Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa
File:                     323830313a3165363a3a2f34342d3434203d3e20323731383236.roa (raw, json)
Hash identifier:          V6y82vWn4VMWllhYL2RH02p+BLWlhopDfHDaomj3C7E=
Subject key identifier:   FE:42:B0:D1:ED:C9:A8:AE:35:26:1A:74:87:91:6A:32:D9:79:DA:BF
Certificate issuer:       /CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
Certificate serial:       11ABFC5805A4FF437460E3E246A1F7879E621E18
Authority key identifier: A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa
Signing time:             Tue 05 Mar 2024 18:00:18 +0000
ROA not before:           Tue 05 Mar 2024 17:55:18 +0000
ROA not after:            Tue 04 Mar 2025 18:00:18 +0000
asID:                     271826
IP address blocks:        2801:1e6::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ab:fc:58:05:a4:ff:43:74:60:e3:e2:46:a1:f7:87:9e:62:1e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED
        Validity
            Not Before: Mar  5 17:55:18 2024 GMT
            Not After : Mar  4 18:00:18 2025 GMT
        Subject: CN=FE42B0D1EDC9A8AE35261A7487916A32D979DABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:09:a9:3a:f6:4c:da:f1:02:82:b2:87:af:
                    1f:f2:59:da:e4:35:8f:d8:0a:69:29:8e:41:ac:98:
                    91:51:08:cf:aa:0c:d7:59:12:e6:42:e1:91:70:a7:
                    3b:b8:98:85:3d:d0:b1:0a:19:57:1f:38:19:2d:fc:
                    87:d3:85:db:82:0d:20:c0:e7:3e:d7:12:1b:4d:7b:
                    b1:1a:75:35:aa:c3:05:87:c7:19:1c:a4:9e:6e:48:
                    38:d8:e4:0f:1b:42:24:a6:a8:c7:df:6a:ab:a4:6b:
                    3b:16:33:ed:bf:5e:88:3f:d4:d4:bb:8c:70:f2:1f:
                    44:7d:92:dc:84:ab:43:40:16:77:16:ef:18:95:33:
                    9c:4c:4b:5b:cf:53:f3:cd:8f:80:be:e4:d4:d2:8a:
                    76:81:26:29:af:19:42:85:c1:0c:1e:aa:d7:b8:16:
                    7d:3f:e4:1a:ee:75:e3:6a:6d:4c:4e:d4:20:27:1a:
                    8e:2b:80:9e:01:cc:80:c1:b9:ce:d4:5a:fb:86:69:
                    9b:65:7d:e3:ee:75:5a:45:b9:ae:67:bb:28:35:c2:
                    a3:86:22:81:e3:68:8e:c7:d9:4a:7d:d0:2e:8b:73:
                    3f:87:0d:56:27:d3:ac:3b:4c:4d:53:32:f0:04:f4:
                    24:0b:c7:ba:8c:ea:7a:74:5b:e2:03:87:90:13:90:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:42:B0:D1:ED:C9:A8:AE:35:26:1A:74:87:91:6A:32:D9:79:DA:BF
            X509v3 Authority Key Identifier:
                keyid:A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/323830313a3165363a3a2f34342d3434203d3e20323731383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e6::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:1f:2e:bd:01:90:ec:91:c8:12:da:04:aa:04:60:3a:e5:
         dc:fc:9d:38:f4:fd:5d:57:d2:9b:7b:62:d9:23:2f:d7:17:02:
         fb:8c:56:55:b5:b7:89:61:35:d6:db:a6:eb:cf:ff:8f:91:66:
         41:40:91:63:da:4b:9d:4b:75:e7:5b:a7:15:59:7c:46:0b:d3:
         01:b0:0a:3e:78:47:3c:a9:39:7c:4d:c1:05:b3:79:25:f4:26:
         2f:51:e5:28:01:85:42:b3:b8:e6:34:d6:cf:cc:2c:1f:20:22:
         c9:47:c0:f9:c7:46:34:0b:f6:01:03:02:f1:6e:91:d3:77:16:
         95:0a:75:0a:30:5c:69:85:8c:ea:8e:8e:45:58:ec:f5:c5:88:
         34:e9:6d:33:a3:68:f3:e2:e8:5c:14:73:bd:79:23:ff:18:26:
         88:04:8b:ca:36:d5:40:88:f6:25:9d:0a:63:4e:49:3a:14:d3:
         5a:95:90:82:af:65:4b:c4:20:33:07:f2:fd:47:40:9e:7c:05:
         04:cd:19:91:c3:49:76:f9:db:44:e9:c9:a0:db:58:89:ed:11:
         53:14:4a:c8:f7:83:e7:51:ce:6c:e9:29:6a:30:8b:24:bf:a9:
         83:48:65:fe:1d:4a:a7:9b:b0:30:a4:9d:17:1f:05:8c:12:01:
         8a:26:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org