Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e20323632353839.roa
File:                     323830313a3137653a3a2f34342d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          Ba4SQsVYwwcNf0fWZlMY2OwNcSRvtDC9SXF5pQKkBaU=
Subject key identifier:   05:B4:9D:51:70:C8:B7:85:61:4D:B4:01:26:0D:61:78:D4:D3:43:1D
Certificate issuer:       /CN=1109011CA008BAA2F51E264C73C31CC3E90D1CC5
Certificate serial:       3A958D1D23DBB456DC5EEF85E0BC5FC8275118EE
Authority key identifier: 11:09:01:1C:A0:08:BA:A2:F5:1E:26:4C:73:C3:1C:C3:E9:0D:1C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:41:44 +0000
ROA not before:           Tue 05 Mar 2024 17:36:44 +0000
ROA not after:            Tue 04 Mar 2025 17:41:44 +0000
asID:                     262589
IP address blocks:        2801:17e::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:95:8d:1d:23:db:b4:56:dc:5e:ef:85:e0:bc:5f:c8:27:51:18:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1109011CA008BAA2F51E264C73C31CC3E90D1CC5
        Validity
            Not Before: Mar  5 17:36:44 2024 GMT
            Not After : Mar  4 17:41:44 2025 GMT
        Subject: CN=05B49D5170C8B785614DB401260D6178D4D3431D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:88:da:b7:ab:15:8c:12:a6:8b:c6:64:74:
                    5e:62:83:13:96:75:5e:2d:99:02:95:db:0c:27:33:
                    4c:d8:ba:aa:b1:a7:2d:67:20:23:8e:93:eb:9f:b4:
                    cf:4f:59:2b:1b:7b:35:d6:a5:5d:6f:41:5a:7d:f3:
                    46:ac:78:9e:06:11:90:b9:9a:1a:70:05:37:63:b9:
                    1a:4d:71:19:06:2c:a2:75:47:00:21:0c:13:9a:eb:
                    96:6a:f2:5c:9c:f3:a2:c6:70:22:77:d6:4a:47:54:
                    e5:f4:b0:fc:22:b6:bc:93:84:ba:f6:60:14:b7:73:
                    71:6e:29:43:58:ff:f4:65:7d:10:f9:d8:aa:5d:df:
                    69:f8:85:5f:b0:5e:8f:3e:cb:c4:ba:8c:ad:8c:3a:
                    f0:19:19:ae:70:67:98:fd:14:bd:c7:5f:78:09:a2:
                    f5:ea:fc:63:d3:9d:2a:ad:f7:74:0b:81:e6:02:12:
                    74:8d:3b:31:a9:cc:fc:bd:a4:84:c1:51:c4:64:08:
                    ae:a2:1a:c6:74:e9:1a:a0:95:53:83:8c:e8:07:29:
                    be:13:69:8b:91:d5:01:8e:9e:5c:7a:98:8a:50:1d:
                    15:36:51:cd:22:d9:4d:93:8b:88:aa:38:12:0a:37:
                    ba:63:cf:cc:b4:e0:c6:00:b6:23:c1:fb:bc:3b:d3:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B4:9D:51:70:C8:B7:85:61:4D:B4:01:26:0D:61:78:D4:D3:43:1D
            X509v3 Authority Key Identifier:
                keyid:11:09:01:1C:A0:08:BA:A2:F5:1E:26:4C:73:C3:1C:C3:E9:0D:1C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1109011CA008BAA2F51E264C73C31CC3E90D1CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42F4A7A284B4F77FC1779AF2C8A0DB08941699F86880911AA796D19E018D4455/0/323830313a3137653a3a2f34342d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17e::/44

    Signature Algorithm: sha256WithRSAEncryption
         c1:c8:ed:b9:5f:65:12:bc:b9:5f:c1:a4:16:e3:62:e8:08:b8:
         f4:7f:9d:82:53:6e:c5:7d:82:31:57:2a:d6:35:61:e5:ca:e1:
         9a:6f:85:64:2f:01:a0:dd:2c:36:8b:5b:84:a4:5a:ff:62:79:
         15:6c:99:e2:01:09:38:ce:60:5a:7b:a4:3e:51:ae:da:dd:c1:
         e8:27:9a:a7:4e:3a:67:6b:28:17:e1:e0:6c:f0:1f:9a:e0:a7:
         9f:1e:74:61:83:31:6f:08:da:8b:a1:3c:46:8d:2b:d7:24:8f:
         ed:44:66:8a:f0:74:ff:51:e4:de:d0:2f:dd:ce:90:4e:3d:32:
         41:d2:ee:00:aa:7e:2d:f2:8f:13:cf:8f:a7:cb:82:1a:7d:ac:
         d3:6a:d6:b6:22:7b:2b:88:a3:e7:cf:7b:b9:95:f3:72:7f:ed:
         c6:ae:98:89:e6:09:89:1c:c2:a0:6b:5c:72:3e:81:51:77:2b:
         04:4b:45:09:fa:2d:5c:c6:bc:37:74:d0:07:f1:50:32:c0:26:
         ce:78:2e:f6:bc:a1:a3:2a:64:3e:c0:74:1e:1a:20:27:07:21:
         17:94:d4:84:64:bb:27:24:bb:5f:40:3c:be:ee:16:ba:40:3e:
         6d:8f:c2:49:52:4e:ac:ed:65:3d:cb:6f:4c:9b:16:bb:2a:8c:
         1f:8b:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org