Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a383a3a2f34352d3438203d3e20323733383930.roa
File:                     323830313a3138643a383a3a2f34352d3438203d3e20323733383930.roa (raw, json)
Hash identifier:          81TnPJk9F8NSbT9upDD4YIhDX+Br79aMdWmHYonFGzs=
Subject key identifier:   FF:53:A3:93:30:36:89:A0:F0:88:EF:C9:B2:85:60:E6:CD:93:F6:C1
Certificate issuer:       /CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
Certificate serial:       7CA76BAD8452D5F837198E703B40CC3E7B5A257C
Authority key identifier: 73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a383a3a2f34352d3438203d3e20323733383930.roa
Signing time:             Tue 30 Jul 2024 03:50:01 +0000
ROA not before:           Tue 30 Jul 2024 03:45:01 +0000
ROA not after:            Tue 29 Jul 2025 03:50:01 +0000
asID:                     273890
IP address blocks:        2801:18d:8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a7:6b:ad:84:52:d5:f8:37:19:8e:70:3b:40:cc:3e:7b:5a:25:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
        Validity
            Not Before: Jul 30 03:45:01 2024 GMT
            Not After : Jul 29 03:50:01 2025 GMT
        Subject: CN=FF53A393303689A0F088EFC9B28560E6CD93F6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0d:cf:ad:ea:8c:ef:e1:54:76:9c:e5:75:e5:
                    5c:4e:3d:60:eb:cc:9e:5b:88:d5:a0:04:49:53:12:
                    af:c9:f0:de:5d:4e:12:61:a3:c0:1a:3b:c1:f9:c9:
                    f1:d3:5a:72:cb:32:ec:5a:f5:67:77:fa:8c:b4:d0:
                    24:b4:17:3e:d5:cb:b1:f7:e0:fb:9f:91:b2:c6:02:
                    49:39:37:3b:d4:7b:1a:b6:45:91:c9:44:ab:43:eb:
                    41:71:fc:8d:ab:13:d8:22:7e:fe:e5:4f:27:aa:4d:
                    da:71:1f:27:13:dc:56:97:2d:b5:af:35:ba:8a:99:
                    07:ab:0f:03:73:04:28:9f:ef:82:15:10:a3:30:b0:
                    0e:03:e9:a1:8c:4d:0d:05:a0:a5:a5:c7:4c:98:67:
                    d6:bd:64:9b:2d:3e:71:8e:7f:cd:29:36:98:90:6e:
                    c4:4f:83:e1:4d:10:79:96:e1:9d:7c:95:3d:7b:ef:
                    73:63:13:d3:b7:a7:90:ff:b9:af:f2:26:c2:49:59:
                    40:7a:0e:e2:3e:88:6a:7c:ac:8b:75:c5:be:ba:99:
                    c5:6a:cc:15:ca:28:d7:a5:a6:be:65:3d:40:c3:4a:
                    0e:13:ad:4c:50:28:ea:ee:41:26:ab:91:4c:1a:2a:
                    32:3e:83:b0:c4:db:8e:5d:6d:76:84:82:ac:14:ee:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:53:A3:93:30:36:89:A0:F0:88:EF:C9:B2:85:60:E6:CD:93:F6:C1
            X509v3 Authority Key Identifier:
                keyid:73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/323830313a3138643a383a3a2f34352d3438203d3e20323733383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18d:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:f3:01:98:f1:7e:6e:dc:08:4e:3e:a6:cb:3f:83:93:ce:
         14:ae:24:0a:61:76:86:88:8b:5a:80:d7:d6:3a:d6:a9:d9:84:
         80:ba:46:10:6b:b0:d0:81:66:31:aa:7b:a7:53:8d:03:cb:b6:
         be:32:9e:90:9a:8e:2d:bc:3d:16:4a:4c:d8:03:96:6b:f3:e5:
         92:38:5d:d2:b6:0b:ea:1f:89:7d:e9:fb:3d:1a:11:45:76:00:
         f1:d2:13:0a:95:35:27:66:fe:df:05:5b:ea:02:b2:f6:a0:71:
         c5:a9:91:dc:99:26:6c:19:d3:ba:8a:21:fc:a3:7d:42:73:12:
         8f:9f:78:10:30:46:48:84:b2:99:cc:ad:14:34:2b:a8:80:01:
         35:cc:9c:7e:fc:e7:2d:08:a8:05:02:d2:9d:57:86:3b:11:10:
         69:42:a8:61:0f:7f:07:ab:94:73:b6:f6:95:2e:eb:9d:96:ee:
         5e:61:d7:9c:5d:8e:15:7a:c8:7a:b3:0d:fc:73:5e:c5:1d:48:
         05:ab:f3:1b:f5:3c:49:90:48:04:7b:60:ae:0b:fb:58:c6:49:
         30:0b:c5:c8:da:56:38:40:88:fa:ef:ae:c9:cb:64:a3:66:ad:
         f8:32:c2:9c:d0:0d:ce:1a:73:96:5b:2e:f0:1e:78:a2:b5:45:
         ec:6f:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:31:25 2024 by rpki-client on console-fra.rpki-client.org