Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a34303a3a2f34382d3438203d3e20323636373230.roa
File:                     323830313a3164343a34303a3a2f34382d3438203d3e20323636373230.roa (raw, json)
Hash identifier:          SG55RfE/xvZHF0R/9r8YhZMtY2zF3dm3xEdkl6MrymI=
Subject key identifier:   F7:48:75:74:AF:7B:E8:9E:71:77:E8:6B:03:51:56:1C:F6:97:36:44
Certificate issuer:       /CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91
Certificate serial:       124CE2D078FD6B0A21D462AC53F9E95028985054
Authority key identifier: A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a34303a3a2f34382d3438203d3e20323636373230.roa
Signing time:             Tue 05 Mar 2024 18:17:15 +0000
ROA not before:           Tue 05 Mar 2024 18:12:15 +0000
ROA not after:            Tue 04 Mar 2025 18:17:15 +0000
asID:                     266720
IP address blocks:        2801:1d4:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4c:e2:d0:78:fd:6b:0a:21:d4:62:ac:53:f9:e9:50:28:98:50:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91
        Validity
            Not Before: Mar  5 18:12:15 2024 GMT
            Not After : Mar  4 18:17:15 2025 GMT
        Subject: CN=F7487574AF7BE89E7177E86B0351561CF6973644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:46:1f:48:9a:6e:ab:e1:f2:10:32:78:58:
                    9b:9b:5d:c3:9a:6f:0c:e9:8a:ed:3d:d0:cc:db:a4:
                    d0:6c:d0:cb:9a:c5:7d:38:b5:3c:47:8e:78:6e:23:
                    9d:05:2d:f4:63:52:f5:8c:2e:25:a8:a9:19:56:e2:
                    2d:09:1c:a6:13:bf:90:d5:a4:fd:d3:61:c8:6b:71:
                    5c:01:31:b6:eb:74:88:72:da:b4:6a:58:f6:a1:09:
                    48:6f:91:f2:85:11:fc:74:f3:ad:c1:b2:e4:bd:c9:
                    9a:d7:b4:6c:de:54:68:45:67:b1:08:c5:ad:3a:dd:
                    37:6b:49:14:27:74:f7:04:49:e7:f8:a3:8c:b1:2c:
                    ac:6e:3d:43:9b:c5:b6:7b:c1:ec:95:d4:05:ca:1d:
                    48:d4:34:b2:b5:b1:5e:38:a5:80:27:7e:79:b3:0f:
                    0c:dd:17:f0:de:1f:42:9d:73:8e:0b:04:e1:55:4a:
                    ad:e6:a8:57:37:42:4b:f2:b3:6b:eb:7e:ff:c8:52:
                    8a:cb:b2:3d:3f:a6:e6:81:4a:e5:78:d6:f0:b7:f2:
                    e7:62:6f:3f:10:8b:9a:4c:e2:c9:60:2c:13:74:ae:
                    98:9d:c1:86:6a:9a:53:6f:ec:10:31:9b:e4:40:42:
                    b0:89:6f:fc:82:88:f2:50:6b:2f:98:93:7e:54:fe:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:48:75:74:AF:7B:E8:9E:71:77:E8:6B:03:51:56:1C:F6:97:36:44
            X509v3 Authority Key Identifier:
                keyid:A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a34303a3a2f34382d3438203d3e20323636373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d4:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:7d:07:8a:50:60:a7:2e:23:c0:08:a4:91:48:d8:9b:e3:93:
         5b:0f:50:57:df:a1:89:6c:55:eb:56:cf:5c:17:2b:97:c0:64:
         47:ba:ff:8c:fe:29:6c:9e:02:21:c8:d0:7b:ec:34:52:61:3d:
         42:a3:c2:e2:a8:65:ab:02:5e:f5:0d:6e:07:7c:70:c0:80:ee:
         4a:1d:15:68:e3:f5:ff:f6:f0:eb:f4:b9:c7:87:82:ca:bc:a8:
         97:a6:f7:cc:7b:96:cf:07:3a:f1:02:cc:b7:71:d2:69:71:9e:
         a7:43:64:5d:3f:74:72:d0:e7:83:e4:bc:6e:6c:22:79:b4:cf:
         b9:89:81:e0:5e:9a:6f:18:9f:f2:a4:49:52:90:ea:ac:e7:54:
         cd:0a:5e:a7:e6:80:1e:dc:7d:ac:a6:90:8e:11:be:b4:87:ac:
         cc:2a:d5:ef:98:f9:71:2f:c9:30:cb:bd:86:cf:d8:4f:e7:14:
         42:25:78:3f:4f:af:3a:a5:3e:b9:a3:55:f4:56:35:20:bf:6e:
         70:bb:28:27:1d:c7:62:9a:05:f7:0d:d3:92:9d:db:39:91:34:
         98:e5:c2:4c:73:6b:cd:9f:c9:25:50:bc:e5:b2:5e:74:cc:36:
         78:96:bc:16:b4:11:8c:66:63:ad:de:ab:c3:ee:34:4f:56:44:
         3b:6f:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org