Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303538.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203131303538.roa (raw, json)
Hash identifier:          yF176TUqMpmfm4UXOySg5QXNQBgrNbpPLKWP/Bhtd6k=
Subject key identifier:   1E:06:FC:E2:A5:FF:A0:02:C5:8F:2F:72:28:4C:92:D4:3E:4E:89:AB
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       21400065B8281C9C637654AA44DCB6201588FF7F
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303538.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     11058
IP address blocks:        2801:0:440::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:40:00:65:b8:28:1c:9c:63:76:54:aa:44:dc:b6:20:15:88:ff:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=1E06FCE2A5FFA002C58F2F72284C92D43E4E89AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:75:a4:ff:ab:b4:e8:7f:e4:b7:af:26:5f:
                    01:9c:37:0f:92:4e:11:2a:df:ce:3d:31:5d:1b:bb:
                    4d:1f:0b:9b:2c:e4:e3:65:50:d7:45:a1:22:25:70:
                    6d:49:17:c0:8f:f4:55:f4:eb:01:e0:f5:d2:76:05:
                    58:a0:a9:9b:c9:2c:2c:bb:c4:03:70:10:fc:39:e0:
                    d6:8f:67:1d:16:02:9e:e2:62:83:9f:41:13:d6:71:
                    43:27:6e:12:1b:aa:7b:d8:c0:d5:7f:4f:7a:d6:c9:
                    07:49:ab:7a:97:60:ec:aa:cc:ad:b0:72:0e:d3:77:
                    cd:fa:74:1e:8a:e5:a3:e2:f5:ad:94:5f:0a:bf:d2:
                    56:49:b7:c2:5b:83:15:02:de:1d:40:4b:a2:fa:4f:
                    55:c7:55:ca:e8:65:a7:0d:6d:7a:f8:8a:1b:3a:34:
                    e0:21:a8:44:15:ce:b9:10:5e:de:4f:6b:4b:e3:60:
                    b8:6c:89:a4:1b:16:df:05:e3:82:34:25:c0:ac:d8:
                    c9:52:a2:25:91:e2:5d:5a:e2:e0:e7:10:ae:11:bc:
                    41:b6:9e:d9:ae:50:5b:92:31:89:b0:fb:cc:87:ac:
                    63:0a:84:22:b1:06:d5:a4:4b:92:a4:2a:27:ec:72:
                    d8:dd:a7:99:ef:c1:a6:c3:1a:7d:fa:76:e5:1c:99:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:06:FC:E2:A5:FF:A0:02:C5:8F:2F:72:28:4C:92:D4:3E:4E:89:AB
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:29:2c:ea:b7:6a:f3:06:47:84:ae:00:c8:0a:90:af:98:91:
         d9:5f:a0:ff:49:1f:d2:90:b7:6e:c1:ce:8a:6b:ec:d3:3c:c8:
         bb:3c:57:c1:56:a5:53:ca:df:c3:09:1b:55:a7:4f:27:1b:36:
         91:14:be:b5:f0:d0:75:96:6a:dc:62:b4:37:18:af:19:d9:48:
         5d:28:41:53:73:70:c9:01:76:9a:22:06:7e:9c:bc:6c:51:dd:
         74:ff:94:8d:c6:a5:be:7f:56:23:e9:2c:b7:0e:c2:c6:58:b8:
         4e:29:de:d1:3c:89:68:73:a3:88:02:b0:2a:ba:1e:f6:2d:c6:
         2b:08:43:a4:04:5b:de:a9:96:c9:e6:b2:b0:7b:53:63:22:72:
         3e:a1:06:d7:a2:70:d4:c0:9e:eb:a5:09:fe:b0:44:cd:70:46:
         9c:2f:b9:72:d3:99:33:c2:06:0b:f9:73:28:d7:a6:0a:be:bb:
         5f:fb:4d:c0:82:08:0a:a7:e9:6e:b8:f6:bc:71:de:f7:58:78:
         1b:35:3c:6f:99:24:03:df:b7:63:a7:55:7f:2e:65:05:44:db:
         d1:67:48:ed:91:19:a7:50:01:ed:91:a1:3d:9c:88:0d:99:15:
         fe:c8:84:5b:04:b6:7b:12:5d:f2:71:20:1a:e0:da:b5:f7:f8:
         3e:c2:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org