Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a353a3a2f34382d3438203d3e20323732313533.roa
File:                     323830313a3138393a353a3a2f34382d3438203d3e20323732313533.roa (raw, json)
Hash identifier:          x940p1ozVhFVtKrQfc3rX1lASq4m7lBFpWv1XscGGGA=
Subject key identifier:   48:7C:D1:A8:5C:D2:E3:28:6D:1C:6C:57:0D:8A:AB:F0:52:D8:5C:82
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       3BD0DF08DA52AA8E879DFD81AD03FDE87FC17C53
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a353a3a2f34382d3438203d3e20323732313533.roa
Signing time:             Tue 05 Mar 2024 17:44:12 +0000
ROA not before:           Tue 05 Mar 2024 17:39:12 +0000
ROA not after:            Tue 04 Mar 2025 17:44:12 +0000
asID:                     272153
IP address blocks:        2801:189:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl
                          rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d0:df:08:da:52:aa:8e:87:9d:fd:81:ad:03:fd:e8:7f:c1:7c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Mar  5 17:39:12 2024 GMT
            Not After : Mar  4 17:44:12 2025 GMT
        Subject: CN=487CD1A85CD2E3286D1C6C570D8AABF052D85C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:a8:af:a7:5a:15:ca:d3:26:40:cc:fb:51:
                    95:10:25:85:af:48:05:96:c3:b8:d7:d6:3e:98:57:
                    06:ba:91:03:bc:46:e3:c5:be:c3:70:2b:ea:18:55:
                    32:fd:52:30:cb:da:c9:e1:4c:23:c4:a4:c7:b6:84:
                    3b:dc:52:38:f5:27:2c:f9:58:b9:7f:4f:37:26:32:
                    06:b9:ad:ab:5f:70:1a:b0:68:54:2f:3b:fc:11:ca:
                    99:e8:b7:b5:f8:2b:81:45:4a:db:4b:db:46:e8:c0:
                    33:7e:67:9e:2c:65:a7:78:b3:3d:59:f0:43:db:6b:
                    e9:94:30:ba:0b:b3:f1:f4:b9:a4:ba:32:48:c6:14:
                    c0:8c:30:18:f3:77:63:cb:3c:84:b4:bd:7c:96:8a:
                    dd:01:04:1e:97:b8:d7:69:79:29:46:8e:ca:3c:39:
                    cc:b8:57:69:f1:ec:77:74:31:4f:34:d4:a7:73:b9:
                    a3:f4:31:64:96:f6:68:10:20:15:7d:dc:61:28:23:
                    fd:68:01:48:0c:e7:97:fe:33:64:49:c6:dc:aa:da:
                    f6:2c:86:41:91:fb:89:5f:af:51:07:10:4a:c7:03:
                    92:3d:9d:09:09:c6:93:f6:9b:96:15:f3:ba:d2:14:
                    57:f8:fd:b0:4f:63:c6:ce:13:96:30:9f:06:9d:58:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:D1:A8:5C:D2:E3:28:6D:1C:6C:57:0D:8A:AB:F0:52:D8:5C:82
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a353a3a2f34382d3438203d3e20323732313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:00:14:bf:87:2d:85:97:a4:52:cf:1c:de:0f:78:5a:33:81:
         73:2b:06:6b:d4:98:3b:b7:73:4f:ba:70:c7:7a:74:f5:bb:41:
         92:dc:a7:67:85:ab:f6:21:c8:4b:43:a1:60:cf:66:8e:0c:e3:
         e8:95:e2:ad:93:c5:eb:01:a5:01:0d:20:b6:fc:86:1e:ea:39:
         ce:da:3b:2a:c9:3d:ad:b0:b0:45:bb:4e:8a:85:cf:33:af:ca:
         f7:0e:5b:f1:6e:21:f2:7b:3c:14:ce:d9:a5:16:c5:21:3b:e5:
         6b:75:82:36:18:f0:04:d3:d5:92:c6:3a:a3:2d:b0:4d:32:fb:
         e5:25:d3:75:9c:90:70:4f:5c:04:fc:9d:8e:5c:84:48:18:03:
         16:75:d5:1c:c4:a2:ae:de:0c:28:f2:08:99:9a:06:77:d2:5b:
         f1:80:d9:0a:ab:3b:49:8b:51:c9:fa:b7:48:5b:a3:b8:9c:41:
         0d:3a:01:a2:e3:22:0d:1c:43:28:13:5d:5a:17:5c:2d:6f:71:
         f0:1e:0a:ca:a5:7e:f1:61:2d:7b:94:df:fe:d5:2c:a2:bd:2f:
         5d:26:b2:67:2f:95:40:40:23:4f:03:46:2c:09:63:0f:e4:65:
         c6:b7:71:74:da:34:e9:29:8b:f6:ca:ef:e2:2d:a6:a3:1c:33:
         84:5b:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org