Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa
File:                     323830313a303a32303a3a2f34382d3634203d3e203631343638.roa (raw, json)
Hash identifier:          OwJEM0KvoSMpb03zNEYb7DJFYJY3xuvelJXaSrn2e3Y=
Subject key identifier:   B3:36:68:07:40:7E:D8:16:F9:13:4D:09:19:A1:58:CC:7D:57:92:75
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       667D58634FBBBC7E160644B44EBA865AECB78821
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa
Signing time:             Wed 13 Nov 2024 16:30:02 +0000
ROA not before:           Wed 13 Nov 2024 16:25:02 +0000
ROA not after:            Wed 12 Nov 2025 16:30:02 +0000
asID:                     61468
IP address blocks:        2801:0:20::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7d:58:63:4f:bb:bc:7e:16:06:44:b4:4e:ba:86:5a:ec:b7:88:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Nov 13 16:25:02 2024 GMT
            Not After : Nov 12 16:30:02 2025 GMT
        Subject: CN=B3366807407ED816F9134D0919A158CC7D579275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:3e:e9:0c:c6:f9:8f:0a:d5:57:e6:60:78:
                    47:c5:cb:ba:89:4e:84:ad:6c:7d:0a:42:91:50:14:
                    a2:ca:66:f1:85:05:1e:00:a0:1c:0e:50:d7:c3:27:
                    c3:a4:f8:66:45:c0:0e:1d:98:97:ab:13:9d:5f:d5:
                    84:32:a0:98:20:14:2b:f0:f6:75:fd:fe:f8:96:bc:
                    4a:54:9c:7c:9f:c5:4a:7d:98:3a:81:96:38:1a:69:
                    c1:a6:86:45:84:1d:99:bc:94:55:5f:79:48:ea:6e:
                    2d:37:cf:a8:07:34:58:dc:40:42:75:36:d4:a5:b4:
                    66:5b:3c:8f:c4:6a:54:16:0c:1f:e5:f4:49:10:8c:
                    19:33:80:b1:9e:58:0a:c8:9c:c7:09:1e:20:82:b7:
                    d2:db:ef:4a:42:85:ba:43:95:c2:c9:9a:bd:d6:a0:
                    35:4d:6c:3c:97:3f:cf:62:6d:dc:81:c1:c9:7e:fc:
                    dc:31:7c:c0:74:61:31:e0:e3:f1:02:8f:79:37:84:
                    2c:d4:fe:39:d1:97:6c:85:17:fd:f8:40:fa:e4:a6:
                    d6:6a:fc:4c:1f:1b:4a:cc:8d:26:87:2a:7b:44:ac:
                    3e:ec:54:bc:d8:11:42:f3:8c:e1:ac:a0:b8:a7:2b:
                    65:95:0c:af:ea:9f:5f:61:b8:b5:ba:74:47:92:00:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:36:68:07:40:7E:D8:16:F9:13:4D:09:19:A1:58:CC:7D:57:92:75
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3634203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:ee:55:cb:06:b0:cb:e9:5d:d7:24:d3:e5:f0:55:df:b7:
         99:6b:97:0f:e2:cd:39:2f:4f:92:cf:1b:d4:d2:c5:f8:d5:e0:
         9d:31:a8:ae:f7:8f:b2:58:34:42:cb:f1:60:fb:d9:65:c3:74:
         95:33:05:dd:6d:b4:b0:e8:55:18:a0:a2:07:78:1e:f6:66:5e:
         d7:06:e8:b5:ac:63:60:37:b4:ce:09:9b:c0:90:12:da:10:d0:
         90:a3:02:3b:5d:d5:2a:43:ee:54:e6:42:b8:16:3b:9a:8e:49:
         e1:0f:cb:d6:58:2b:5e:3f:c1:c6:99:2d:df:25:6e:ed:02:16:
         40:7e:ed:33:87:02:ec:5e:2b:cb:1d:8f:a3:6f:83:d2:67:11:
         f6:ec:8d:80:6c:ef:aa:34:11:81:84:64:01:57:69:dc:66:1b:
         92:c6:f3:45:70:60:48:e1:fc:4c:57:89:3c:fb:41:cf:b2:15:
         a9:7a:7c:70:09:66:c8:17:0a:c8:01:08:26:9e:90:ea:6f:bd:
         d4:e1:7e:43:ca:81:de:88:3d:15:ed:7f:89:32:a4:b6:96:b0:
         e4:11:5f:5e:46:17:cc:3a:61:26:c5:fb:66:e5:31:f9:b0:51:
         62:76:ec:e6:5e:be:b5:42:cc:8f:af:41:27:df:26:18:fc:fb:
         98:0b:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org