Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a3a2f34382d3438203d3e2033383136.roa
File:                     323830313a31623a313830313a3a2f34382d3438203d3e2033383136.roa (raw, json)
Hash identifier:          xFMMc1GGT6tAchjwaKNhOsl2oyBNhxct0/Xsvuo7xfo=
Subject key identifier:   94:6C:87:4C:49:15:19:19:DF:46:19:55:44:87:F5:70:A9:3A:BE:39
Certificate issuer:       /CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
Certificate serial:       44E1573F56BBB17264D092986D0EBE9FE0E74A09
Authority key identifier: E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a3a2f34382d3438203d3e2033383136.roa
Signing time:             Mon 15 Apr 2024 19:15:00 +0000
ROA not before:           Mon 15 Apr 2024 19:10:00 +0000
ROA not after:            Mon 14 Apr 2025 19:15:00 +0000
asID:                     3816
IP address blocks:        2801:1b:1801::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e1:57:3f:56:bb:b1:72:64:d0:92:98:6d:0e:be:9f:e0:e7:4a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
        Validity
            Not Before: Apr 15 19:10:00 2024 GMT
            Not After : Apr 14 19:15:00 2025 GMT
        Subject: CN=946C874C49151919DF4619554487F570A93ABE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:7a:59:8d:40:b3:30:f5:c9:88:4f:85:77:
                    2d:ac:3c:43:29:7f:71:cb:e7:1e:60:16:fc:cb:3b:
                    b5:11:e1:23:51:83:6e:d6:13:e4:37:1e:1d:56:35:
                    45:97:e0:bb:ef:e5:c9:d6:ff:9d:c0:ca:24:4b:d3:
                    3a:55:7e:e5:41:51:c6:53:b1:10:a5:17:dc:b5:05:
                    ab:ac:d0:8e:56:28:88:45:d5:45:74:da:02:5b:e4:
                    e9:2f:5d:16:de:74:32:32:76:e2:40:35:2d:f0:d9:
                    3e:ae:29:af:20:85:2a:db:59:66:f8:e2:6c:c5:3c:
                    f3:73:7d:35:cb:1e:8a:b3:56:4f:8e:c1:d1:2d:96:
                    4b:03:b5:0a:8b:7f:f1:a9:1c:7c:f2:c7:bf:cf:cd:
                    75:37:cc:91:9d:b8:e7:e2:73:40:87:37:4b:cf:4e:
                    b5:99:63:ba:77:96:7b:bc:8c:c5:78:f0:b3:ab:0a:
                    1c:b4:73:e4:bf:1e:df:4b:fa:8b:01:59:40:07:a9:
                    55:9d:df:38:be:37:11:31:aa:96:70:b9:a1:65:66:
                    ef:db:d5:20:2e:4e:d4:b4:6a:7d:75:9b:ef:3e:c4:
                    ff:e2:0a:6a:91:e3:0c:56:83:37:2b:33:98:c4:93:
                    8d:16:c3:ee:09:06:bd:1c:7b:0a:bf:f6:8c:e2:a5:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:87:4C:49:15:19:19:DF:46:19:55:44:87:F5:70:A9:3A:BE:39
            X509v3 Authority Key Identifier:
                keyid:E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a3a2f34382d3438203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:8e:39:1a:d9:45:a5:ce:ca:5b:be:c3:df:5a:57:5f:5e:
         3b:fc:80:5a:f4:6c:6f:31:32:e3:44:66:e9:0b:b2:3a:79:38:
         51:08:b1:d2:27:4e:c0:43:28:79:06:b9:58:4c:d6:9f:f3:01:
         30:cc:58:0e:ca:c2:d9:81:a7:69:5c:8c:a3:ea:40:95:93:2a:
         bc:75:28:4e:9d:45:50:78:e0:0c:1c:c2:10:66:83:6e:98:66:
         9e:ec:99:1a:3b:75:2e:d2:f0:38:63:f3:b2:37:d8:01:bc:87:
         9e:ce:b8:2d:42:5d:eb:6b:44:12:62:ad:06:26:1b:b4:bb:90:
         0e:c9:1d:6e:75:5f:11:02:02:73:06:3e:f6:18:70:cc:2f:bb:
         3e:38:a8:4a:ce:e5:d0:15:78:e0:4f:62:11:94:5b:45:8f:f3:
         11:e9:f6:29:c2:43:54:3d:66:77:6e:e7:02:41:61:8d:e2:c1:
         75:e2:1d:a8:13:2c:51:db:e5:d3:03:a7:19:1b:1d:a6:19:53:
         8b:c6:78:21:1b:0c:b0:cf:8f:97:1c:f7:44:af:05:5d:d8:4d:
         92:54:0b:7d:10:68:30:78:65:c7:1e:82:70:d9:5b:f8:b5:10:
         34:ac:a2:ea:87:8f:28:bf:99:d5:13:a5:35:02:44:7e:04:7e:
         c8:9a:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:57:42 2024 by rpki-client on console-ams.rpki-client.org