Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E18689808CEFE789B4A4D47182A368A2FB310D1880970E3AD61D8E6D5B64CED/0/323830313a31393a653830303a3a2f34382d3438203d3e20323731393035.roa
File:                     323830313a31393a653830303a3a2f34382d3438203d3e20323731393035.roa (raw, json)
Hash identifier:          BIFbpAceWlwjABSoiqd3NxipfS4FaWZz34z6pCMzOfM=
Subject key identifier:   72:2A:30:51:CD:2B:3A:5B:DD:D8:08:98:BC:F0:4F:9D:0B:99:02:55
Certificate issuer:       /CN=96F24928E082E33F21A83C7DC7AD2A49B5817469
Certificate serial:       64167924AE4D747B5B0080BEA4B24DA6370069EF
Authority key identifier: 96:F2:49:28:E0:82:E3:3F:21:A8:3C:7D:C7:AD:2A:49:B5:81:74:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F24928E082E33F21A83C7DC7AD2A49B5817469.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E18689808CEFE789B4A4D47182A368A2FB310D1880970E3AD61D8E6D5B64CED/0/323830313a31393a653830303a3a2f34382d3438203d3e20323731393035.roa
Signing time:             Tue 05 Mar 2024 18:20:50 +0000
ROA not before:           Tue 05 Mar 2024 18:15:50 +0000
ROA not after:            Tue 04 Mar 2025 18:20:50 +0000
asID:                     271905
IP address blocks:        2801:19:e800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E18689808CEFE789B4A4D47182A368A2FB310D1880970E3AD61D8E6D5B64CED/0/96F24928E082E33F21A83C7DC7AD2A49B5817469.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E18689808CEFE789B4A4D47182A368A2FB310D1880970E3AD61D8E6D5B64CED/0/96F24928E082E33F21A83C7DC7AD2A49B5817469.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F24928E082E33F21A83C7DC7AD2A49B5817469.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:16:79:24:ae:4d:74:7b:5b:00:80:be:a4:b2:4d:a6:37:00:69:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F24928E082E33F21A83C7DC7AD2A49B5817469
        Validity
            Not Before: Mar  5 18:15:50 2024 GMT
            Not After : Mar  4 18:20:50 2025 GMT
        Subject: CN=722A3051CD2B3A5BDDD80898BCF04F9D0B990255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:98:ba:2d:17:e7:02:f9:47:d1:1d:1d:b2:
                    19:a6:0d:4c:b1:4e:3a:2a:cd:5a:69:68:1d:22:55:
                    63:06:8f:b1:dc:ff:07:aa:64:1a:de:e9:5b:48:eb:
                    ff:58:58:eb:9b:8e:4d:b3:b7:c9:9b:87:65:0e:f6:
                    d3:68:d7:3b:55:f9:ec:ab:55:9e:b3:97:24:ec:6d:
                    cb:e2:f7:05:1f:e2:2e:0a:89:ef:13:c4:96:0e:25:
                    c1:a4:cc:1e:ae:ee:40:34:c7:ca:1b:6b:7f:38:78:
                    c8:a1:25:bb:2f:e3:06:08:2a:92:f4:f9:a5:ee:9f:
                    02:fb:85:92:87:79:a4:21:c2:60:ac:82:7b:dc:c5:
                    10:7d:c6:63:72:77:6c:15:18:c8:cc:8d:18:62:26:
                    cc:6c:22:7f:9a:60:ef:c8:81:99:40:08:79:61:f6:
                    13:8a:3a:dc:54:8d:41:a9:95:5a:74:61:bc:70:a8:
                    61:55:2c:ec:e2:25:e1:bb:54:37:15:37:91:53:37:
                    42:93:a5:77:c4:b5:a3:ca:89:7e:87:ff:c5:2d:c6:
                    32:ba:99:66:1e:ac:e7:87:cf:6b:76:ff:85:e3:7e:
                    6b:ea:73:da:e8:1a:04:c2:4e:d8:f4:37:c6:53:d0:
                    61:2a:ee:1e:b2:5c:6c:2f:75:b2:74:02:33:ff:ec:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2A:30:51:CD:2B:3A:5B:DD:D8:08:98:BC:F0:4F:9D:0B:99:02:55
            X509v3 Authority Key Identifier:
                keyid:96:F2:49:28:E0:82:E3:3F:21:A8:3C:7D:C7:AD:2A:49:B5:81:74:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E18689808CEFE789B4A4D47182A368A2FB310D1880970E3AD61D8E6D5B64CED/0/96F24928E082E33F21A83C7DC7AD2A49B5817469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F24928E082E33F21A83C7DC7AD2A49B5817469.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E18689808CEFE789B4A4D47182A368A2FB310D1880970E3AD61D8E6D5B64CED/0/323830313a31393a653830303a3a2f34382d3438203d3e20323731393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:d5:51:a3:ce:3f:ff:05:c2:52:07:51:be:a0:23:c9:74:
         7f:ee:e5:44:16:56:bf:13:08:b5:03:c6:b8:35:c6:9d:9f:2c:
         57:98:24:a1:49:35:c3:32:9c:fe:4c:38:b2:4e:02:8b:f6:90:
         a8:d0:6b:32:85:77:9f:f7:d5:45:f0:eb:81:39:a6:c3:a3:74:
         7d:40:f9:ff:4f:54:78:8c:4a:2f:d1:17:1d:0d:96:1b:9b:3e:
         65:fd:91:23:93:d7:d1:a6:c0:bc:4d:07:41:c2:c3:82:2a:24:
         3b:27:75:a9:36:c8:32:44:a6:55:3f:6d:39:12:63:4e:ef:8a:
         1c:89:80:d5:bf:d6:66:85:93:b5:c3:10:7f:c4:06:c8:09:ab:
         9c:0d:c1:fb:9d:ad:d4:f2:42:04:b7:46:51:ed:4e:65:ba:c9:
         7f:3a:8c:c6:44:2e:c0:8b:31:4a:db:05:34:f0:39:97:cb:b8:
         57:62:ea:75:1b:85:45:5e:1c:d4:fb:cc:b0:39:f8:ec:04:6e:
         6f:1f:cf:bb:2c:98:22:b5:25:df:b6:ad:b3:2a:ab:12:86:b4:
         5a:a8:4f:fa:cb:68:db:a4:1f:ba:32:3e:50:5d:5f:54:b3:df:
         d4:10:67:b7:64:c9:20:75:d9:59:34:52:1b:16:f7:d8:ed:a1:
         6c:bd:a7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 16:03:30 2024 by rpki-client on console-ams.rpki-client.org