Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/323830313a303a3266303a3a2f34382d3438203d3e203238313037.roa
File:                     323830313a303a3266303a3a2f34382d3438203d3e203238313037.roa (raw, json)
Hash identifier:          DX6uqJ2uEAaXqgOh+yLufII3lCzR+Xb42I0KrDPPOqg=
Subject key identifier:   40:B2:C9:69:9C:4B:DA:2F:55:06:2F:81:CE:4F:66:71:ED:4F:9B:33
Certificate issuer:       /CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
Certificate serial:       10B3D36810FE3AA090A1F5C5AFDFFED5668250CF
Authority key identifier: FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/323830313a303a3266303a3a2f34382d3438203d3e203238313037.roa
Signing time:             Tue 05 Mar 2024 18:10:29 +0000
ROA not before:           Tue 05 Mar 2024 18:05:29 +0000
ROA not after:            Tue 04 Mar 2025 18:10:29 +0000
asID:                     28107
IP address blocks:        2801:0:2f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b3:d3:68:10:fe:3a:a0:90:a1:f5:c5:af:df:fe:d5:66:82:50:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
        Validity
            Not Before: Mar  5 18:05:29 2024 GMT
            Not After : Mar  4 18:10:29 2025 GMT
        Subject: CN=40B2C9699C4BDA2F55062F81CE4F6671ED4F9B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:fe:9e:8d:7b:41:67:c9:59:90:11:38:a0:
                    09:fe:4b:ee:a1:e6:80:a8:71:8c:cc:9a:cd:fb:46:
                    05:c9:bf:e9:83:13:66:80:0e:f9:6a:c2:f4:cb:ed:
                    98:0c:15:b9:af:70:b5:7e:9b:ba:ea:7a:7e:04:93:
                    39:b2:bb:36:93:36:05:17:5f:ec:9c:71:9b:47:19:
                    51:da:4d:82:e9:3d:d5:e1:27:dd:ff:27:54:44:a6:
                    08:94:0e:8f:e4:97:ec:eb:e1:72:51:2f:fd:ea:13:
                    ea:d8:b6:f1:e3:b4:1e:50:fb:6f:7e:fa:8f:0c:c4:
                    c7:d6:dd:33:f0:16:94:94:8a:81:51:21:91:67:9e:
                    b1:23:a4:09:be:7f:9d:0d:88:2f:dd:91:c8:36:ba:
                    07:65:18:99:0b:58:e6:39:35:33:42:91:d9:b9:a5:
                    17:50:4a:f0:77:36:3a:96:e9:4f:fd:b8:f1:26:09:
                    06:da:cb:75:8e:bf:72:cd:8d:b0:07:9e:21:db:8b:
                    b2:55:0e:3a:2b:6b:74:ee:1e:6a:c6:93:bf:c8:a2:
                    cb:8b:21:4b:c2:0f:00:7e:54:e3:bf:26:3e:c3:3a:
                    2e:00:cc:90:93:bf:89:cf:b9:ef:12:64:5d:fd:bb:
                    39:11:3e:48:41:31:ed:fe:04:36:f2:3a:49:34:fa:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:C9:69:9C:4B:DA:2F:55:06:2F:81:CE:4F:66:71:ED:4F:9B:33
            X509v3 Authority Key Identifier:
                keyid:FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/323830313a303a3266303a3a2f34382d3438203d3e203238313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:2f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:d4:8c:ed:3e:03:eb:47:ed:76:d6:56:90:5c:b9:da:11:
         55:ed:65:3c:07:77:4f:e2:41:c7:15:64:86:68:51:cb:57:e1:
         f9:51:a9:5a:55:4b:34:6d:bf:18:dd:17:ad:d3:39:b5:e1:c7:
         34:07:0b:c5:54:91:d2:f3:10:24:0e:79:0d:c8:0b:e0:75:80:
         55:c7:67:9f:d4:ef:13:4d:b2:d6:d2:98:63:50:61:3b:31:33:
         3b:0f:fd:45:06:2c:9e:9f:c6:38:08:b0:86:8a:60:0a:04:b0:
         b6:25:3a:52:ea:a9:c8:9d:a5:9b:af:c1:ff:07:33:f2:b8:15:
         e4:25:61:e7:be:cb:ef:45:89:33:9d:c5:4e:eb:b8:06:46:33:
         7a:10:f6:e1:db:a0:d8:64:18:c5:ef:25:09:e5:2b:fb:c9:ef:
         18:b9:ba:4e:d1:c0:c0:ec:07:67:68:a7:b4:e9:93:ab:1c:1d:
         a6:db:88:7f:52:af:f2:60:d1:52:d9:a0:59:42:7e:58:09:d7:
         dd:35:e6:6e:71:bc:04:62:d6:f5:e4:4d:1f:43:83:15:80:55:
         f4:9f:f0:8d:4f:bc:da:be:bb:1e:7e:31:9a:9a:84:6a:a5:1f:
         43:b9:50:51:54:aa:a3:49:df:36:3b:e9:2b:20:69:92:a3:1d:
         14:5b:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org