Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31663a343830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          T8HSLkzk2N9JLeo7wnZbPb4VTMVyR3bigPLaX28iLYo=
Subject key identifier:   75:A9:26:4A:91:04:5C:A9:43:2F:DB:3A:9F:75:B3:CA:3E:EA:08:90
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       47DD4D292CA051F5B10CC342C7A1EFEE9FBF4AAC
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:01:45 +0000
ROA not before:           Tue 05 Mar 2024 17:56:45 +0000
ROA not after:            Tue 04 Mar 2025 18:01:45 +0000
asID:                     61468
IP address blocks:        2801:1f:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:dd:4d:29:2c:a0:51:f5:b1:0c:c3:42:c7:a1:ef:ee:9f:bf:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Mar  5 17:56:45 2024 GMT
            Not After : Mar  4 18:01:45 2025 GMT
        Subject: CN=75A9264A91045CA9432FDB3A9F75B3CA3EEA0890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:e5:0a:99:8c:93:44:14:0a:db:fa:f6:08:
                    7e:31:10:4a:86:75:56:0c:97:97:c1:ec:91:cc:b4:
                    89:b9:93:75:9b:7d:5a:56:eb:e2:bf:a7:cc:2d:be:
                    a1:a3:3e:68:fa:6b:26:4f:6a:c8:08:06:4d:b1:01:
                    c3:16:6d:09:ee:98:15:51:6c:ae:d2:41:93:b8:de:
                    62:cd:0b:e0:4f:8b:78:37:c5:8b:92:32:ef:1c:b6:
                    df:aa:73:fe:a4:0d:e8:8e:ff:fc:c7:c6:36:f9:f2:
                    a1:37:65:04:f0:49:2e:ac:dd:03:5d:bf:73:bd:71:
                    f9:fb:c8:1c:e9:a2:04:53:2a:32:d5:d3:06:1b:8f:
                    ad:8c:a5:a7:3c:37:df:3b:93:9b:bc:cc:41:e7:88:
                    16:40:20:67:00:ee:04:38:d5:6d:b4:e6:2b:f9:80:
                    6f:2e:84:71:db:c6:3d:22:cd:9c:54:d0:12:28:d4:
                    52:15:b9:b1:bc:26:33:a6:53:bd:39:66:7a:e0:58:
                    83:2e:9e:3c:64:12:83:90:f6:53:fa:0d:66:5e:6e:
                    e9:fc:2a:1f:86:50:af:66:21:35:5c:83:a2:b3:39:
                    64:c7:53:1f:97:f2:16:be:6f:e7:6b:20:c8:42:d5:
                    b2:f2:ce:5c:7b:84:66:12:6b:2b:55:a6:77:1c:2c:
                    3d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A9:26:4A:91:04:5C:A9:43:2F:DB:3A:9F:75:B3:CA:3E:EA:08:90
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:2f:12:f5:d9:93:87:79:34:bd:92:04:96:a3:0e:9f:72:
         b0:3f:b4:cb:5d:43:5f:02:75:8a:18:20:b1:37:ee:a5:54:5a:
         a9:62:d8:34:ca:64:64:56:53:66:ab:20:4b:1c:1a:29:3b:40:
         00:5b:fb:21:c4:aa:85:ea:31:af:6b:40:44:2d:0d:ba:42:33:
         7c:3d:54:5f:0e:62:5a:04:db:c2:dc:77:ed:b6:d1:5d:b8:04:
         b4:10:72:ce:d9:96:fb:b4:38:34:19:5c:1c:c9:17:87:06:6c:
         91:37:e3:bc:4b:70:2d:b6:d0:a1:1e:5d:d4:98:83:ce:71:bc:
         d2:82:55:b1:f2:d7:63:bc:32:25:d1:e8:3d:de:98:a3:60:c3:
         90:5c:82:04:69:10:63:c2:d9:0a:f5:ee:00:6d:15:c0:75:5f:
         de:aa:09:58:7c:92:49:df:a3:0c:eb:ab:d3:7d:88:cf:e4:2f:
         ac:35:6f:e3:8c:39:76:91:67:b0:2f:ae:dd:5d:05:8c:67:22:
         ad:5d:ea:c8:f3:7b:67:42:83:83:26:0d:1b:5b:65:49:75:3f:
         d1:68:85:78:c3:a1:73:e5:46:20:85:84:f2:92:e3:09:54:96:
         cf:80:18:9e:9d:4c:8e:d5:2e:72:70:9d:d7:e3:64:5f:1e:62:
         9e:38:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:17 2024 by rpki-client on console-fra.rpki-client.org