Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/323830313a31333a363830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31333a363830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          2NRF7CPpsYkOPmDAj+RDHYUXACGuCPLHlkpDGcOGE38=
Subject key identifier:   19:D0:2D:A1:C1:08:FD:1E:CC:A0:68:74:CF:CF:F2:D5:3C:4F:87:A6
Certificate issuer:       /CN=506A072B535072F6E8F13CEF7E5B9B3E4E5891E6
Certificate serial:       083D70C25ED9F4943561139A5BCF744F441543D6
Authority key identifier: 50:6A:07:2B:53:50:72:F6:E8:F1:3C:EF:7E:5B:9B:3E:4E:58:91:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/323830313a31333a363830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:19:07 +0000
ROA not before:           Tue 05 Mar 2024 18:14:07 +0000
ROA not after:            Tue 04 Mar 2025 18:19:07 +0000
asID:                     14080
IP address blocks:        2801:13:6800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3d:70:c2:5e:d9:f4:94:35:61:13:9a:5b:cf:74:4f:44:15:43:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506A072B535072F6E8F13CEF7E5B9B3E4E5891E6
        Validity
            Not Before: Mar  5 18:14:07 2024 GMT
            Not After : Mar  4 18:19:07 2025 GMT
        Subject: CN=19D02DA1C108FD1ECCA06874CFCFF2D53C4F87A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:0a:d9:cc:e9:cf:42:e4:a2:79:31:26:bd:
                    ac:4d:f3:d3:a7:96:b3:94:3d:56:ab:ec:57:a8:1d:
                    ae:46:47:8b:3b:c9:4e:b7:3f:ed:7e:84:2e:71:9e:
                    0c:52:ae:35:61:d8:69:d4:ff:26:2f:a7:54:e7:21:
                    11:f5:0c:0a:29:89:f9:d1:e8:34:36:72:e4:ce:bc:
                    bb:15:30:04:5d:3d:6b:e3:b3:0a:f2:88:dc:34:9d:
                    46:0a:e9:d5:f0:3c:b7:86:e6:f0:0d:6a:28:84:d0:
                    99:b9:69:b8:d3:e7:e8:9f:f9:10:49:dd:49:8b:ce:
                    1a:42:3d:d5:03:3e:f1:9b:0d:13:63:07:6e:a6:72:
                    92:e0:b1:af:c1:c1:dc:e1:f8:0c:72:b0:5b:2a:83:
                    9e:19:18:4c:b3:98:4d:0d:cc:e5:f6:fe:6e:b9:c5:
                    2c:a1:a1:6c:31:2c:82:cb:68:f3:41:35:de:6d:bd:
                    fa:74:c7:ad:17:df:61:f4:1b:20:44:6e:a7:55:09:
                    82:31:3c:31:3e:10:fa:81:76:50:7f:e4:24:23:7d:
                    a8:ec:10:86:aa:a8:19:75:be:98:7b:9b:cc:ed:e9:
                    10:c5:19:bc:1c:c6:b9:27:95:dc:73:ae:68:ea:59:
                    2c:c2:6b:9b:a2:65:04:86:2a:5a:d6:00:93:4b:4d:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D0:2D:A1:C1:08:FD:1E:CC:A0:68:74:CF:CF:F2:D5:3C:4F:87:A6
            X509v3 Authority Key Identifier:
                keyid:50:6A:07:2B:53:50:72:F6:E8:F1:3C:EF:7E:5B:9B:3E:4E:58:91:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506A072B535072F6E8F13CEF7E5B9B3E4E5891E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69E68FE669373ED112FD35DC3DBFC368981239C79873EECC6A9D273DC5A6C42E/0/323830313a31333a363830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:73:32:a1:ce:1b:8c:0e:7e:25:cd:c4:dc:c1:3e:38:0f:
         0c:7a:ad:90:ec:be:af:f0:09:2c:62:13:9d:42:01:79:67:43:
         87:1f:31:48:3b:64:31:7e:24:7e:63:02:8f:d2:66:d1:b4:36:
         89:1e:64:3c:a4:46:0b:f5:27:6e:dd:85:5e:14:5b:94:37:36:
         bc:b5:76:0c:bb:08:35:25:7b:e8:c3:88:4f:a3:81:b6:ad:c3:
         e4:2c:78:9c:52:7d:4e:bd:39:a3:e7:09:ba:cc:cc:6c:66:31:
         57:69:bb:d3:d4:03:14:70:d7:d5:66:a5:c9:65:33:ac:d8:20:
         6b:da:fb:4f:8c:2c:63:ab:5e:ca:6a:1d:9c:53:17:61:a0:ee:
         dc:15:3b:6a:b1:74:94:19:cc:cf:2f:ee:57:de:81:20:5c:a4:
         35:0a:03:a8:a4:0b:30:e6:96:77:47:f6:8f:e2:f3:6a:c5:ea:
         81:ec:24:17:07:e5:78:1d:e8:ea:b6:bf:94:b1:ff:91:71:87:
         3e:e9:02:71:ba:a7:41:b0:7e:ad:74:c2:d7:36:e9:20:93:17:
         17:60:3d:63:3d:04:21:6a:19:4f:80:69:61:7f:a6:38:31:2f:
         85:ce:c1:17:60:f5:fa:ea:fd:0b:0d:20:df:76:51:f8:3e:09:
         70:7f:1b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org