Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          1OjSp4Y423G4dzJ0N+9geXChDppV7iQlDk/OJU1kPuc=
Subject key identifier:   E2:24:C1:ED:22:8D:71:C8:A5:35:E3:DA:88:62:B5:EA:34:5B:53:83
Certificate issuer:       /CN=D250CE792821FD0F56C8D82DCB69EE4C56791CE5
Certificate serial:       706148B4B7880C2441ACF2C43D8ED80D025EA559
Authority key identifier: D2:50:CE:79:28:21:FD:0F:56:C8:D8:2D:CB:69:EE:4C:56:79:1C:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:56:04 +0000
ROA not before:           Tue 05 Mar 2024 17:51:04 +0000
ROA not after:            Tue 04 Mar 2025 17:56:04 +0000
asID:                     19429
IP address blocks:        2801:1f:3800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 22:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:61:48:b4:b7:88:0c:24:41:ac:f2:c4:3d:8e:d8:0d:02:5e:a5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D250CE792821FD0F56C8D82DCB69EE4C56791CE5
        Validity
            Not Before: Mar  5 17:51:04 2024 GMT
            Not After : Mar  4 17:56:04 2025 GMT
        Subject: CN=E224C1ED228D71C8A535E3DA8862B5EA345B5383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:2f:28:92:57:7c:46:ca:fe:7f:38:ed:62:
                    b0:00:93:be:f2:f3:a4:60:e2:66:7d:87:c7:70:9f:
                    22:b8:52:1f:34:3c:b7:ab:ec:7d:d8:df:19:30:da:
                    4e:43:dc:e9:e1:34:d7:02:42:b0:1c:b9:92:89:3a:
                    9e:36:ae:57:05:96:45:63:9d:b5:ee:83:2d:f5:b9:
                    43:6a:5f:f7:06:da:2c:1c:5c:40:33:da:dd:99:96:
                    ee:4b:ed:8b:07:5d:1d:e5:1c:11:48:bb:24:c3:6e:
                    c1:a3:9d:f1:57:7a:0b:d5:be:cf:1a:4a:a9:ae:1f:
                    ea:7b:e6:40:fc:ae:f0:68:6e:bd:62:8c:42:8b:7e:
                    ee:ae:b0:30:e3:a0:1e:79:c8:88:bd:d9:5c:11:91:
                    20:29:d6:bf:75:77:f7:37:b6:b6:62:47:9a:a4:5f:
                    08:d6:33:02:f8:6d:ce:d0:68:e9:91:cf:7b:74:17:
                    54:d5:08:eb:e7:16:79:d5:43:39:11:da:5a:da:ab:
                    fe:a6:0d:23:ee:59:48:3a:bf:7f:53:0e:20:58:e9:
                    dc:c0:1c:d8:05:f9:57:c0:f7:41:f4:05:b2:4a:14:
                    95:c5:d7:53:10:9a:b9:0c:c6:2e:a0:d5:12:16:1d:
                    1d:3c:69:34:95:1e:19:46:6e:d9:98:6a:db:43:6e:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:24:C1:ED:22:8D:71:C8:A5:35:E3:DA:88:62:B5:EA:34:5B:53:83
            X509v3 Authority Key Identifier:
                keyid:D2:50:CE:79:28:21:FD:0F:56:C8:D8:2D:CB:69:EE:4C:56:79:1C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D250CE792821FD0F56C8D82DCB69EE4C56791CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46B59A93446F5A6283EFECB79AB2800196885FF9E5A5092EB3A4E965590CDD37/0/323830313a31663a333830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:e1:2e:b3:76:da:79:33:ee:16:fd:6d:c4:7f:bc:af:f5:
         ae:e9:80:a7:e0:ed:ec:91:f0:f6:7a:2b:77:15:88:36:7e:fe:
         0a:5f:6f:5b:8b:b8:7e:92:ea:91:17:57:0e:b3:4a:e9:84:6d:
         7e:b3:03:14:df:de:de:27:2b:18:43:ad:05:05:3c:31:e5:56:
         a0:8b:60:1f:90:5a:0c:5d:18:21:d0:f9:51:29:64:d1:79:f1:
         b2:24:8d:4d:5c:e9:40:14:62:c7:d2:dd:7c:18:da:17:d6:9e:
         b3:91:51:bc:54:74:d0:af:ae:f1:88:c2:e8:28:cf:43:f5:38:
         bb:65:43:b3:84:d8:72:18:e0:d5:a4:e0:0c:a8:4e:31:a4:cc:
         02:72:ed:37:b2:4a:38:28:17:f8:3a:ec:ac:25:85:f9:f4:0f:
         1b:23:8e:51:39:f4:09:20:5f:40:87:d9:ae:6c:d0:e2:47:5c:
         91:fa:76:83:ab:c7:71:7a:81:29:a9:65:cb:a4:9b:04:0b:08:
         ea:8a:7b:d8:53:12:52:23:39:6d:9e:53:02:af:a3:4e:a9:96:
         cf:2d:60:45:01:bb:ee:06:8d:00:f8:55:a3:ea:6c:11:c9:77:
         46:33:a0:32:9f:ba:e4:24:cb:b5:a2:33:c1:da:5b:25:de:b7:
         cf:0f:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:56 2024 by rpki-client on console-fra.rpki-client.org