Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a3a2f34342d3434203d3e203237383137.roa
File:                     323830313a3135393a3a2f34342d3434203d3e203237383137.roa (raw, json)
Hash identifier:          QN0LAqpzhPxowO07TLjtGQ3+umdSfUw7BFyFyweM3yk=
Subject key identifier:   8B:DC:09:64:70:B0:8E:B2:FA:43:E4:AB:CD:66:BE:03:E3:DF:28:50
Certificate issuer:       /CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
Certificate serial:       36A4B230B6A54B89A89AE9D6D11F924A8AB5854E
Authority key identifier: BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a3a2f34342d3434203d3e203237383137.roa
Signing time:             Tue 05 Mar 2024 17:47:08 +0000
ROA not before:           Tue 05 Mar 2024 17:42:08 +0000
ROA not after:            Tue 04 Mar 2025 17:47:08 +0000
asID:                     27817
IP address blocks:        2801:159::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a4:b2:30:b6:a5:4b:89:a8:9a:e9:d6:d1:1f:92:4a:8a:b5:85:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2E52DA2A365D5C3062E5F29659D4C1A371FF33
        Validity
            Not Before: Mar  5 17:42:08 2024 GMT
            Not After : Mar  4 17:47:08 2025 GMT
        Subject: CN=8BDC096470B08EB2FA43E4ABCD66BE03E3DF2850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:f6:3c:02:46:88:c2:79:af:43:12:9f:4a:
                    01:48:fd:5c:7f:9f:37:b3:2a:0a:7b:bf:75:bf:31:
                    30:e2:5b:d2:c2:56:c9:88:f3:0d:48:5f:4c:6d:af:
                    c2:a6:6b:2c:77:0f:a1:a2:7b:2d:81:b9:56:60:14:
                    6a:1a:d6:4d:c5:1c:e7:c3:4b:b2:1c:20:4a:4e:b2:
                    84:3e:8f:e5:18:37:5e:84:0d:ab:b7:e2:46:93:ce:
                    9a:61:28:ef:ad:28:de:eb:14:8c:9f:d0:ed:d5:e2:
                    14:fe:fb:b0:2b:0a:b4:42:1e:b7:38:a2:8b:dd:99:
                    f6:0f:06:05:da:ab:29:60:f6:85:24:e0:d6:58:30:
                    1f:b5:5b:e4:2e:9d:1f:dd:46:b0:a2:47:d2:89:ac:
                    67:1c:dc:7d:ad:b7:cd:5b:ef:eb:cb:45:70:56:bb:
                    8a:7b:49:0f:4a:12:f1:bb:f8:d2:24:91:9a:c3:cb:
                    b0:9c:5b:18:b6:f4:85:90:81:51:3d:65:6c:1c:f2:
                    31:3f:47:0a:d8:e9:9a:5d:ba:4d:97:8a:0c:e5:aa:
                    b6:85:83:9d:31:30:5d:b7:76:40:14:44:9d:d7:d1:
                    2e:38:04:40:9d:44:8f:96:bc:89:91:78:4f:a4:a2:
                    98:32:f8:b4:db:92:07:04:33:3b:5a:c7:36:05:01:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DC:09:64:70:B0:8E:B2:FA:43:E4:AB:CD:66:BE:03:E3:DF:28:50
            X509v3 Authority Key Identifier:
                keyid:BF:2E:52:DA:2A:36:5D:5C:30:62:E5:F2:96:59:D4:C1:A3:71:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF2E52DA2A365D5C3062E5F29659D4C1A371FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ADEE08296789FDD702B9B1330C19A7B629E0C93FCCFFD2791B9703F17DE75B2/0/323830313a3135393a3a2f34342d3434203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159::/44

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:86:6e:b1:c4:9c:03:78:f2:81:d7:f9:32:5a:14:be:4e:
         01:fa:69:58:aa:60:63:f9:4d:d4:53:a2:2a:ec:b6:e6:f3:46:
         e9:7b:63:1b:4d:89:0c:98:ac:ef:57:39:a1:a2:33:1f:0f:ed:
         68:73:2b:63:5c:a3:fb:6a:d3:48:b2:3a:97:54:13:c1:5e:03:
         75:a2:5a:2c:11:d7:d2:c1:91:9a:e2:8e:be:57:eb:dc:f1:34:
         1a:0f:72:6a:03:74:32:e2:99:33:aa:10:67:40:5f:b0:c3:51:
         e9:f1:fb:17:c2:40:cd:64:11:30:2a:87:ef:77:db:ec:2a:3e:
         2a:11:9e:f5:ad:2e:3f:89:27:a6:cc:a5:bf:bc:6a:25:27:f9:
         48:07:43:69:15:e7:c6:33:e1:e6:55:56:6f:b1:35:21:d2:08:
         fa:84:f8:61:66:e5:28:6c:bc:60:ae:28:59:b4:62:a3:49:7d:
         cb:56:d3:5f:cf:af:c2:4c:68:52:1b:cf:9d:41:65:7d:02:ca:
         a0:83:28:38:96:cd:bf:7b:37:ce:40:c9:8d:8a:71:d8:14:50:
         a1:75:b0:96:00:3e:bd:78:6f:a0:02:75:38:8b:8d:ad:3a:df:
         e0:47:a6:4d:8d:8d:08:09:f6:d6:51:82:51:3e:64:d0:82:49:
         36:6f:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:01:25 2024 by rpki-client on console-fra.rpki-client.org