Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e20323635363532.roa
File:                     323830313a31653a643030303a3a2f34382d3438203d3e20323635363532.roa (raw, json)
Hash identifier:          ci27tO0Fa5nC3/T43Wo7cxljiXNFNOV0waEKyDOjW1c=
Subject key identifier:   43:63:21:3E:3E:9E:1D:66:C2:3C:BB:8D:C0:E5:90:75:2A:01:EA:32
Certificate issuer:       /CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
Certificate serial:       7AF275E47CC713035B92A3719BDEDA7DFCCEEF33
Authority key identifier: 06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e20323635363532.roa
Signing time:             Tue 05 Mar 2024 18:08:55 +0000
ROA not before:           Tue 05 Mar 2024 18:03:55 +0000
ROA not after:            Tue 04 Mar 2025 18:08:55 +0000
asID:                     265652
IP address blocks:        2801:1e:d000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f2:75:e4:7c:c7:13:03:5b:92:a3:71:9b:de:da:7d:fc:ce:ef:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06E7AEAB75C750D456353CA4D386007DCD9FE288
        Validity
            Not Before: Mar  5 18:03:55 2024 GMT
            Not After : Mar  4 18:08:55 2025 GMT
        Subject: CN=4363213E3E9E1D66C23CBB8DC0E590752A01EA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:a5:d1:d1:ec:ff:58:99:0a:20:25:03:0e:
                    85:f1:7d:cd:f1:34:b5:29:2f:01:dc:8d:ae:4e:41:
                    91:24:5b:1e:b5:f3:be:ea:ee:14:fa:e6:16:85:fd:
                    c6:51:92:09:50:9d:8c:87:06:eb:ad:15:34:d9:38:
                    ef:46:41:cd:90:fe:50:16:58:85:3d:a0:de:69:74:
                    5d:f9:cb:2b:4a:c9:c2:25:2e:cf:f9:0d:d1:c6:8b:
                    ec:c9:34:87:80:8e:2a:ea:17:2f:e1:1d:1f:0e:db:
                    5f:85:b9:0c:e7:c7:a0:70:1a:c0:94:b7:c9:84:78:
                    e9:43:04:bc:ad:ca:c1:be:4f:59:4e:c7:1f:2b:9d:
                    a7:0d:0a:a0:87:90:a6:f3:f1:8b:15:f0:15:65:f7:
                    56:83:51:4e:18:d0:fe:80:6f:81:a1:ff:32:71:bc:
                    ab:86:1b:8d:6d:45:f7:cd:ff:12:4c:7b:e3:11:9b:
                    32:55:5c:3c:51:3e:ca:bb:4f:aa:83:99:d4:3e:c4:
                    6e:bf:fc:7f:25:ec:e4:af:37:10:ed:de:58:92:dc:
                    68:5d:0c:db:85:00:a4:a5:03:09:61:f9:b1:ba:34:
                    ca:cb:cc:b0:e1:df:54:b7:72:b1:58:d6:cd:17:d5:
                    07:da:8b:a1:7a:7b:b8:35:6e:c5:e3:90:a7:a2:09:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:63:21:3E:3E:9E:1D:66:C2:3C:BB:8D:C0:E5:90:75:2A:01:EA:32
            X509v3 Authority Key Identifier:
                keyid:06:E7:AE:AB:75:C7:50:D4:56:35:3C:A4:D3:86:00:7D:CD:9F:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06E7AEAB75C750D456353CA4D386007DCD9FE288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C9E69C2F71CF2E784674F609D4256C84D460FC8E57A791D309F9030ECD8762/0/323830313a31653a643030303a3a2f34382d3438203d3e20323635363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:04:06:45:37:cc:c3:23:3c:e1:d9:7c:15:e2:30:b4:76:78:
         c0:83:52:d8:1b:3c:2f:9c:be:84:a9:70:b2:c8:c9:fb:da:e1:
         7a:89:a2:af:c4:ce:1b:54:21:2a:d7:df:be:12:4c:6c:a8:cc:
         4a:3a:15:7a:af:9c:89:0b:36:85:c8:25:90:9e:a3:97:57:30:
         e9:24:8d:03:a1:a3:54:76:f0:ab:f8:6a:9e:3f:aa:f8:01:e8:
         ca:82:bb:bd:e0:95:cd:c5:66:99:1f:63:92:c7:90:aa:dd:75:
         35:54:4b:07:20:ca:ef:6d:7a:eb:5f:45:18:0a:e0:ea:f4:38:
         bc:b1:6d:43:b4:e7:16:c5:64:17:02:f7:ef:80:01:7f:4b:16:
         b7:a0:ee:ab:b0:59:fc:c8:1c:13:fd:16:9c:69:b5:9d:22:ab:
         77:11:c5:4e:42:ac:49:58:11:65:cd:00:c0:4d:5a:91:17:4a:
         60:08:74:74:84:96:25:b5:e8:41:fc:96:dc:37:e3:96:c6:d1:
         7b:7c:94:01:4b:43:b7:da:77:90:38:90:1e:12:cf:42:89:bf:
         a0:34:ec:3f:1a:c6:21:4a:34:81:85:b0:d9:df:4b:e7:0a:11:
         29:11:bc:bf:ae:85:a3:d8:44:3e:b4:03:99:22:08:58:c2:bf:
         60:02:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org