Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323732313533.roa
File:                     323830313a3138393a3a2f34342d3434203d3e20323732313533.roa (raw, json)
Hash identifier:          l4ylfaVGB0zAxqFWzfhj4fojF2bvMO3SD3eGnCcChgU=
Subject key identifier:   A2:04:FB:18:32:0D:4F:1D:FC:B1:8B:38:42:B5:03:FD:B2:AF:F2:1D
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       0A876C1B49218BAB3AFAB41B6A54ADC63841B51A
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323732313533.roa
Signing time:             Tue 05 Mar 2024 17:44:12 +0000
ROA not before:           Tue 05 Mar 2024 17:39:12 +0000
ROA not after:            Tue 04 Mar 2025 17:44:12 +0000
asID:                     272153
IP address blocks:        2801:189::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl
                          rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:87:6c:1b:49:21:8b:ab:3a:fa:b4:1b:6a:54:ad:c6:38:41:b5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Mar  5 17:39:12 2024 GMT
            Not After : Mar  4 17:44:12 2025 GMT
        Subject: CN=A204FB18320D4F1DFCB18B3842B503FDB2AFF21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:5f:88:55:27:fd:bc:51:3a:0e:97:2e:e2:
                    71:ea:92:a6:e5:70:34:28:0b:d6:2a:72:6b:93:d5:
                    57:70:2d:63:4f:c5:24:f6:9b:b8:44:16:cc:53:9e:
                    fb:3e:16:7d:aa:a2:17:13:cd:21:0e:b6:27:be:9d:
                    f9:44:d8:24:f8:2e:b4:87:c2:5f:04:87:56:fa:0a:
                    be:e9:9d:2c:a5:e4:6b:69:d0:9d:51:fa:6d:82:c9:
                    83:59:b0:8f:f2:e6:13:68:36:3f:19:d1:69:97:d7:
                    83:2a:59:e2:06:0c:f1:0e:c7:d4:e7:35:c4:4f:ce:
                    25:ea:f1:e7:84:8b:ee:51:a9:7e:d7:17:5a:f2:06:
                    58:7e:31:24:c5:c9:d5:b1:dd:eb:5e:70:e5:0f:61:
                    14:aa:71:1c:85:7d:73:5c:30:a3:db:2c:ff:c6:45:
                    47:3e:37:79:b4:68:5e:3b:15:84:64:39:95:07:5c:
                    6e:2d:d5:00:cc:48:76:35:f8:af:53:40:a5:22:d5:
                    11:16:f1:e5:0e:78:9b:16:ed:a8:08:72:fe:33:d4:
                    5b:14:04:27:64:d8:fd:d9:c0:db:03:d1:a4:bc:7f:
                    2a:2e:c1:76:97:2f:7b:ca:5f:fa:87:cc:74:a0:ca:
                    43:0d:a4:83:e9:87:b5:c2:7a:4d:65:8d:3a:f5:f5:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:FB:18:32:0D:4F:1D:FC:B1:8B:38:42:B5:03:FD:B2:AF:F2:1D
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323732313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:3d:61:bd:53:f5:c2:e1:20:5b:d1:9e:d6:00:c6:a1:0a:
         ad:b5:99:14:2e:4a:60:a5:57:09:84:58:9b:5e:cf:a2:a1:e9:
         b0:8a:59:0b:12:ea:13:c1:50:c4:5e:97:1e:96:9b:5d:fb:60:
         4d:7e:05:20:32:46:ad:4d:a0:b8:01:95:1e:5f:0d:d4:b4:07:
         a3:8c:ad:b4:69:75:3b:30:b9:32:4d:aa:79:7a:7b:68:50:98:
         d1:f3:81:e8:f8:cd:0b:31:7c:9f:86:1c:a0:ce:bd:95:61:19:
         6e:6e:58:c3:1c:bb:13:d4:02:3e:2b:4d:97:06:ec:9c:b5:12:
         19:4a:09:76:88:be:1f:91:d2:11:a8:ab:07:60:88:03:b3:74:
         bc:9f:0f:ed:06:4a:cb:dd:d4:b5:5f:da:1c:95:b5:7c:75:de:
         0d:70:55:5b:6f:1f:5f:95:a2:32:8f:c8:2d:29:c6:3f:bf:9d:
         a3:71:c6:ac:7c:46:fa:47:83:b9:43:75:16:eb:fb:c2:aa:e3:
         7c:cd:89:06:a9:f2:3a:7a:f5:67:52:9d:0b:15:8a:1e:ff:c1:
         36:2c:5b:4d:6a:e7:e1:54:b8:eb:79:44:40:cd:46:e9:3d:cd:
         02:22:64:fb:a9:72:d6:69:a6:32:9c:a4:be:f7:9f:53:1a:48:
         a6:0f:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org