Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a393a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a3166393a393a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          ZwTbTKa5lYCTWajdZe9n1GNCjVXghnFMbLkK9lOENuw=
Subject key identifier:   31:BF:60:E3:8D:B1:46:D2:B5:BD:A1:8F:98:D5:68:35:13:41:45:1D
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       43F063E214992E9047AEF3E0EF40115D81F7EE6B
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a393a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:02:20 +0000
ROA not before:           Tue 05 Mar 2024 17:57:20 +0000
ROA not after:            Tue 04 Mar 2025 18:02:20 +0000
asID:                     14080
IP address blocks:        2801:1f9:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f0:63:e2:14:99:2e:90:47:ae:f3:e0:ef:40:11:5d:81:f7:ee:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Mar  5 17:57:20 2024 GMT
            Not After : Mar  4 18:02:20 2025 GMT
        Subject: CN=31BF60E38DB146D2B5BDA18F98D568351341451D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:2f:33:c4:8c:ef:07:bf:a5:95:fd:b6:cd:
                    63:87:37:3b:a2:8f:a3:99:80:3a:5f:2c:7d:f3:7d:
                    b2:36:d6:8c:d2:5e:1a:15:bd:d2:61:41:21:e9:0b:
                    e7:dc:ef:9e:1c:8a:40:e4:d1:c6:78:dc:17:7d:3b:
                    e2:00:58:8c:56:5e:5a:b5:cf:d0:5c:fb:91:d4:1b:
                    a4:0d:89:23:c5:a6:35:e0:e4:20:35:81:5f:a4:dd:
                    6b:28:5d:82:e0:80:22:5b:da:32:46:b0:da:65:fb:
                    e2:f0:f3:18:0d:a8:d1:52:ce:40:33:12:2d:a0:48:
                    05:a1:84:a8:4c:46:fa:67:27:ba:75:ae:3e:18:eb:
                    c1:ef:bb:0a:a9:8b:28:6e:ac:1b:9f:e5:d2:4e:28:
                    b5:31:f7:30:ae:56:b1:51:35:ef:7d:23:c5:7f:48:
                    22:5c:06:77:3b:55:af:94:13:13:0c:d3:69:4c:e9:
                    23:e5:37:01:8d:a8:53:91:10:b5:c1:1b:1f:3e:8b:
                    9a:4d:5c:d2:63:9a:13:68:70:06:ef:1a:26:2a:16:
                    44:32:aa:70:1e:ee:e3:6f:7a:7d:b3:ec:ef:20:40:
                    15:a1:90:16:b8:d0:09:7b:8f:a0:a8:2a:d4:00:be:
                    0b:72:b6:db:a4:80:11:2b:92:66:8f:4f:f8:f3:11:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BF:60:E3:8D:B1:46:D2:B5:BD:A1:8F:98:D5:68:35:13:41:45:1D
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a393a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:76:cb:f2:57:8b:06:96:01:3d:19:d7:93:74:e9:ef:09:
         63:db:05:9a:d9:7b:93:24:87:93:8b:16:de:4a:90:99:35:81:
         41:eb:35:fe:6c:b4:05:57:07:4d:b9:fc:13:40:6c:f3:45:d4:
         d4:39:3c:25:ea:0c:70:2e:f8:f1:eb:1f:ea:f9:a4:b3:73:8d:
         29:a5:95:b8:af:46:fd:79:e0:b5:03:56:8c:3e:00:08:15:7b:
         6c:d3:4a:bd:55:e5:9c:3f:70:a8:cb:4c:31:d4:d2:bc:ac:9c:
         dd:10:ea:b0:f2:87:de:cc:6c:41:ab:f3:f5:1d:e8:e9:69:53:
         6b:07:00:aa:b3:b4:78:ae:55:c7:66:6a:93:5e:de:fb:28:34:
         25:f9:4d:c0:d0:ef:94:32:b7:dc:b0:c9:ab:b0:7a:69:1f:52:
         dd:77:4a:7a:d7:41:2d:58:9c:7b:eb:76:3b:96:32:8e:f8:d2:
         39:ff:11:96:8f:2e:fe:b2:f7:5e:3f:3f:ef:35:e5:e6:5a:51:
         d9:20:58:35:1e:8f:fc:19:ce:b2:05:20:1b:79:0c:49:09:85:
         a4:45:34:13:33:39:d2:57:c6:2e:db:e0:5d:1e:75:b9:ae:fe:
         e4:8c:a0:d4:58:d1:0d:02:cb:f3:ce:da:fd:c4:c9:c6:c1:b5:
         cd:a6:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org