Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a343a3a2f34382d3438203d3e20323732313533.roa
File:                     323830313a3138393a343a3a2f34382d3438203d3e20323732313533.roa (raw, json)
Hash identifier:          +QH1KppsxSqONaVqOzyu1qNuj7ILg9Hp+yxR3CatesA=
Subject key identifier:   EC:F8:A3:24:30:28:C8:BC:69:83:5B:00:D2:4B:E5:42:FC:D4:8C:72
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       121EC5B4DFB65780E81F851FCB1CEF481B8DA4AA
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a343a3a2f34382d3438203d3e20323732313533.roa
Signing time:             Tue 05 Mar 2024 17:44:12 +0000
ROA not before:           Tue 05 Mar 2024 17:39:12 +0000
ROA not after:            Tue 04 Mar 2025 17:44:12 +0000
asID:                     272153
IP address blocks:        2801:189:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl
                          rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1e:c5:b4:df:b6:57:80:e8:1f:85:1f:cb:1c:ef:48:1b:8d:a4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Mar  5 17:39:12 2024 GMT
            Not After : Mar  4 17:44:12 2025 GMT
        Subject: CN=ECF8A3243028C8BC69835B00D24BE542FCD48C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:12:91:0b:bb:a9:a5:77:06:92:4a:40:4c:
                    00:e1:85:5f:fd:33:39:77:08:8f:ee:31:e0:55:d5:
                    52:d8:6b:5b:f4:7c:78:f9:f2:dd:63:28:a0:28:c2:
                    a0:b7:d2:04:55:e0:e8:1d:2f:0b:cf:e4:bf:58:21:
                    57:84:e3:37:1d:c2:55:1f:13:a1:fb:81:e0:0e:59:
                    ca:d3:d1:13:20:fd:14:8b:52:8b:4d:77:b2:cc:93:
                    8c:db:c7:86:67:e7:f5:c2:a7:0f:e8:c6:14:27:ff:
                    6c:f4:71:05:f4:70:84:84:fc:29:ea:ea:d5:e7:27:
                    e8:f6:f2:6a:ef:77:c4:e6:a3:03:70:7a:08:6f:db:
                    e9:65:a9:dc:0e:28:d1:29:b8:5b:1d:ca:b5:6c:8f:
                    0f:27:55:9e:4d:f4:24:7c:8a:bd:07:a6:b5:60:12:
                    d6:bd:b8:2f:2d:39:bf:bb:73:1c:45:c3:13:eb:59:
                    8c:be:97:25:54:a5:7f:be:93:74:0e:a0:5a:0d:d5:
                    85:d3:7b:3b:46:77:7c:b1:09:51:f0:da:06:ac:d1:
                    c4:99:1a:ce:03:e6:ab:6f:f0:bb:b2:64:68:c2:d5:
                    36:2b:cf:de:ea:55:0c:a3:46:7a:96:54:4a:3b:bc:
                    e8:cc:5c:39:85:91:a2:be:3f:20:ab:7e:40:c3:26:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F8:A3:24:30:28:C8:BC:69:83:5B:00:D2:4B:E5:42:FC:D4:8C:72
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a343a3a2f34382d3438203d3e20323732313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:40:36:8a:b1:f5:48:ac:08:f8:64:ef:c5:e9:1e:fd:bb:
         15:dc:b2:d7:4b:47:23:07:0a:cd:ec:33:73:4c:40:85:51:89:
         e2:11:24:73:9d:cd:84:63:5c:0b:1b:0b:28:4c:ec:9a:51:c9:
         5f:f1:45:60:1a:23:eb:a8:f6:51:7a:8a:54:ce:e2:8b:06:65:
         bd:4e:f1:2a:55:ae:45:54:6f:7c:1b:1d:7a:29:c9:6f:b3:8c:
         fb:81:cf:b9:bd:6a:00:a2:ea:98:91:43:53:76:6a:e7:59:b6:
         5d:2a:e1:24:f4:d4:68:28:3b:d6:3c:9c:40:00:68:9d:08:77:
         23:1f:66:1c:aa:3c:a3:72:75:e8:74:c7:4c:5b:0b:35:33:b5:
         aa:5c:de:14:3c:c5:63:af:2a:a4:58:3e:10:72:01:eb:07:ea:
         23:58:ae:d9:11:6b:f5:32:a8:a9:7a:86:9c:3c:76:09:03:d0:
         fd:a7:c1:2b:1e:57:42:54:94:84:d0:04:70:13:9d:91:d6:89:
         4d:bb:b3:d6:3c:87:e4:09:2c:95:36:8f:3c:b2:4a:99:0e:b1:
         f7:f1:c8:1d:e6:fe:fe:42:57:20:37:16:5b:86:a5:11:21:43:
         06:c5:9f:44:c6:90:f6:18:68:48:5e:5a:36:7f:67:b5:d8:d6:
         4d:42:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org