Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          Mw4eAmT3KFcCZU7Vy7AUAisNqPP4r/PxdNng2MWqawQ=
Subject key identifier:   A6:67:3A:29:61:20:3C:56:AF:EC:AE:6F:2D:2A:B1:2C:F4:06:CE:8B
Certificate issuer:       /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial:       727DDBBC867606F4E0C7277ECD4F50EC259EB814
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 17:44:22 +0000
ROA not before:           Tue 05 Mar 2024 17:39:22 +0000
ROA not after:            Tue 04 Mar 2025 17:44:22 +0000
asID:                     27951
IP address blocks:        2801:1a9:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7d:db:bc:86:76:06:f4:e0:c7:27:7e:cd:4f:50:ec:25:9e:b8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
        Validity
            Not Before: Mar  5 17:39:22 2024 GMT
            Not After : Mar  4 17:44:22 2025 GMT
        Subject: CN=A6673A2961203C56AFECAE6F2D2AB12CF406CE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:df:58:6a:e5:9f:f5:2c:9c:a2:c3:8e:89:
                    44:ab:6d:f4:c1:27:6c:01:c3:7b:ea:3f:a4:bb:a9:
                    1f:ad:fb:b0:b1:98:05:0d:70:9b:e1:61:1c:92:20:
                    58:95:50:1d:14:a6:2e:26:6a:63:bf:bd:99:63:0a:
                    ad:da:52:94:52:29:c9:18:ce:bc:82:d6:cc:ef:06:
                    35:4a:e9:4e:af:4f:1c:80:b3:9c:b5:68:04:3f:2c:
                    b6:ac:72:04:28:63:b2:70:f9:d2:1f:a0:97:57:fb:
                    65:ee:b9:08:75:74:8b:af:cd:94:e3:7a:55:42:af:
                    3b:a1:8c:e2:10:18:fa:5d:3e:4c:45:51:ac:a6:58:
                    62:04:02:de:90:93:72:3d:d0:29:56:40:18:dd:12:
                    cd:06:93:b6:75:e9:92:92:13:90:16:31:a0:7a:e0:
                    68:c0:70:fb:2b:31:92:d2:90:df:00:2d:56:92:95:
                    8e:53:9e:0e:f5:4e:f7:cd:0d:8a:26:d4:d2:63:79:
                    e9:0c:0c:af:51:96:fb:0f:38:05:7e:51:39:24:33:
                    fc:28:f3:8d:d7:d3:46:34:1f:5a:f2:9b:6e:de:23:
                    26:25:cf:02:71:df:6f:94:12:4a:2b:a5:fc:31:53:
                    e6:36:91:24:35:9b:67:27:bc:bb:a6:1d:24:7b:75:
                    de:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:67:3A:29:61:20:3C:56:AF:EC:AE:6F:2D:2A:B1:2C:F4:06:CE:8B
            X509v3 Authority Key Identifier:
                keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:16:43:33:92:77:67:9a:ab:fa:91:7a:d8:9d:71:11:ec:34:
         7e:7d:1d:70:00:09:aa:4e:7f:15:9b:f6:e6:2d:87:83:4c:84:
         ea:44:7f:55:88:23:bb:9f:24:78:06:38:14:09:19:b7:0c:f5:
         65:be:31:d6:e7:bc:35:e3:0f:3d:68:74:2c:98:a6:61:4a:a1:
         c5:b8:cb:90:5e:1e:56:ba:16:15:c2:49:44:4e:b9:4a:93:ee:
         6c:7e:2d:c6:b8:55:23:e7:0d:64:f3:72:74:e9:95:c1:f5:d7:
         26:c2:69:ec:a8:f4:02:57:21:aa:81:a9:43:4c:df:43:b9:2b:
         75:06:34:98:0b:51:5f:fe:77:0e:e0:e6:89:e3:01:f4:6f:04:
         78:0d:eb:41:16:0d:06:b2:c6:be:2a:0b:ee:e7:6d:83:36:13:
         29:e7:76:95:53:ec:20:b5:50:8e:02:0d:8b:0f:cb:f5:49:6f:
         b3:9b:c8:6a:9f:b9:99:7d:62:55:c1:a2:f6:11:86:f1:26:bb:
         af:c2:13:67:44:80:f8:26:7d:e2:54:46:97:5c:ac:27:a3:45:
         71:95:da:4d:13:99:fe:e4:e2:dd:2d:72:d1:3d:38:90:95:f3:
         79:19:20:52:5f:44:8d:4a:e3:b9:a0:b2:7d:69:36:74:af:ac:
         57:05:66:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org