Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a383a3a2f34352d3438203d3e203139343239.roa
File:                     323830313a3136653a383a3a2f34352d3438203d3e203139343239.roa (raw, json)
Hash identifier:          SRxKZN579F3DHykns2sRj+lSEgeMl5ij14EsrtxV2HQ=
Subject key identifier:   F1:3F:CC:3B:C6:DD:33:EC:E4:F4:89:99:5F:BB:6F:55:50:BC:35:EC
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       5295E6E31FE6C044CE8F07D0BF95AE458FF87B61
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a383a3a2f34352d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:12:59 +0000
ROA not before:           Tue 05 Mar 2024 18:07:59 +0000
ROA not after:            Tue 04 Mar 2025 18:12:59 +0000
asID:                     19429
IP address blocks:        2801:16e:8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 14:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:95:e6:e3:1f:e6:c0:44:ce:8f:07:d0:bf:95:ae:45:8f:f8:7b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Mar  5 18:07:59 2024 GMT
            Not After : Mar  4 18:12:59 2025 GMT
        Subject: CN=F13FCC3BC6DD33ECE4F489995FBB6F5550BC35EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:b4:c8:ac:52:f5:f7:4b:44:c7:85:1f:e6:
                    41:be:3a:44:2d:db:57:21:48:59:fa:af:04:f9:0d:
                    d2:23:34:6b:75:55:4b:1c:cb:93:8e:7c:8c:d1:b1:
                    b9:a1:a8:ad:5e:8b:2f:32:79:64:2a:3e:52:e2:d2:
                    e6:8b:ab:c8:ee:cd:52:81:df:86:56:a9:54:ce:4c:
                    d4:5e:69:f7:f3:00:f2:8c:66:a7:9f:67:c0:97:3f:
                    ea:34:22:60:d6:bd:e8:a4:85:18:66:9e:e2:d1:a7:
                    7c:e6:60:b7:a2:c5:2e:5a:1c:68:19:cb:7a:6c:eb:
                    8d:77:25:15:e2:fd:71:ab:db:3d:98:5b:19:e9:a5:
                    7d:a7:6f:79:a9:b4:7c:a9:f8:85:14:f1:4e:9c:4e:
                    89:e5:9e:c6:a5:56:11:01:57:b8:f5:1f:02:bd:03:
                    95:10:64:fc:4a:0d:f7:9f:cf:65:ed:e3:af:52:2a:
                    bd:0f:08:c3:4b:33:83:ee:71:7f:87:b3:ba:a4:bc:
                    43:47:69:00:93:0d:8e:98:37:18:36:46:e9:05:eb:
                    14:a5:d3:af:ce:29:42:74:37:45:fc:48:91:44:ee:
                    68:01:53:9a:07:25:a0:bc:e5:07:6f:36:e2:46:d8:
                    25:f8:be:f1:17:83:77:6a:2f:60:04:79:96:9d:1b:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:CC:3B:C6:DD:33:EC:E4:F4:89:99:5F:BB:6F:55:50:BC:35:EC
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a383a3a2f34352d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:81:52:92:ef:3b:f5:1c:19:09:d4:a9:a9:88:71:c0:12:
         75:72:ab:93:b5:dc:44:d8:26:fd:5c:6b:2b:e6:36:f6:3b:38:
         b7:9e:f5:e9:68:54:d2:69:7a:ac:14:43:b0:08:d8:2e:c3:03:
         c6:87:ae:4f:8b:6e:87:7f:e1:04:31:e9:71:dd:d5:a5:c5:a7:
         9b:2e:ef:1f:e1:26:e1:2f:4b:45:c7:fc:6f:26:23:d1:a1:78:
         4b:95:07:85:25:53:4a:a9:b6:03:86:08:14:a9:1f:1e:56:2c:
         e1:df:cc:01:49:b9:80:f2:72:7b:1d:12:14:eb:ea:04:60:47:
         77:c5:af:25:b3:30:58:90:9c:a6:1a:14:68:2a:ff:6a:87:29:
         6f:52:cc:b7:a6:18:e2:ad:8e:c9:8e:8b:42:1e:8a:91:2b:cd:
         5e:c8:f8:6b:e3:40:d3:5c:73:fa:96:57:0c:0f:b5:69:c4:c9:
         14:58:c1:25:f6:e6:aa:48:18:53:19:aa:b4:92:80:5a:c7:05:
         88:ae:a8:b3:35:cf:ca:37:37:be:f6:df:47:9c:0c:d4:78:8d:
         2f:0e:64:cf:dd:2d:f5:f8:5e:09:ad:06:b5:ad:54:77:2f:e5:
         ed:f8:12:f6:47:80:52:51:6d:79:a2:b5:8a:4f:bf:0a:37:2e:
         58:8c:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:35:42 2024 by rpki-client on console-ams.rpki-client.org