Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323632313931.roa
File:                     323830313a3138393a3a2f34342d3434203d3e20323632313931.roa (raw, json)
Hash identifier:          RsztcndwVdubeWpXrRAcpSZQ78z8RbvaM2FJ5DaUnUg=
Subject key identifier:   C0:CF:84:81:EE:E5:0F:7D:B4:F0:C8:12:E2:33:0F:3E:42:1A:19:2F
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       441EC0FA9A01DF3448CFABDE444C3638E724ED5D
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 17:44:13 +0000
ROA not before:           Tue 05 Mar 2024 17:39:13 +0000
ROA not after:            Tue 04 Mar 2025 17:44:13 +0000
asID:                     262191
IP address blocks:        2801:189::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl
                          rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1e:c0:fa:9a:01:df:34:48:cf:ab:de:44:4c:36:38:e7:24:ed:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Mar  5 17:39:13 2024 GMT
            Not After : Mar  4 17:44:13 2025 GMT
        Subject: CN=C0CF8481EEE50F7DB4F0C812E2330F3E421A192F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:e1:f0:e5:74:06:68:76:9e:e5:d0:48:83:
                    56:73:6c:0f:d8:e4:78:1e:51:a0:89:a3:fc:09:6b:
                    cb:b7:74:36:b2:e5:15:0d:52:29:8e:06:9e:c6:44:
                    6b:48:72:da:6c:3c:48:a1:e6:22:09:a4:fb:63:d2:
                    fa:ce:23:48:8e:1c:6c:41:61:0b:fd:a7:2d:2b:b7:
                    6c:f6:a9:45:b1:55:85:6a:a8:8f:10:42:64:a0:1e:
                    c6:b4:90:6e:8c:e4:5d:38:7b:bb:93:b8:42:43:b1:
                    ff:a5:42:44:ca:c4:f1:5b:ac:6c:70:b3:b5:07:de:
                    c7:f7:5f:04:88:1d:bf:19:0b:92:4b:d6:a6:ba:dc:
                    f6:63:d2:f0:f2:8c:6e:55:9b:42:26:7b:29:e7:e9:
                    80:cc:2a:84:a8:9c:5c:91:41:ff:4a:76:e7:1e:66:
                    c2:e2:6c:a5:9d:b6:2b:77:46:04:2f:15:b4:5d:73:
                    b9:cf:3a:de:10:3e:68:66:74:4e:f3:44:64:66:9f:
                    75:1c:84:4b:b2:0f:e4:fa:90:db:11:2f:69:aa:20:
                    0f:5f:31:72:f1:17:0e:5c:b4:f4:6b:20:b6:9b:c9:
                    b0:a6:00:d5:eb:26:8d:52:c8:d6:5e:8f:2b:b3:94:
                    a5:76:7c:23:d1:e9:6d:ce:e7:ac:a9:6c:e3:75:cd:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CF:84:81:EE:E5:0F:7D:B4:F0:C8:12:E2:33:0F:3E:42:1A:19:2F
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:00:3f:6b:dc:99:52:b1:23:6c:8d:54:32:fc:ea:b0:44:9d:
         20:99:a8:9c:8e:39:da:18:83:94:b4:63:19:ae:57:0b:b4:8b:
         6c:c0:d1:90:f0:32:8a:43:ee:c0:9f:25:79:b9:da:81:ad:8d:
         1a:25:c7:28:6c:ee:92:49:0b:ec:b8:66:7f:76:fa:68:2e:17:
         a0:7b:56:2c:66:67:70:f4:cd:4e:7b:3a:69:ca:d4:b1:8e:a6:
         72:a1:47:01:9d:2e:d1:0d:4a:bc:6d:fc:1c:01:c6:f6:5e:97:
         64:70:5e:45:06:1d:10:d8:6b:5b:4a:0c:b4:14:cb:8f:69:00:
         00:aa:e8:f6:34:f5:bd:73:63:5c:c2:1c:7e:72:a4:10:cc:bf:
         cc:fe:3a:da:6f:00:d6:08:90:a1:f3:d1:8c:63:a8:a4:35:f2:
         16:dd:48:e5:d4:9c:94:53:e4:3c:9d:a7:02:7a:46:be:f4:53:
         82:e2:bf:2c:03:3b:d1:58:d1:41:39:eb:68:da:64:27:4a:e6:
         4d:8a:43:6b:ca:f9:b7:62:7e:5f:20:1c:0b:89:ff:c7:77:98:
         db:d1:f8:6b:38:d2:21:78:5d:fe:1a:cf:02:0a:87:42:23:79:
         7c:ff:c8:f8:8e:d1:20:8d:e1:f0:77:bc:49:16:7e:a0:91:14:
         93:ac:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org