Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31623a313830313a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          YavX56CcmRwlBEo/8HITOwyvuyTsZ+ktDVLmHH2oea4=
Subject key identifier:   E3:2B:6E:88:07:E9:AC:89:0F:E2:D5:A8:7B:E4:CB:A0:F3:D4:06:EB
Certificate issuer:       /CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
Certificate serial:       19638BF0A0C09819446CED40CC1DFE7DE0F6D553
Authority key identifier: E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a3a2f34382d3438203d3e203134303830.roa
Signing time:             Mon 15 Apr 2024 19:15:00 +0000
ROA not before:           Mon 15 Apr 2024 19:10:00 +0000
ROA not after:            Mon 14 Apr 2025 19:15:00 +0000
asID:                     14080
IP address blocks:        2801:1b:1801::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:8b:f0:a0:c0:98:19:44:6c:ed:40:cc:1d:fe:7d:e0:f6:d5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
        Validity
            Not Before: Apr 15 19:10:00 2024 GMT
            Not After : Apr 14 19:15:00 2025 GMT
        Subject: CN=E32B6E8807E9AC890FE2D5A87BE4CBA0F3D406EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:03:9f:92:5f:d8:09:7c:99:01:2c:0c:72:
                    bf:77:a2:e1:91:74:e8:85:66:8d:c6:31:22:e0:3f:
                    af:d2:f1:e9:01:86:a4:e9:72:da:af:4a:f1:40:dc:
                    a4:75:89:36:ae:77:57:05:97:e6:a5:c7:35:51:86:
                    8f:8d:00:ad:6f:26:21:22:6b:8e:51:c8:b4:37:bf:
                    28:8c:1e:13:ea:17:8d:d7:55:70:94:48:cf:f6:0b:
                    26:fc:bf:b9:aa:39:1c:ae:9a:e8:24:19:15:95:93:
                    ed:bf:21:76:a9:f2:29:d7:29:c4:33:75:e1:39:29:
                    39:02:72:ef:03:74:62:5b:0a:fd:46:a3:89:fc:95:
                    06:2f:6b:fc:c4:ee:d7:eb:f2:46:bc:74:6d:58:f6:
                    5d:74:31:46:ae:03:0e:d0:fc:c1:d9:a3:6c:23:7b:
                    e4:12:1d:9d:20:4c:0b:fc:ad:76:28:78:50:d7:f8:
                    b2:c0:ca:c1:ff:14:99:ae:cc:94:91:1d:8d:cd:58:
                    96:d7:70:61:34:31:39:70:da:ca:c5:1e:e8:b5:2c:
                    79:1c:f5:93:a8:5a:1f:ac:49:5b:e9:55:b2:26:1b:
                    96:44:21:d5:3e:5e:e0:79:dc:be:38:ae:8d:e1:f9:
                    bb:ac:5a:57:29:11:56:0c:8c:85:fa:02:d5:62:b3:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:6E:88:07:E9:AC:89:0F:E2:D5:A8:7B:E4:CB:A0:F3:D4:06:EB
            X509v3 Authority Key Identifier:
                keyid:E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:dc:6f:a7:07:2f:91:76:4d:d0:96:5a:f4:0a:24:0b:2c:19:
         43:57:34:0d:6e:a8:52:2c:ac:bc:95:56:fd:23:d2:34:9f:62:
         79:9e:01:f7:ac:dc:8b:16:90:dd:1e:43:00:da:09:00:b6:a6:
         66:74:2d:0d:66:f8:8e:dd:c7:2e:12:42:a7:02:3f:67:e4:1f:
         45:90:5c:3f:d4:84:87:30:bc:59:ea:e9:d7:a6:4a:18:97:c5:
         15:e8:f4:71:27:f1:1e:c6:49:6b:ea:3e:b2:66:13:18:2d:1e:
         1d:5d:fa:05:d8:30:e9:17:70:61:a1:96:f1:ab:1c:47:12:00:
         2f:cd:ac:cf:64:e9:72:32:1b:2c:40:aa:24:7f:ba:dd:d6:2d:
         77:fa:78:f7:c7:b8:8a:f0:8c:cd:16:4b:94:89:b6:93:86:b6:
         8a:37:d2:9e:38:29:06:9f:e5:94:88:53:fa:94:a5:c2:3c:c1:
         80:f3:21:bd:75:49:51:f2:d2:60:63:38:c2:77:88:18:09:06:
         c6:f9:06:3a:67:60:57:93:21:8e:0f:26:38:c8:53:4b:90:b3:
         e5:46:fe:61:fb:9e:73:89:db:eb:d7:27:25:03:ed:09:79:55:
         a7:53:bb:0b:ef:f4:4b:c2:36:15:82:08:d1:00:fa:2a:98:3b:
         48:c5:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org