Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31663a383830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          1U4e0FNQx9bhQwFve6x/jF2Kx1WFkcLI6fTV9zAGdHk=
Subject key identifier:   B1:F5:0E:F1:F0:06:18:27:DD:5F:4A:95:EC:64:0E:51:F8:CC:2B:EB
Certificate issuer:       /CN=1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27
Certificate serial:       3F9D249B58C65FFBE0B3B6D8A0B25385CA3E7F88
Authority key identifier: 1E:D0:DC:5C:A7:7A:08:4E:E8:F2:BA:EC:17:C8:58:34:20:4A:CF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 17:49:58 +0000
ROA not before:           Tue 05 Mar 2024 17:44:58 +0000
ROA not after:            Tue 04 Mar 2025 17:49:58 +0000
asID:                     13489
IP address blocks:        2801:1f:8800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9d:24:9b:58:c6:5f:fb:e0:b3:b6:d8:a0:b2:53:85:ca:3e:7f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27
        Validity
            Not Before: Mar  5 17:44:58 2024 GMT
            Not After : Mar  4 17:49:58 2025 GMT
        Subject: CN=B1F50EF1F0061827DD5F4A95EC640E51F8CC2BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1d:00:64:dc:59:1c:80:bc:8f:e4:5e:47:ce:
                    26:04:a3:b7:10:12:b5:f4:86:57:d8:cc:fd:9c:a4:
                    dd:a7:b5:0b:09:8d:41:e6:95:96:7f:ad:1d:51:ec:
                    e2:18:a1:6a:72:00:6d:7b:b9:7e:e4:46:ab:84:8b:
                    c6:c4:2a:62:92:3d:62:2a:3d:1a:7b:ce:73:93:82:
                    d0:c9:d4:17:9e:80:0e:45:d3:c8:cb:ec:76:0a:9a:
                    80:34:cb:24:15:ec:f1:c0:e3:44:0c:0d:0e:55:b8:
                    d5:3e:fc:82:4d:6c:0d:07:6c:cc:2d:87:d3:71:e6:
                    8c:d9:5f:8b:cc:0d:0e:3a:7e:ac:1d:03:1e:0a:fa:
                    9a:bf:2e:35:f7:d3:58:90:bf:24:f2:2e:0c:fe:b3:
                    26:1a:bc:ca:09:3f:ba:e1:41:ce:7f:10:6f:4b:87:
                    24:89:19:42:a9:44:aa:29:d2:79:df:d4:a0:1e:d3:
                    0b:3e:1b:68:c3:b7:96:d4:17:af:6d:49:1b:f6:03:
                    da:27:18:eb:bc:5c:dd:e7:a6:63:40:c4:cf:a4:f5:
                    f9:b5:92:06:c9:1d:23:26:31:68:56:a9:14:a5:34:
                    35:fd:7f:d2:bb:4b:e4:48:cb:c9:dd:ec:24:44:c6:
                    65:33:93:15:23:b1:b8:f5:8a:5d:10:93:0c:3c:fb:
                    8e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:0E:F1:F0:06:18:27:DD:5F:4A:95:EC:64:0E:51:F8:CC:2B:EB
            X509v3 Authority Key Identifier:
                keyid:1E:D0:DC:5C:A7:7A:08:4E:E8:F2:BA:EC:17:C8:58:34:20:4A:CF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:19:8b:dd:85:36:7e:83:a1:a2:4f:7b:fb:5f:34:c9:2a:fa:
         a3:c4:b3:27:e7:b6:bc:ee:d8:9a:be:5c:d5:18:42:e3:2b:bc:
         56:c8:57:c0:d9:0b:2f:4f:8a:58:ea:56:e1:1c:fa:a0:0c:75:
         57:92:96:f3:ae:47:6f:48:f6:80:f4:87:c9:1a:f2:51:73:81:
         ff:10:c1:c3:2f:2b:36:48:93:c6:6e:7f:e0:1a:1b:10:0d:a1:
         da:c2:8f:28:e0:fd:c9:2e:6f:6f:56:0a:9a:be:55:4a:ad:b0:
         f5:0e:81:19:d1:0a:6d:cc:8f:33:5c:54:c6:27:4c:10:cc:b6:
         10:e7:32:2e:c1:6a:6b:9d:e2:44:a7:55:7c:39:0e:c2:2d:94:
         f9:1f:ca:e7:28:37:db:24:d1:88:07:ad:93:5d:04:7c:d6:a7:
         86:b0:a1:7a:8f:f8:a0:4f:87:55:84:b9:bb:17:63:51:f7:78:
         78:88:49:97:fe:ae:c6:82:df:f7:d4:78:84:9a:4e:a3:8e:5a:
         81:39:e0:9b:7d:99:2d:d7:f9:bf:71:1b:9f:f4:0e:62:8b:28:
         b8:1c:7b:5f:b1:94:e6:22:92:8a:28:88:8d:ce:aa:d4:3e:dd:
         c7:df:41:4b:52:09:3d:2b:0a:84:3c:c9:d5:50:81:ae:de:de:
         1a:eb:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:03:00 2024 by rpki-client on console-fra.rpki-client.org