Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/323830313a31313a393830303a3a2f34382d3438203d3e20323732303830.roa
File:                     323830313a31313a393830303a3a2f34382d3438203d3e20323732303830.roa (raw, json)
Hash identifier:          W708KLa0bMkMw7twGN8R9JWIwEpm181yDqNxL5ONo54=
Subject key identifier:   19:16:9F:18:9E:6E:E9:B1:51:0D:A5:42:4F:96:9A:ED:A1:FB:CE:A6
Certificate issuer:       /CN=9767DA01D4E417990C5243FE751DECE478F14B27
Certificate serial:       68262F20D1A3F7862E5B2EFB2BD46D77DB45569D
Authority key identifier: 97:67:DA:01:D4:E4:17:99:0C:52:43:FE:75:1D:EC:E4:78:F1:4B:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9767DA01D4E417990C5243FE751DECE478F14B27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/323830313a31313a393830303a3a2f34382d3438203d3e20323732303830.roa
Signing time:             Tue 05 Mar 2024 18:17:56 +0000
ROA not before:           Tue 05 Mar 2024 18:12:56 +0000
ROA not after:            Tue 04 Mar 2025 18:17:56 +0000
asID:                     272080
IP address blocks:        2801:11:9800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/9767DA01D4E417990C5243FE751DECE478F14B27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/9767DA01D4E417990C5243FE751DECE478F14B27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9767DA01D4E417990C5243FE751DECE478F14B27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:26:2f:20:d1:a3:f7:86:2e:5b:2e:fb:2b:d4:6d:77:db:45:56:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9767DA01D4E417990C5243FE751DECE478F14B27
        Validity
            Not Before: Mar  5 18:12:56 2024 GMT
            Not After : Mar  4 18:17:56 2025 GMT
        Subject: CN=19169F189E6EE9B1510DA5424F969AEDA1FBCEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b0:73:a6:fd:e4:11:96:b9:76:2b:e9:39:9a:
                    c8:66:66:83:a5:b6:ea:7b:f2:1e:ff:e6:b5:97:36:
                    38:91:9d:49:42:90:5b:81:48:15:d9:ec:54:5c:5f:
                    83:70:66:90:36:ee:ee:18:ad:5f:89:1e:f9:a5:24:
                    a4:e5:29:98:12:b0:10:c0:6b:ad:3a:b6:3c:80:e1:
                    2f:f1:86:28:31:c2:66:b5:05:ef:d4:81:49:e2:48:
                    d5:3d:e0:fa:e2:98:14:e4:b0:6f:99:07:b2:09:bc:
                    16:10:fd:48:4a:a1:30:de:cb:d6:12:5e:ee:99:f3:
                    40:21:e8:e6:1a:fc:0d:8a:af:3d:54:4e:89:f9:e2:
                    21:6e:87:0e:55:e3:a6:f0:4b:8f:40:ae:6b:0d:a6:
                    1d:2f:c6:89:d6:3c:4f:0d:e4:63:f7:34:6c:37:de:
                    75:fc:5d:73:c2:ac:9b:72:80:77:e5:02:7d:cc:dc:
                    97:75:eb:2f:73:45:6e:51:21:7d:6e:de:58:a4:0c:
                    b3:9f:3f:f1:fb:ee:56:bc:51:d9:cc:8b:24:a5:c0:
                    51:91:cb:f9:8b:01:09:4f:ea:87:58:2e:4a:e7:2f:
                    22:53:51:a2:b9:dd:7f:15:98:2b:0d:32:38:9f:71:
                    05:03:6d:85:8d:ad:a7:ca:8c:be:c8:80:47:74:2f:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:16:9F:18:9E:6E:E9:B1:51:0D:A5:42:4F:96:9A:ED:A1:FB:CE:A6
            X509v3 Authority Key Identifier:
                keyid:97:67:DA:01:D4:E4:17:99:0C:52:43:FE:75:1D:EC:E4:78:F1:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/9767DA01D4E417990C5243FE751DECE478F14B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9767DA01D4E417990C5243FE751DECE478F14B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/323830313a31313a393830303a3a2f34382d3438203d3e20323732303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:28:52:0e:1c:ca:ef:91:38:7d:3c:56:98:f2:97:78:80:7d:
         18:e7:6e:c8:f1:40:45:8b:6b:78:d3:32:2d:8f:06:b9:9e:70:
         d2:f9:0c:84:c5:82:c6:81:67:1c:c0:e8:c8:d2:67:f5:ff:5c:
         07:b0:a3:d0:96:3c:f1:14:4e:2e:3c:4e:3f:8a:48:48:34:c1:
         a8:06:51:c8:83:77:19:38:5f:3d:96:e7:22:e7:e3:25:9a:9f:
         8d:f0:41:7d:12:4e:37:01:36:b6:09:b8:e1:6f:d7:63:ed:66:
         7e:11:8c:86:2f:e5:b3:8a:32:24:c3:b1:aa:e8:d8:7c:6b:3e:
         0a:ba:5a:73:bd:fc:4d:63:3a:0c:fa:63:37:55:d2:13:3f:91:
         76:15:17:a1:30:41:3e:8c:11:b9:e4:73:6f:c5:21:b6:da:3c:
         3a:48:d8:0d:cc:4e:5c:77:5b:f4:a7:98:f3:e6:bf:75:1e:b7:
         b1:62:49:86:89:01:92:2e:e4:31:11:df:40:8f:db:1f:26:3d:
         ff:b8:71:a3:d8:87:98:68:90:99:d3:3b:27:fe:80:72:7a:e0:
         75:06:f9:81:cb:7f:f1:e5:c0:e7:02:24:78:eb:69:e6:e6:56:
         a6:86:db:19:98:9a:6f:b1:c0:72:1e:d4:3e:1b:9f:91:0c:c0:
         9c:38:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org