Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34342d3434203d3e20323732393532.roa
File:                     323830313a3162393a3a2f34342d3434203d3e20323732393532.roa (raw, json)
Hash identifier:          W7E0LEGD0fBr2Qs3qq2eGfocBdToGZYmI60XZZpnI7k=
Subject key identifier:   21:FD:8F:09:16:68:A0:4D:7E:CF:2D:AA:22:62:66:0C:7B:9B:52:9E
Certificate issuer:       /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial:       10086E1E39DAB9810B503B9F470F8BAE51CCAA73
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34342d3434203d3e20323732393532.roa
Signing time:             Tue 05 Mar 2024 18:10:14 +0000
ROA not before:           Tue 05 Mar 2024 18:05:14 +0000
ROA not after:            Tue 04 Mar 2025 18:10:14 +0000
asID:                     272952
IP address blocks:        2801:1b9::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:08:6e:1e:39:da:b9:81:0b:50:3b:9f:47:0f:8b:ae:51:cc:aa:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
        Validity
            Not Before: Mar  5 18:05:14 2024 GMT
            Not After : Mar  4 18:10:14 2025 GMT
        Subject: CN=21FD8F091668A04D7ECF2DAA2262660C7B9B529E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:f7:eb:54:57:07:95:4e:a6:52:74:4e:74:
                    43:30:6a:34:73:26:57:13:3e:b3:34:8c:13:30:43:
                    bb:79:20:d0:db:50:0b:47:3f:00:51:7e:05:bf:cd:
                    01:40:d6:45:d4:3b:70:01:b4:43:39:17:0b:75:bb:
                    dd:8f:42:32:14:5c:ae:7d:88:7c:e4:b6:9a:a7:8a:
                    69:15:05:c1:37:77:e4:cc:65:06:f9:6d:db:be:09:
                    fa:3a:73:8f:6b:cf:60:81:5e:19:8d:96:28:3a:12:
                    55:57:d3:68:53:b5:38:c6:6c:4f:2e:25:22:f0:51:
                    33:97:f9:8d:13:84:52:aa:d2:e5:99:0c:5d:74:5d:
                    7c:f3:e2:a9:04:50:e2:68:aa:f2:85:a8:66:16:0f:
                    69:3b:bf:fa:d4:23:6f:0c:b4:cd:28:75:d3:2b:e3:
                    b2:c4:f7:96:cb:8a:f0:d6:0a:40:07:ef:e5:10:d1:
                    9b:bb:ba:6e:96:ce:22:41:51:5f:4b:c7:41:5a:5c:
                    c2:ed:b4:22:f0:e6:b5:dc:7f:78:cf:c2:ec:71:c7:
                    d7:8e:88:ef:56:2a:3b:c7:f2:bd:ca:a3:41:8a:8b:
                    d2:2e:9f:b0:a1:24:9a:94:82:0b:31:e8:53:9a:7c:
                    10:8e:e9:09:5e:ef:6f:dc:53:ef:69:07:84:0b:3b:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FD:8F:09:16:68:A0:4D:7E:CF:2D:AA:22:62:66:0C:7B:9B:52:9E
            X509v3 Authority Key Identifier:
                keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34342d3434203d3e20323732393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:f9:ef:a3:c1:5e:c6:85:05:c2:21:3c:de:80:b2:58:3e:
         f4:af:81:53:6f:a9:56:ae:a8:7b:c8:37:4f:84:20:78:5c:7f:
         b2:06:a3:6d:a5:f5:66:8a:55:81:1a:5d:77:fd:b0:61:5c:24:
         db:20:1c:e7:4e:72:f7:ad:b5:97:c3:98:54:b4:f0:33:c4:66:
         62:2c:d3:18:a0:80:a9:b8:62:2f:e9:e0:7c:4b:86:da:1e:31:
         f7:60:f6:d9:d3:02:54:18:5d:1c:f2:f1:3c:8e:55:a9:eb:75:
         d5:e5:35:fa:b7:93:cb:47:8c:04:6b:da:18:55:23:07:eb:7e:
         27:a8:64:48:33:8f:9f:ed:2a:b6:2f:24:e3:02:69:6e:6d:a5:
         ef:54:f8:b6:ca:3b:f0:4d:f5:62:81:5c:4c:c1:81:b2:6e:d3:
         80:3f:c7:19:c8:cc:68:85:05:a5:63:d4:d3:09:c6:bf:7d:a2:
         af:01:04:39:8a:2b:cb:ce:e6:31:f0:45:a5:a3:50:01:39:7a:
         1e:f1:f2:09:26:8c:0c:ba:c1:85:6d:f3:fa:73:04:59:a3:7d:
         38:f5:4b:b4:1d:e8:d3:5b:23:17:ae:37:0f:67:c9:e3:af:14:
         dd:88:3b:d4:d4:d2:70:01:84:c6:7c:64:f6:56:74:1b:1b:3f:
         b6:29:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org