Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69EFED65F83E0C7A9B5EF26E501567D5D3DF47D7900CF17EE58D47FA038694F3/0/323830313a3136363a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3136363a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          rMSKq82ubl5QaVp2Kmi2NFFidZtDfcVVdChobc3xvwo=
Subject key identifier:   37:46:3F:9D:FC:24:9A:3C:DE:CD:47:A2:F6:19:EC:F5:92:E8:43:F6
Certificate issuer:       /CN=F00580D32CAA490841C98522E885059EFDD86F2B
Certificate serial:       6B574F8D4B1971296DFDDC0C48DEFD9156F6FE8B
Authority key identifier: F0:05:80:D3:2C:AA:49:08:41:C9:85:22:E8:85:05:9E:FD:D8:6F:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00580D32CAA490841C98522E885059EFDD86F2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69EFED65F83E0C7A9B5EF26E501567D5D3DF47D7900CF17EE58D47FA038694F3/0/323830313a3136363a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 16 Apr 2024 15:25:00 +0000
ROA not before:           Tue 16 Apr 2024 15:20:00 +0000
ROA not after:            Tue 15 Apr 2025 15:25:00 +0000
asID:                     19429
IP address blocks:        2801:166::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69EFED65F83E0C7A9B5EF26E501567D5D3DF47D7900CF17EE58D47FA038694F3/0/F00580D32CAA490841C98522E885059EFDD86F2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69EFED65F83E0C7A9B5EF26E501567D5D3DF47D7900CF17EE58D47FA038694F3/0/F00580D32CAA490841C98522E885059EFDD86F2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00580D32CAA490841C98522E885059EFDD86F2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:57:4f:8d:4b:19:71:29:6d:fd:dc:0c:48:de:fd:91:56:f6:fe:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F00580D32CAA490841C98522E885059EFDD86F2B
        Validity
            Not Before: Apr 16 15:20:00 2024 GMT
            Not After : Apr 15 15:25:00 2025 GMT
        Subject: CN=37463F9DFC249A3CDECD47A2F619ECF592E843F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:a6:f7:6f:58:c6:de:2c:7b:21:95:50:d7:
                    6c:22:0f:31:f7:59:66:13:05:86:3f:35:ca:05:12:
                    bc:11:a9:2e:e0:7c:45:be:17:9f:7b:6a:b9:37:7f:
                    68:61:db:f9:38:23:31:fb:aa:8a:46:b0:1b:fb:d8:
                    45:7e:71:1a:0b:cc:17:4c:8c:07:e9:cd:5c:6d:31:
                    b4:97:6f:87:e8:35:4c:3b:97:2b:e4:f4:aa:8f:a2:
                    95:aa:79:dd:20:0f:93:97:fe:34:1f:64:d9:ab:29:
                    0b:d5:a9:61:ed:98:47:5a:4f:5e:35:36:17:0e:5f:
                    0d:4e:e6:56:90:e6:ed:96:c9:78:1f:75:b5:1f:71:
                    f8:be:a2:d7:71:17:27:37:e9:51:cf:4f:9c:ed:b7:
                    91:af:43:c5:c5:e6:2d:07:00:67:74:da:d7:8a:78:
                    ca:2a:69:28:76:e6:98:30:a9:ac:0c:f9:1a:ea:21:
                    5d:ce:f1:69:c1:a6:d3:e1:2b:31:74:fe:1a:a6:d8:
                    dd:e3:72:2e:1e:ca:25:e3:d4:a6:e4:ea:ac:ed:14:
                    41:2a:4d:43:e8:68:0e:24:53:91:1e:ee:e5:b1:73:
                    ef:d5:e1:80:52:80:8e:32:6d:18:d9:4a:46:b0:ed:
                    01:b3:18:cc:2d:8c:1b:40:05:e4:c0:69:51:ad:28:
                    da:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:46:3F:9D:FC:24:9A:3C:DE:CD:47:A2:F6:19:EC:F5:92:E8:43:F6
            X509v3 Authority Key Identifier:
                keyid:F0:05:80:D3:2C:AA:49:08:41:C9:85:22:E8:85:05:9E:FD:D8:6F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69EFED65F83E0C7A9B5EF26E501567D5D3DF47D7900CF17EE58D47FA038694F3/0/F00580D32CAA490841C98522E885059EFDD86F2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00580D32CAA490841C98522E885059EFDD86F2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69EFED65F83E0C7A9B5EF26E501567D5D3DF47D7900CF17EE58D47FA038694F3/0/323830313a3136363a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:166::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:5b:d9:cb:84:07:84:1c:29:7b:ee:b2:43:e0:47:59:6b:
         92:8d:b4:9b:60:17:b9:2a:ab:64:91:15:95:28:ef:27:2f:33:
         64:a5:8c:d6:87:0d:7c:cd:22:6b:57:9b:c4:ce:c4:fb:a5:35:
         4a:bd:a1:04:c7:69:49:82:3c:36:9e:12:26:48:60:9f:d7:9b:
         ba:9f:14:c4:f6:a6:69:d4:f9:f9:90:ed:e0:57:ba:98:66:61:
         db:bd:11:a7:26:38:30:de:fd:2a:80:fd:49:94:11:68:7a:bf:
         01:fd:c5:97:36:42:da:79:b9:71:6c:e8:d7:e9:1f:3c:cf:63:
         17:06:69:d3:59:11:ee:bd:dc:54:a4:0f:0d:8a:16:7c:36:60:
         e5:4a:15:d7:6a:47:29:aa:88:f9:1d:a5:4e:ab:22:5c:1d:8c:
         c3:53:db:29:63:04:cb:00:78:b1:bb:8a:f6:cd:90:d5:3e:14:
         d9:29:31:ad:1e:0e:63:f7:36:7c:11:97:bf:ce:d5:24:09:fb:
         0d:5a:ae:c5:74:b6:d0:9e:26:9f:ec:b0:a3:2c:e9:60:02:41:
         cf:8d:41:fa:cf:f4:08:b4:6f:60:e9:b4:53:f1:2b:34:28:47:
         6b:2e:06:3d:1a:48:17:c7:68:ae:43:c3:75:e2:e6:0d:ea:d7:
         2e:4f:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:57 2024 by rpki-client on console-fra.rpki-client.org