:12:
         b7:75:ac:7b:e6:9b:65:f4:09:5a:c5:e9:d7:bf:3d:8e:95:0c:
         a8:0a:10:fd:fb:3b:6f:1c:b2:00:4a:5a:6b:25:9f:cf:26:b7:
         f0:ef:9b:7e:4d:04:62:a0:03:e9:9f:f2:5f:b9:74:dc:d4:48:
         fc:9e:0c:1d:51:f0:de:50:da:fa:0f:e3:a1:f7:1e:76:57:f3:
         9b:95:29:27:c5:a2:7c:60:be:70:cf:71:d9:51:7c:59:f0:b3:
         fc:44:bb:92:bc:13:93:29:5b:ac:56:15:76:e6:72:4f:30:a4:
         fa:8d:07:56:38:4b:d6:c8:f7:c6:66:6a:e2:7c:0d:a8:40:8b:
         23:ba:7b:ec:7e:8b:82:ab:49:26:03:4d:1e:70:56:a2:1d:1c:
         8f:38:03:24:b7:75:67:8d:48:05:3e:8a:c1:99:4f:a2:76:0a:
         55:0d:bc:7a:6c:7a:4b:ad:2d:60:68:4d:13:ce:6e:d7:6a:b9:
         69:94:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org