Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa
File:                     323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa (raw, json)
Hash identifier:          P6IliH42pedEEAw5oZPIimqkvl4oQhTfFUuOEXQa9+o=
Subject key identifier:   B0:9A:FD:97:9B:04:D7:2B:F1:7A:A0:C0:1B:40:B1:9A:02:B0:FC:EE
Certificate issuer:       /CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
Certificate serial:       15106B3562754107102CFFA8A6ACB4E645006F8D
Authority key identifier: 81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa
Signing time:             Tue 05 Mar 2024 17:51:25 +0000
ROA not before:           Tue 05 Mar 2024 17:46:25 +0000
ROA not after:            Tue 04 Mar 2025 17:51:25 +0000
asID:                     264843
IP address blocks:        2801:14:d000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:10:6b:35:62:75:41:07:10:2c:ff:a8:a6:ac:b4:e6:45:00:6f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
        Validity
            Not Before: Mar  5 17:46:25 2024 GMT
            Not After : Mar  4 17:51:25 2025 GMT
        Subject: CN=B09AFD979B04D72BF17AA0C01B40B19A02B0FCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:97:3c:8a:67:8a:db:9c:93:fe:71:81:54:
                    00:ea:0e:2e:a3:bf:29:1b:c6:a2:01:6f:b7:bb:4c:
                    48:92:54:ec:d0:3a:79:e3:fd:03:09:a2:27:77:03:
                    7a:99:82:ef:ce:8c:3b:51:3d:6c:f8:58:f2:c0:bf:
                    4d:c5:52:12:62:9b:c5:89:d7:c8:23:75:89:a8:69:
                    71:c7:82:72:16:11:5b:05:27:7e:8a:9a:46:b6:c4:
                    90:94:f9:43:5e:9e:92:12:ab:6d:01:8a:cd:03:50:
                    3d:83:d8:cb:8f:27:27:03:70:db:82:cc:de:6e:39:
                    e0:2c:63:2c:cb:da:32:46:69:47:fa:ae:58:df:88:
                    f2:bf:6d:30:81:fd:7f:cb:15:25:45:a1:92:06:7c:
                    72:29:5b:5e:63:74:5b:c2:ef:f9:9a:b4:88:3d:ae:
                    82:fa:0f:fa:4e:bb:75:d3:b9:15:4d:d1:41:bf:79:
                    be:84:fb:2b:7d:15:07:e4:04:9e:0b:f7:42:a1:1b:
                    ac:1c:5f:98:ae:dc:17:48:ba:a7:74:2d:9c:39:18:
                    3f:ab:7a:fd:4e:64:ee:38:35:12:94:6d:bf:81:cd:
                    0d:4a:a5:63:ce:08:aa:9b:c6:df:ef:a8:ff:ae:e1:
                    c1:e3:a3:c5:e0:e8:10:37:d6:fd:8f:89:5b:e4:43:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9A:FD:97:9B:04:D7:2B:F1:7A:A0:C0:1B:40:B1:9A:02:B0:FC:EE
            X509v3 Authority Key Identifier:
                keyid:81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/323830313a31343a643030303a3a2f34342d3434203d3e20323634383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:f1:db:59:d2:b4:af:39:ea:5e:c0:bf:ef:e7:4a:8d:54:7d:
         de:7d:b9:1d:fe:ad:b8:14:ad:29:fa:c9:ed:33:1c:cc:ad:a2:
         08:5f:e6:ad:10:e4:fc:ab:b6:a4:0c:a2:a9:5c:5b:d6:7a:41:
         9f:a5:13:d1:ba:98:88:c7:9b:a1:a0:18:0c:de:06:78:b5:da:
         97:18:f7:0a:7a:9d:80:e8:91:e5:74:49:3f:c5:6e:70:75:10:
         ce:93:95:3a:67:ef:af:0b:28:af:d7:5d:0f:0a:ee:21:03:3e:
         05:9e:e9:05:03:d9:e5:ee:6e:d1:a9:55:ac:f1:bc:23:bc:91:
         ca:54:24:de:73:9d:1f:8a:63:99:39:02:ee:1c:af:b0:da:6e:
         8b:2b:1a:18:e6:6d:14:32:74:8a:76:9b:59:23:d3:16:87:60:
         44:87:1d:76:94:9f:60:1f:7e:96:18:4c:c2:da:70:21:5b:36:
         5f:c0:ae:cc:74:80:e6:53:e5:67:37:3a:6c:35:b2:39:87:fe:
         da:fc:e1:ef:2c:b5:c8:88:b8:e9:64:4e:64:b9:e7:8d:1e:38:
         8d:07:fd:dd:2f:b3:12:61:b0:6e:fe:8b:de:23:a3:07:5d:b7:
         2d:37:7d:fe:c4:ff:3a:97:16:af:28:c0:47:af:ac:f0:07:92:
         80:42:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org