Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/481B1E1405DC466074383B24374EC800A13FF03D20B3BAC4B0A0D915CB95E29A/0/323830313a3136393a343a3a2f34382d3438203d3e203331383938.roa
File:                     323830313a3136393a343a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          BYYzNkVj1PyboaPCj7fKCerocDrBbpgbMKPlNtsyhCg=
Subject key identifier:   DE:EC:E5:14:A7:98:3E:D1:94:D7:98:54:49:64:15:2D:12:DE:10:49
Certificate issuer:       /CN=6142E0F113449803C8BFD0ECE2F691A35AE94DF0
Certificate serial:       2AB2C197391799F222B9E8848FC5506FE9C77E78
Authority key identifier: 61:42:E0:F1:13:44:98:03:C8:BF:D0:EC:E2:F6:91:A3:5A:E9:4D:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6142E0F113449803C8BFD0ECE2F691A35AE94DF0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/481B1E1405DC466074383B24374EC800A13FF03D20B3BAC4B0A0D915CB95E29A/0/323830313a3136393a343a3a2f34382d3438203d3e203331383938.roa
Signing time:             Tue 05 Mar 2024 17:40:31 +0000
ROA not before:           Tue 05 Mar 2024 17:35:31 +0000
ROA not after:            Tue 04 Mar 2025 17:40:31 +0000
asID:                     31898
IP address blocks:        2801:169:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/481B1E1405DC466074383B24374EC800A13FF03D20B3BAC4B0A0D915CB95E29A/0/6142E0F113449803C8BFD0ECE2F691A35AE94DF0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/481B1E1405DC466074383B24374EC800A13FF03D20B3BAC4B0A0D915CB95E29A/0/6142E0F113449803C8BFD0ECE2F691A35AE94DF0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6142E0F113449803C8BFD0ECE2F691A35AE94DF0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b2:c1:97:39:17:99:f2:22:b9:e8:84:8f:c5:50:6f:e9:c7:7e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6142E0F113449803C8BFD0ECE2F691A35AE94DF0
        Validity
            Not Before: Mar  5 17:35:31 2024 GMT
            Not After : Mar  4 17:40:31 2025 GMT
        Subject: CN=DEECE514A7983ED194D798544964152D12DE1049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:70:d2:a9:9a:95:24:fc:18:c5:fc:48:6a:
                    9d:26:15:d9:55:a1:2b:f8:aa:34:06:f6:ea:e6:fe:
                    61:74:49:80:fd:b1:3d:c7:3e:b8:e7:d7:aa:53:98:
                    f4:83:37:95:20:a5:4f:04:de:90:b0:c5:87:ed:f9:
                    bf:06:29:5b:a0:a0:35:72:72:b9:da:34:de:9a:2a:
                    6f:e7:79:57:d4:ad:12:ff:f1:9f:65:b6:41:7b:6e:
                    41:6c:9d:e6:f5:66:94:b9:b7:e9:8a:a5:56:b3:20:
                    d1:41:54:1a:a7:8d:40:2e:31:af:fc:dd:45:f5:ad:
                    16:54:2f:08:ba:4d:de:dc:9e:20:76:6c:02:20:74:
                    82:c8:eb:e0:06:1a:d1:db:b0:82:b9:fa:e8:5e:bd:
                    ab:c5:56:84:50:61:6b:3d:5c:1b:3d:cd:1d:a7:d5:
                    6a:13:19:3f:24:fb:a7:c4:50:8b:27:bc:e8:8f:03:
                    c2:dd:98:2e:cd:a9:c1:3c:0e:a5:c2:bb:12:cf:bf:
                    2c:3f:7a:6e:d6:83:71:92:eb:88:6f:4d:40:bf:31:
                    da:25:ac:5f:a5:a6:28:ad:a0:20:9e:74:38:d4:3c:
                    dc:24:c2:9f:2e:2f:d4:ed:da:b3:98:b2:d6:8b:3d:
                    97:17:6e:8d:10:47:64:7c:23:4c:c8:72:82:fb:f0:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EC:E5:14:A7:98:3E:D1:94:D7:98:54:49:64:15:2D:12:DE:10:49
            X509v3 Authority Key Identifier:
                keyid:61:42:E0:F1:13:44:98:03:C8:BF:D0:EC:E2:F6:91:A3:5A:E9:4D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/481B1E1405DC466074383B24374EC800A13FF03D20B3BAC4B0A0D915CB95E29A/0/6142E0F113449803C8BFD0ECE2F691A35AE94DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6142E0F113449803C8BFD0ECE2F691A35AE94DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/481B1E1405DC466074383B24374EC800A13FF03D20B3BAC4B0A0D915CB95E29A/0/323830313a3136393a343a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:169:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:e0:8f:8b:60:35:e4:fb:c5:8c:0e:46:97:ba:2b:d6:94:3f:
         50:90:d4:9d:d2:a5:51:e5:b6:8f:a9:fd:92:41:5d:5a:71:a7:
         56:40:9f:c6:de:0b:64:04:27:f7:0b:54:20:a0:f5:3f:fc:69:
         4b:fc:bc:2a:1f:19:e8:85:51:b8:62:22:3f:9a:f5:31:30:4b:
         5e:9a:81:ca:53:72:37:1c:f6:9d:e3:4c:7c:1e:37:bb:86:5e:
         73:40:1a:ca:cd:d6:a9:4c:4b:c3:02:aa:a4:fd:41:21:04:54:
         20:11:c0:26:b5:49:bd:e2:69:e7:42:9b:19:74:50:08:6a:11:
         b2:30:05:c2:74:6c:0c:14:18:5e:bf:c8:54:cf:d1:02:04:35:
         c4:eb:c3:20:4b:17:63:ff:7b:f4:8a:2d:28:59:09:6f:81:7b:
         bf:35:28:48:56:7d:12:3f:75:b2:c3:7a:5e:ac:b8:f8:c9:eb:
         56:62:5b:65:3f:25:e7:38:9d:57:28:f0:4d:d8:c1:84:3a:a7:
         e4:10:e1:4a:cd:df:3e:04:72:6e:f4:ce:98:77:cc:a5:13:59:
         a7:0b:f3:83:0f:3a:26:82:8c:57:2a:8c:d6:8c:eb:44:f9:e8:
         6d:2f:e8:e2:53:38:b7:8e:f5:74:48:17:a5:74:57:0c:81:13:
         6b:6f:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:39 2024 by rpki-client on console-ams.rpki-client.org