Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/323830313a3133653a3a2f34302d3438203d3e203139343239.roa
File:                     323830313a3133653a3a2f34302d3438203d3e203139343239.roa (raw, json)
Hash identifier:          TSqRov+0uceE0yWtXTuP7AqSmdsbNQOmLEaFGn35HVU=
Subject key identifier:   D7:94:AC:2D:04:6B:73:6F:FB:C0:2C:57:C5:48:06:31:AB:C6:B4:55
Certificate issuer:       /CN=A681D3B317407E5E02EB58D80486F39054119D60
Certificate serial:       06E0D610B69FCD2B4B74342F113B7DB7188A5921
Authority key identifier: A6:81:D3:B3:17:40:7E:5E:02:EB:58:D8:04:86:F3:90:54:11:9D:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A681D3B317407E5E02EB58D80486F39054119D60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/323830313a3133653a3a2f34302d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:46:07 +0000
ROA not before:           Tue 05 Mar 2024 17:41:07 +0000
ROA not after:            Tue 04 Mar 2025 17:46:07 +0000
asID:                     19429
IP address blocks:        2801:13e::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/A681D3B317407E5E02EB58D80486F39054119D60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/A681D3B317407E5E02EB58D80486F39054119D60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A681D3B317407E5E02EB58D80486F39054119D60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 09:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e0:d6:10:b6:9f:cd:2b:4b:74:34:2f:11:3b:7d:b7:18:8a:59:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A681D3B317407E5E02EB58D80486F39054119D60
        Validity
            Not Before: Mar  5 17:41:07 2024 GMT
            Not After : Mar  4 17:46:07 2025 GMT
        Subject: CN=D794AC2D046B736FFBC02C57C5480631ABC6B455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:fe:0c:98:25:92:b3:bd:cf:74:b7:fa:5b:
                    3d:18:55:3f:f2:8a:a0:b4:59:db:91:26:26:b0:f1:
                    8c:af:47:ee:42:b7:fd:5b:5a:2c:35:0a:43:1b:73:
                    26:de:85:62:78:e8:b8:38:8f:0d:02:ce:cb:88:5b:
                    f6:05:26:bb:62:6c:67:e3:da:37:5c:88:82:6d:30:
                    81:38:d7:f4:c2:ad:fc:5f:90:e7:43:1c:3b:45:39:
                    b1:0f:49:9c:7e:16:e2:05:38:af:c6:3c:c9:b6:10:
                    68:9b:70:54:57:35:90:28:85:50:74:eb:a7:37:d3:
                    ee:06:53:76:59:c7:92:36:51:60:5e:e1:dc:22:16:
                    2b:c1:dd:73:3c:d2:d0:09:44:01:94:07:15:f7:f3:
                    cb:d9:1c:29:78:a7:74:bc:d8:e6:42:a0:e2:1e:e2:
                    85:9e:dd:e5:ff:ba:7d:25:a5:57:b6:b7:49:63:cc:
                    b3:d8:91:64:76:e1:d7:83:4e:c4:f3:d9:a2:cd:2c:
                    9f:83:6b:cf:66:90:60:76:82:b7:31:f2:1f:bc:b5:
                    e6:dd:9b:dd:59:b5:9a:af:29:8f:9c:30:70:c7:94:
                    8a:f3:c3:a6:df:95:de:5a:f1:17:96:89:ca:a1:ee:
                    d1:0f:5d:96:eb:eb:f5:21:f6:6b:71:db:cd:7e:65:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:94:AC:2D:04:6B:73:6F:FB:C0:2C:57:C5:48:06:31:AB:C6:B4:55
            X509v3 Authority Key Identifier:
                keyid:A6:81:D3:B3:17:40:7E:5E:02:EB:58:D8:04:86:F3:90:54:11:9D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/A681D3B317407E5E02EB58D80486F39054119D60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A681D3B317407E5E02EB58D80486F39054119D60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/323830313a3133653a3a2f34302d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13e::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:65:7c:2e:fd:46:15:35:bd:db:ed:4e:3d:f5:05:fa:68:e0:
         8b:a4:b9:92:00:cb:e2:f5:cc:79:c0:6e:b3:c7:15:d7:bb:fd:
         4c:93:3a:7a:0a:92:a2:94:c6:7c:bb:81:e0:5d:b6:77:89:c3:
         ff:ed:72:60:5a:f6:eb:bc:78:d8:dc:0c:32:23:1e:15:7c:ae:
         94:9a:e2:fa:0d:29:df:6c:68:65:64:3e:3d:ec:c1:65:fa:f6:
         e4:9e:74:7d:57:16:07:d1:41:53:6d:1c:83:66:00:a7:3c:14:
         11:eb:c7:86:e7:54:11:50:36:8b:80:15:a6:c4:ca:1c:b1:bb:
         88:49:22:be:ba:7e:fa:b5:5f:f2:81:bd:e2:88:33:24:03:e5:
         af:38:cb:57:a5:45:1f:dc:6d:0e:1f:42:af:ab:ec:c9:78:89:
         f3:33:9d:50:0a:f4:f3:8d:62:7f:de:3c:fa:35:b0:0c:ec:db:
         55:2c:b9:5a:f9:f3:85:f8:d8:24:72:02:66:2e:2e:bc:13:ad:
         e5:fd:a3:cf:78:9f:6d:e7:a6:b9:41:61:b3:ec:f6:6d:1c:99:
         70:da:a4:f4:fd:6e:c8:db:88:6d:20:ee:14:1b:5a:db:3a:dc:
         f4:91:64:cf:d0:ee:18:08:3d:65:1f:08:18:7b:97:38:72:f9:
         8e:3e:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:05:34 2024 by rpki-client on console-fra.rpki-client.org