Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e20323639373932.roa
File:                     323830313a31653a343830303a3a2f34382d3438203d3e20323639373932.roa (raw, json)
Hash identifier:          9h1Af9Y2ZFo1XnI/OfKgyM6xRJvf/hmQKrF63kehAYo=
Subject key identifier:   CA:33:B1:DB:2F:AE:C2:F0:94:C0:77:1D:E2:34:08:1E:EB:EA:EB:C1
Certificate issuer:       /CN=41231346CAA3119B16D3EBB340022A400612414D
Certificate serial:       4E84181DBEE8A7F3CD40342737AFEA5298F94F9C
Authority key identifier: 41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e20323639373932.roa
Signing time:             Tue 05 Mar 2024 17:48:13 +0000
ROA not before:           Tue 05 Mar 2024 17:43:13 +0000
ROA not after:            Tue 04 Mar 2025 17:48:13 +0000
asID:                     269792
IP address blocks:        2801:1e:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:84:18:1d:be:e8:a7:f3:cd:40:34:27:37:af:ea:52:98:f9:4f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41231346CAA3119B16D3EBB340022A400612414D
        Validity
            Not Before: Mar  5 17:43:13 2024 GMT
            Not After : Mar  4 17:48:13 2025 GMT
        Subject: CN=CA33B1DB2FAEC2F094C0771DE234081EEBEAEBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:e2:3f:7e:c9:e9:b6:8a:57:33:1e:ca:16:
                    29:53:3d:a0:d4:3e:20:a9:da:a3:f5:4a:d5:d2:4f:
                    28:0d:8c:0a:32:4c:49:4d:a7:c3:37:f4:23:fc:89:
                    04:6f:88:8c:2a:bd:14:8f:4f:34:cc:f9:48:a0:1f:
                    52:37:81:84:cd:01:bd:86:fa:b0:6a:f6:86:0d:a0:
                    86:12:fa:3c:8e:1b:aa:24:a7:86:41:3b:be:7b:09:
                    27:8a:71:96:44:5c:23:56:c3:7d:e8:2b:86:91:c3:
                    ee:88:19:15:17:74:91:d2:73:b6:4c:96:25:66:0b:
                    37:46:ae:dc:c5:35:83:0a:ce:5f:62:85:94:6d:1d:
                    23:7f:31:0a:f5:9f:25:c8:cf:82:8c:7b:0f:e2:a6:
                    68:32:f7:b0:5a:2f:e3:20:17:82:44:dc:67:59:81:
                    b4:7e:06:ac:74:22:e4:6c:24:9b:db:0a:29:8c:2a:
                    37:ee:ba:c6:16:32:f4:46:12:77:36:5a:db:01:c2:
                    89:f4:8a:51:af:5e:13:98:17:2a:ea:7c:22:b1:4f:
                    9f:23:28:4a:e2:04:cb:ae:5c:24:54:d8:af:c6:c1:
                    a0:1c:04:28:95:0e:b3:e2:85:bf:8f:b4:8c:85:65:
                    94:6a:36:4b:d6:fb:72:73:8c:13:76:25:a0:15:05:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:B1:DB:2F:AE:C2:F0:94:C0:77:1D:E2:34:08:1E:EB:EA:EB:C1
            X509v3 Authority Key Identifier:
                keyid:41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/323830313a31653a343830303a3a2f34382d3438203d3e20323639373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ec:43:f0:fd:be:30:34:bb:3f:f5:ca:3b:76:ed:c8:82:10:
         2c:4c:ba:af:33:92:d2:3e:82:40:2b:9c:24:7a:32:49:03:de:
         1d:3b:f3:81:bf:97:6c:47:74:26:86:84:a5:0d:67:12:47:7c:
         8c:24:33:8d:f2:95:52:59:b0:1b:22:85:ce:17:4b:d0:26:97:
         85:1f:6e:2e:59:a4:52:0b:a7:d3:2a:91:66:ab:46:43:b0:33:
         56:1a:3a:2a:ae:97:30:f6:ab:18:7b:d7:a2:96:c1:d1:0c:01:
         d5:ff:46:22:e3:ef:52:9b:27:4f:8a:82:5c:c4:21:e4:9c:0c:
         3e:f6:6c:87:0a:5a:e6:0b:01:66:b0:56:b5:aa:1c:22:5c:79:
         cc:31:13:90:df:e5:51:7b:67:40:b4:31:92:f8:dd:34:08:ac:
         b7:d6:41:66:85:cc:7c:7a:37:b7:97:a6:cf:9c:f7:4b:ba:1e:
         d2:7d:97:47:6b:ae:ac:04:a7:17:93:08:87:31:83:f7:24:f7:
         b1:fe:a4:d4:85:ec:72:32:72:c3:0d:81:54:79:e8:c0:7a:e3:
         bd:49:33:d3:50:08:d0:65:b7:d7:7d:55:fb:c3:58:f0:b0:e0:
         7d:2d:e6:eb:0a:91:d9:bd:3f:19:7b:0e:37:e6:74:1f:80:6a:
         dd:22:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:18:29 2024 by rpki-client on console-ams.rpki-client.org