Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e2033353439.roa
File:                     323830313a3138393a3a2f34342d3434203d3e2033353439.roa (raw, json)
Hash identifier:          G0fttEnH1lhPhypzuWZHZHAeMVppRBUmYLulaWqmoFQ=
Subject key identifier:   AE:78:46:48:B8:9B:C9:19:3E:48:C2:91:2A:A2:5F:5F:6D:F3:BD:A7
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       11316258ABC7398D8004F836C923C1D0F17F68F8
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e2033353439.roa
Signing time:             Tue 05 Mar 2024 17:44:13 +0000
ROA not before:           Tue 05 Mar 2024 17:39:13 +0000
ROA not after:            Tue 04 Mar 2025 17:44:13 +0000
asID:                     3549
IP address blocks:        2801:189::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl
                          rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 22:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:31:62:58:ab:c7:39:8d:80:04:f8:36:c9:23:c1:d0:f1:7f:68:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Mar  5 17:39:13 2024 GMT
            Not After : Mar  4 17:44:13 2025 GMT
        Subject: CN=AE784648B89BC9193E48C2912AA25F5F6DF3BDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:46:a3:f5:39:82:17:8c:6f:fa:53:b2:78:
                    28:0c:63:94:22:89:d5:5d:52:a8:f1:a3:66:2e:5c:
                    be:01:8c:c2:02:b7:1a:45:d1:bb:d8:90:fc:5a:ee:
                    a6:90:b9:ec:19:0b:70:3b:18:49:40:4a:5a:c2:f8:
                    51:08:05:17:d1:b4:c9:48:2e:47:44:fa:4c:fb:7e:
                    cd:f4:a6:61:c7:25:e2:37:b0:bb:5b:6f:54:87:3a:
                    b9:3b:a5:ec:39:b8:bd:4c:ea:4c:30:3a:6e:75:d4:
                    7c:6b:bb:77:42:46:8d:cd:2a:1e:fc:a2:9e:b4:f3:
                    02:8b:d8:a4:0a:93:dc:52:ce:47:66:38:b2:c3:3c:
                    76:a9:79:b5:a3:4d:3d:21:39:e6:89:d4:c9:cb:c9:
                    95:78:5f:81:a0:60:1c:5f:34:5d:b4:a2:a9:1a:52:
                    43:8f:ab:38:da:03:96:d1:cb:dd:70:f1:c5:71:05:
                    47:ed:bd:16:fc:29:88:10:12:73:dd:11:93:e3:69:
                    ca:26:63:b0:6e:e5:11:75:6d:92:62:fd:e2:eb:67:
                    2d:b7:ab:2a:c0:de:5f:fa:13:b4:a4:3d:63:5e:67:
                    1d:0f:45:1a:d1:6c:e8:0a:c0:9c:8d:4a:73:8a:95:
                    6b:f8:e8:96:78:f8:4c:98:f2:37:bf:32:1f:4e:46:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:78:46:48:B8:9B:C9:19:3E:48:C2:91:2A:A2:5F:5F:6D:F3:BD:A7
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:b7:6c:97:05:26:98:14:09:da:b4:f5:92:df:9c:12:8c:f7:
         cb:f8:2c:73:86:d6:cc:91:c1:87:70:f0:68:df:10:fa:b1:33:
         d0:d0:4a:d6:c4:19:18:11:bf:d1:43:2e:c1:36:3c:71:34:79:
         ea:44:47:9c:c8:29:6d:d1:f7:36:a7:e6:2e:d6:e7:15:45:c0:
         6c:ed:05:2a:b2:f2:0c:d8:8b:10:2f:6a:be:81:63:2b:52:1a:
         82:38:c0:22:7b:3b:30:35:04:8a:a9:d6:f3:d1:58:6a:c6:5c:
         3b:04:0c:41:11:68:04:b9:9a:af:05:08:99:65:a5:ed:4d:f7:
         39:14:08:31:cb:5b:80:a6:d0:1f:d3:a1:5c:f6:73:af:46:33:
         00:08:f1:e7:70:26:f8:1a:19:3c:c1:58:a9:66:3b:25:eb:88:
         f4:18:2a:47:7a:05:80:59:f9:e3:08:e3:39:83:b1:53:a8:ed:
         e4:88:ce:81:69:29:94:e2:53:59:b7:49:ae:a7:c5:04:d9:b3:
         2c:a0:8d:b4:67:dc:ca:cd:7e:52:6b:66:af:cc:b5:d7:65:b9:
         0f:18:f6:49:1b:55:d4:d1:bf:5b:fb:f3:6b:ee:17:bf:d3:64:
         bd:1e:f7:b0:65:a9:12:9d:04:ab:12:c9:79:7e:9b:6e:9b:0b:
         95:62:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:32:20 2024 by rpki-client on console-fra.rpki-client.org