Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830303a3a2f34382d3438203d3e2033353439.roa
File:                     323830313a31623a313830303a3a2f34382d3438203d3e2033353439.roa (raw, json)
Hash identifier:          hi3JOu4+tbZjTKtQnfA8T9kS/fihtAkisMKQv3e+4uU=
Subject key identifier:   B7:AA:6C:5C:02:9E:86:30:75:9E:06:31:8E:78:E4:2C:43:2B:01:24
Certificate issuer:       /CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
Certificate serial:       3A7A1D5255037F5BD7CFFC423EEA43C5D1A05D69
Authority key identifier: E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830303a3a2f34382d3438203d3e2033353439.roa
Signing time:             Tue 05 Mar 2024 18:23:01 +0000
ROA not before:           Tue 05 Mar 2024 18:18:01 +0000
ROA not after:            Tue 04 Mar 2025 18:23:01 +0000
asID:                     3549
IP address blocks:        2801:1b:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7a:1d:52:55:03:7f:5b:d7:cf:fc:42:3e:ea:43:c5:d1:a0:5d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
        Validity
            Not Before: Mar  5 18:18:01 2024 GMT
            Not After : Mar  4 18:23:01 2025 GMT
        Subject: CN=B7AA6C5C029E8630759E06318E78E42C432B0124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:69:c3:9b:82:2e:d5:31:c0:f6:26:3e:11:
                    3d:2c:76:ac:3b:6b:2f:fd:eb:fe:a2:16:f0:71:78:
                    98:40:bc:6b:5d:6e:a1:ed:ff:8e:d1:37:42:1d:5f:
                    c5:88:22:ab:be:0b:04:4c:34:97:e9:34:99:d4:e7:
                    df:26:c7:f7:ac:1e:fb:d5:9e:46:03:50:27:43:05:
                    68:07:c9:04:ab:60:84:a0:08:c6:81:de:3a:fe:41:
                    56:b3:fd:c7:e8:40:47:b1:18:ea:40:15:43:49:b7:
                    97:98:d2:e5:d0:c8:c9:f5:0e:20:a3:5f:14:a8:c3:
                    1a:cd:9e:3c:61:a3:d2:53:0e:ac:48:3b:c3:af:d1:
                    18:54:34:4c:92:de:93:4d:88:97:07:51:c3:d8:31:
                    70:73:81:a2:b4:f5:cc:f3:5b:bd:e1:f7:89:9a:89:
                    e4:d3:8a:cc:37:e9:65:a2:a4:ca:70:b5:6f:d6:5c:
                    22:2d:b4:e8:fe:f6:44:2c:b9:5f:b0:4c:dd:9c:24:
                    ef:2d:d4:66:3f:85:5e:9c:27:b9:05:4c:58:9a:49:
                    6a:93:c3:ac:55:2c:1a:a1:77:ec:21:3f:9d:be:9b:
                    84:28:44:48:13:0e:f6:de:4a:d6:a6:bf:90:b6:9d:
                    2e:e3:42:ba:b0:0a:29:25:d6:8b:01:a7:fc:9c:bb:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AA:6C:5C:02:9E:86:30:75:9E:06:31:8E:78:E4:2C:43:2B:01:24
            X509v3 Authority Key Identifier:
                keyid:E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830303a3a2f34382d3438203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:1a:e3:d6:c9:9b:87:56:84:d0:59:2f:ad:39:38:3e:fd:
         29:62:25:87:f4:69:7b:66:56:90:6e:cd:1f:06:62:d9:87:a2:
         3f:ff:2e:a6:57:13:24:2e:47:7d:66:82:60:d4:0b:7a:ea:4f:
         39:03:49:cd:21:46:d8:0e:6a:cc:ae:a9:f4:47:86:b3:0a:53:
         06:98:cb:c2:a8:f1:27:67:39:2f:33:fd:8d:39:d0:27:50:ad:
         2b:3b:0b:47:40:02:c8:8f:df:60:9e:51:af:72:87:2c:41:5d:
         c4:24:c6:d7:7b:d7:9d:fe:94:59:77:5e:b5:a3:af:95:6d:78:
         9d:e4:39:09:84:18:09:b0:da:83:57:b7:79:11:a5:57:47:47:
         d2:fb:11:3d:cf:1d:28:fd:e3:8f:f0:2c:ea:b4:55:b1:fd:01:
         7d:1f:19:fd:f3:c7:96:18:27:49:34:3c:1a:88:45:75:29:f3:
         a1:bd:fb:ea:94:cd:c7:c9:fd:8e:f3:e4:13:a2:29:a5:c7:93:
         a0:b0:08:e4:b6:73:86:f1:1a:24:c5:38:88:30:db:7d:4d:11:
         d9:96:f3:60:04:07:c0:6c:bb:ce:25:ad:79:61:d5:58:40:8b:
         73:cf:aa:73:43:e8:80:17:c8:99:c9:b5:72:95:5c:e7:ae:e5:
         e2:8c:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:11:29 2024 by rpki-client on console-fra.rpki-client.org