Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4318ce8f-bec0-42d0-bf05-80a0f60daa32/f1e509a931dde0181a27e3dbb765ce76838694e3.roa
File:                     f1e509a931dde0181a27e3dbb765ce76838694e3.roa (raw, json)
Hash identifier:          ZET50K/bHlovs7WQbp0V+2ofhK4w/ky2WG3TAaKSSeg=
Subject key identifier:   A1:96:AF:BF:20:9C:B5:25:A1:65:20:12:B2:D3:10:22:55:60:DC:79
Certificate issuer:       /CN=f2c375acc9d4dfa7479a94e84cb7a8b74628d87f
Certificate serial:       10F3A8
Authority key identifier: 1E:41:93:46:15:76:B7:B2:C0:35:B5:6A:E0:02:8F:4F:F4:32:98:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2c375acc9d4dfa7479a94e84cb7a8b74628d87f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4318ce8f-bec0-42d0-bf05-80a0f60daa32/f1e509a931dde0181a27e3dbb765ce76838694e3.roa
Signing time:             Wed 27 Oct 2021 16:24:50 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     3356
IP address blocks:        2801:19:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4318ce8f-bec0-42d0-bf05-80a0f60daa32/f2c375acc9d4dfa7479a94e84cb7a8b74628d87f.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4318ce8f-bec0-42d0-bf05-80a0f60daa32/f2c375acc9d4dfa7479a94e84cb7a8b74628d87f.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2c375acc9d4dfa7479a94e84cb7a8b74628d87f.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110952 (0x10f3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2c375acc9d4dfa7479a94e84cb7a8b74628d87f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f1e509a931dde0181a27e3dbb765ce76838694e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:51:6c:99:05:8e:93:f5:fe:41:06:a4:cd:
                    a5:3a:b5:37:01:62:99:a2:d3:dd:ef:cb:ea:18:bc:
                    a2:78:53:65:c0:83:f1:25:54:fe:ac:3a:2b:da:bc:
                    de:11:b7:1c:78:f4:46:b0:cf:9b:78:47:87:56:90:
                    a1:44:3b:39:32:7d:8e:07:13:95:9a:05:69:10:30:
                    1d:fa:8c:0b:3d:fb:6e:c1:52:b0:40:40:0d:e6:73:
                    c0:04:7c:36:ab:1a:4e:8d:73:4b:fd:5d:15:40:08:
                    de:55:c1:1b:46:de:7d:8c:a8:27:3c:99:ec:56:81:
                    f4:19:9b:5b:9f:c9:aa:4b:30:fa:48:34:34:14:0f:
                    b5:9d:c0:ac:a3:1d:00:ac:e4:83:8d:68:62:2e:99:
                    61:c9:79:2a:fd:dd:52:1f:34:f6:9f:e4:bc:fe:cc:
                    34:c6:69:98:09:c4:df:5b:f7:42:e7:97:15:15:37:
                    3b:1a:01:76:9f:64:84:9f:4b:e5:28:7a:74:b7:f3:
                    df:91:bd:1b:c4:2f:ce:3c:92:06:0e:e6:a2:24:88:
                    e0:39:76:b5:9c:c6:b0:12:1d:7b:d6:46:95:75:0a:
                    39:29:7c:3d:e9:3b:79:3e:b1:37:0d:1d:b8:6f:fb:
                    1b:9c:64:72:ce:e6:63:9e:7c:e6:6c:51:c6:7a:88:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:96:AF:BF:20:9C:B5:25:A1:65:20:12:B2:D3:10:22:55:60:DC:79
            X509v3 Authority Key Identifier:
                keyid:1E:41:93:46:15:76:B7:B2:C0:35:B5:6A:E0:02:8F:4F:F4:32:98:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2c375acc9d4dfa7479a94e84cb7a8b74628d87f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4318ce8f-bec0-42d0-bf05-80a0f60daa32/f1e509a931dde0181a27e3dbb765ce76838694e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4318ce8f-bec0-42d0-bf05-80a0f60daa32/f2c375acc9d4dfa7479a94e84cb7a8b74628d87f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:16:5d:32:9d:9b:1c:d9:03:6c:97:a6:6d:c8:4f:fc:15:8a:
         ef:67:4a:5f:c0:2f:c8:7d:02:56:6b:80:fa:4a:fd:41:30:1d:
         49:b0:a3:22:a0:97:ff:2c:7b:f5:80:c6:2b:87:8b:d6:be:92:
         d5:8d:16:0e:b6:a4:7b:2c:f7:99:c2:cc:0e:47:78:39:ec:90:
         2e:13:8c:d2:e1:6a:a0:39:1f:73:b5:47:1e:b2:8a:d2:fc:76:
         65:88:7e:d1:35:c5:67:35:96:58:ed:ae:1a:4e:3c:41:54:dd:
         67:73:61:16:9c:6b:a2:15:de:20:1a:3f:80:f6:ea:f8:2b:55:
         46:f2:3c:8d:d0:a8:09:75:e9:c2:c2:9a:f8:3d:dc:fb:5a:90:
         23:47:2d:b3:21:1d:70:b2:eb:0e:10:65:0a:f0:84:02:2a:ed:
         27:08:8c:0b:eb:f6:b2:87:26:4c:79:35:e0:1d:2e:35:40:dd:
         ae:cc:f6:7e:05:2e:45:15:d4:ca:43:26:0c:80:f9:aa:41:db:
         6b:2a:06:9f:4e:de:36:a6:df:c6:c6:9b:d7:d6:b8:74:2d:9f:
         07:3f:61:39:63:c8:41:5c:19:a3:6f:91:39:03:8f:11:98:2c:
         75:06:c9:1e:9e:d4:25:68:97:ec:1f:94:c2:27:2d:32:71:36:
         6e:a0:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:28:50 2024 by rpki-client on console-ams.rpki-client.org