Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34352d3435203d3e203237383735.roa
File:                     323830313a3165303a3a2f34352d3435203d3e203237383735.roa (raw, json)
Hash identifier:          DZ3L8Sj/SVyCQsY0fPVhfer1t+D4FjVwfEEyI2Jitik=
Subject key identifier:   00:1F:C9:6A:5D:04:AE:D0:B8:E9:D8:95:25:EA:86:DF:B7:0B:1C:AF
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       7619B3E44F772BED72EFC5A11667B9F2767FE838
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34352d3435203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:26 +0000
ROA not before:           Tue 05 Mar 2024 17:48:26 +0000
ROA not after:            Tue 04 Mar 2025 17:53:26 +0000
asID:                     27875
IP address blocks:        2801:1e0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:19:b3:e4:4f:77:2b:ed:72:ef:c5:a1:16:67:b9:f2:76:7f:e8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:26 2024 GMT
            Not After : Mar  4 17:53:26 2025 GMT
        Subject: CN=001FC96A5D04AED0B8E9D89525EA86DFB70B1CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:dd:17:4a:15:d8:6a:d3:02:6c:43:c6:61:
                    28:78:c6:12:93:f9:f7:0a:43:d4:db:9d:63:cd:a3:
                    69:fc:0e:46:83:6f:8b:dd:df:cc:d0:26:8a:c2:79:
                    88:4d:d8:5a:93:a0:2e:13:61:ef:a1:b6:fc:01:37:
                    e6:27:2a:1a:7c:42:3d:eb:6d:0e:3a:f2:06:1a:56:
                    eb:03:35:4c:34:3a:0a:ee:e9:2a:8e:91:08:1b:23:
                    e3:67:38:cd:c9:03:88:0a:eb:b7:c7:b2:b4:d7:17:
                    93:0d:cd:2a:8d:2f:33:37:4a:64:d3:9c:97:36:c6:
                    55:d1:2e:8a:07:5e:2b:bc:c5:dd:b3:5f:a8:09:90:
                    d0:b6:fc:51:c0:89:b8:c9:c6:b1:0f:53:0a:5a:02:
                    a6:57:78:c8:3a:d1:7a:e2:77:c8:df:2c:1b:99:13:
                    51:ff:d6:9b:f6:e5:37:97:fe:20:5e:cc:b6:cc:ff:
                    a7:43:62:e4:fb:73:bb:7a:97:2f:0b:73:d6:0a:10:
                    da:05:4d:d9:51:72:75:ce:91:70:cd:14:44:0b:47:
                    66:5e:6f:2c:6d:39:9c:e5:d5:d5:b7:ae:ed:c3:95:
                    09:cb:de:2f:f1:cd:dd:81:7e:f7:09:50:7d:92:8d:
                    87:36:fe:da:de:e2:4a:05:b6:3f:d5:5a:e3:6f:c8:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1F:C9:6A:5D:04:AE:D0:B8:E9:D8:95:25:EA:86:DF:B7:0B:1C:AF
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34352d3435203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/45

    Signature Algorithm: sha256WithRSAEncryption
         4f:92:c1:e2:88:58:bc:93:a4:ff:a1:8a:ee:1b:65:79:d5:e4:
         71:0c:12:ae:78:94:f2:eb:ba:4f:bf:35:5f:1f:60:8e:e2:ed:
         eb:a5:76:71:fc:a3:d0:c3:48:1b:22:90:75:48:9d:1d:e4:13:
         67:cf:9f:11:58:9e:11:48:a2:20:33:cb:1c:ea:fd:7e:0c:e7:
         88:63:f1:90:94:e3:1c:96:1e:72:d5:3f:e5:8b:a9:97:26:3f:
         a4:72:23:a2:b2:47:ae:dd:ee:59:12:f8:09:d6:a8:26:85:6d:
         93:06:72:f0:e8:a3:13:24:64:9b:dd:48:1e:89:ee:c4:57:88:
         47:fa:a8:b5:2e:46:db:d0:a6:1b:50:ce:27:a2:40:77:18:98:
         39:5c:18:35:be:09:f1:14:19:a2:c9:c2:7d:c9:a1:18:6a:10:
         f9:5b:ef:64:94:05:03:71:ab:fd:99:4c:94:7c:f4:14:45:77:
         33:4a:7c:8c:e4:ef:f8:9c:11:95:57:f3:20:75:5b:13:fb:b4:
         ab:05:d4:9c:c2:75:ba:51:56:8b:fa:dc:9c:1e:63:38:4a:e1:
         23:1d:8b:30:e5:d1:90:7b:7e:13:e8:c2:49:70:15:d7:85:4a:
         31:07:86:2a:de:42:35:9e:20:32:c8:ad:5e:75:52:7e:1b:e3:
         7c:d7:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 16:11:13 2024 by rpki-client on console-ams.rpki-client.org