Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa
File:                     323830313a3162393a3a2f34382d3438203d3e20323732393532.roa (raw, json)
Hash identifier:          BM9FzNHxupWcfDpQ+AQLOvXv82yZzOp7iY9C5L50Igg=
Subject key identifier:   E4:76:99:36:98:DB:C6:CE:50:40:4D:BB:0B:16:78:30:47:E3:F5:DD
Certificate issuer:       /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial:       6ACCF8256A2103A291B201A490839C4C5E38C140
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa
Signing time:             Tue 05 Mar 2024 18:10:15 +0000
ROA not before:           Tue 05 Mar 2024 18:05:15 +0000
ROA not after:            Tue 04 Mar 2025 18:10:15 +0000
asID:                     272952
IP address blocks:        2801:1b9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cc:f8:25:6a:21:03:a2:91:b2:01:a4:90:83:9c:4c:5e:38:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
        Validity
            Not Before: Mar  5 18:05:15 2024 GMT
            Not After : Mar  4 18:10:15 2025 GMT
        Subject: CN=E476993698DBC6CE50404DBB0B16783047E3F5DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:54:c0:02:e5:98:55:b0:6c:c4:57:88:57:
                    89:4f:7a:74:4b:fe:ae:d7:df:fb:51:78:35:69:29:
                    46:09:bb:4a:c1:95:57:28:2d:29:90:b1:e7:ad:8d:
                    b4:a5:2d:46:76:02:96:74:29:14:5d:6c:ac:33:b4:
                    f8:32:76:c2:7a:a0:7f:2d:30:78:77:2e:ec:99:f4:
                    f7:9d:38:c3:31:ef:bc:5a:ca:e7:80:28:61:58:71:
                    28:f2:ca:49:3b:32:fa:50:69:c9:72:3d:2c:f1:16:
                    e8:ae:15:12:c3:e1:5f:04:f3:be:76:61:f0:3d:51:
                    30:88:27:c2:26:2e:42:ec:f4:b9:c6:db:81:97:56:
                    03:79:38:ae:75:aa:8d:44:a4:32:db:5e:78:b1:15:
                    30:10:c6:e6:79:5f:04:4d:ae:0b:ee:35:96:37:aa:
                    d9:46:d2:ad:d8:0a:13:30:f8:65:37:63:01:f6:23:
                    71:82:b6:dd:eb:c1:9c:25:41:cd:c2:0c:b0:cc:53:
                    31:fc:e9:21:1f:22:3c:b0:b0:15:a1:43:00:c7:96:
                    5d:9d:aa:d5:c6:6d:c9:5a:33:d7:24:71:4d:7e:f7:
                    b1:9e:82:c5:ff:4e:6b:12:23:74:a2:1e:a9:24:25:
                    35:17:93:66:3e:fd:37:6f:19:6a:93:ca:ee:e4:d7:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:76:99:36:98:DB:C6:CE:50:40:4D:BB:0B:16:78:30:47:E3:F5:DD
            X509v3 Authority Key Identifier:
                keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a3a2f34382d3438203d3e20323732393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:eb:34:2d:5d:5b:6d:5d:51:7b:cc:28:4f:d6:7e:d9:9c:
         03:4f:e6:12:c7:05:04:f9:1c:dd:27:04:1c:06:8f:c2:19:b2:
         a5:d3:b8:38:f2:9c:be:58:73:ba:e2:00:29:86:4d:2d:b6:4d:
         e2:bc:eb:30:f2:1f:09:fb:8c:08:a1:99:94:08:e2:8d:9c:bb:
         c7:52:f9:6e:af:81:f4:fb:d4:0c:16:0c:2a:6b:9c:79:bf:55:
         1d:bc:82:09:cc:73:51:c0:17:3e:5a:dd:10:67:79:6a:9b:12:
         3d:10:8f:bc:e6:ac:0a:9d:71:73:5c:a1:0f:09:b9:2e:cf:0f:
         4e:81:4c:50:4f:81:a5:33:77:e7:ba:51:19:f3:c0:7c:e0:39:
         79:85:82:89:54:74:11:aa:97:1b:c1:1b:83:07:7c:e8:bc:a9:
         96:f2:e0:8d:9a:03:b8:72:62:29:88:aa:d7:26:88:48:a6:e4:
         4b:fc:b1:b0:03:21:37:92:02:c1:27:0e:93:0e:08:26:cf:dd:
         eb:07:e0:fd:49:97:c5:90:ca:15:a2:af:a9:33:5f:11:82:6c:
         73:52:5e:79:7e:13:e6:e4:1a:2f:ad:04:ed:38:d6:0f:2b:b6:
         f2:a6:a3:46:7a:b6:a1:8a:e9:12:47:a9:24:bd:59:c6:84:d5:
         bf:e6:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 14:08:40 2024 by rpki-client on console-ams.rpki-client.org