Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa
File:                     323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa (raw, json)
Hash identifier:          KCqaxK42TGy+ghlpH20jDherSU3PuV+0OweLNKS8yW4=
Subject key identifier:   85:02:FA:96:65:C6:13:99:02:53:09:21:1C:2D:1B:5D:76:4A:36:80
Certificate issuer:       /CN=2C9D167009E76DD836E1D87197E06CE80F77DEC8
Certificate serial:       392397061F5AD62D1D81D2930091361808522025
Authority key identifier: 2C:9D:16:70:09:E7:6D:D8:36:E1:D8:71:97:E0:6C:E8:0F:77:DE:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa
Signing time:             Tue 05 Mar 2024 17:57:51 +0000
ROA not before:           Tue 05 Mar 2024 17:52:51 +0000
ROA not after:            Tue 04 Mar 2025 17:57:51 +0000
asID:                     272137
IP address blocks:        2801:15:3800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:23:97:06:1f:5a:d6:2d:1d:81:d2:93:00:91:36:18:08:52:20:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9D167009E76DD836E1D87197E06CE80F77DEC8
        Validity
            Not Before: Mar  5 17:52:51 2024 GMT
            Not After : Mar  4 17:57:51 2025 GMT
        Subject: CN=8502FA9665C61399025309211C2D1B5D764A3680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:e3:88:a6:34:45:f8:83:23:d5:c0:1e:34:
                    d6:71:a2:22:03:a9:b4:3b:d8:8b:66:e5:c9:c5:7d:
                    29:77:f6:b6:bf:e3:ea:db:b1:28:05:2e:59:96:a7:
                    ae:91:87:0f:f0:12:7f:36:0f:3b:67:e6:5d:ab:02:
                    a7:98:88:20:34:7e:9e:67:a5:7e:42:37:e1:c3:06:
                    ed:eb:93:01:29:8b:9e:99:59:7d:47:85:1d:32:e0:
                    8d:24:38:ff:db:e9:1f:e5:d6:da:06:3c:3c:9d:94:
                    c6:47:70:ed:8d:92:df:2e:df:a0:25:41:da:87:a0:
                    73:56:05:7b:13:2c:c9:44:eb:da:7e:a5:0c:91:cb:
                    c2:62:a9:ba:ea:bb:84:04:74:98:9c:5c:ac:aa:da:
                    1b:68:ff:f7:74:6b:ec:f2:33:aa:96:9f:ac:18:bb:
                    d6:e4:65:d6:f4:26:df:47:fa:ea:57:bf:4e:22:ae:
                    38:de:a2:2d:23:6b:22:04:cc:60:30:5b:01:b3:01:
                    12:d9:b2:47:4d:e9:3c:de:46:f7:b3:8e:4f:f2:63:
                    2c:d5:a2:4b:2f:bf:73:2b:94:47:42:8f:cf:2d:a9:
                    26:c5:36:8d:2b:33:a9:f0:a7:10:07:40:fd:2a:aa:
                    83:4a:d1:b0:2b:0e:b2:47:4f:3f:1f:b0:56:73:80:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:02:FA:96:65:C6:13:99:02:53:09:21:1C:2D:1B:5D:76:4A:36:80
            X509v3 Authority Key Identifier:
                keyid:2C:9D:16:70:09:E7:6D:D8:36:E1:D8:71:97:E0:6C:E8:0F:77:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/323830313a31353a333830303a3a2f34382d3438203d3e20323732313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:06:9d:65:d3:5d:98:00:66:3f:24:2d:6a:57:08:da:5f:
         19:48:dc:5b:16:4c:f9:2f:71:81:49:e5:c1:de:2d:60:db:d2:
         2f:f9:a7:7d:e3:a9:1d:69:03:a7:8f:1a:bc:ed:1a:97:aa:f0:
         ff:46:cf:97:5e:24:5a:5b:9a:3e:fb:f2:87:94:ea:c1:ac:c2:
         4d:1e:61:34:de:14:4f:96:13:37:8c:0a:f3:85:aa:62:01:3a:
         ea:d6:24:30:ee:18:15:7d:05:6b:9b:6c:2e:ff:31:ed:f6:2c:
         19:83:ce:63:16:c7:df:5e:d1:83:90:4c:e9:43:b1:3b:55:f1:
         a5:aa:7f:18:9e:d3:3e:74:aa:6d:02:c4:18:85:6a:e3:27:24:
         32:d6:13:97:6d:ec:e2:38:87:05:33:f0:03:89:84:b3:b5:79:
         ca:c3:30:14:f4:af:c0:7a:85:21:a6:20:63:60:e0:dd:7a:31:
         38:ba:7a:52:f9:23:d8:bc:b8:4d:08:03:67:d5:b1:7b:05:28:
         79:f7:34:c4:d7:20:eb:76:4d:5c:ba:06:69:a6:56:eb:9c:b5:
         41:6f:ed:f0:ed:3d:c7:b7:db:d4:84:ef:83:68:9c:10:3d:ec:
         4e:39:37:03:aa:9d:04:08:d8:4b:39:96:6d:f2:5a:2f:2e:0e:
         a8:92:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:12:08 2024 by rpki-client on console-ams.rpki-client.org