Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34362d3436203d3e203237383735.roa
File:                     323830313a3165303a3a2f34362d3436203d3e203237383735.roa (raw, json)
Hash identifier:          0+3wYJJFr9aj+nGf0IDwhKS5pJ9f8qkt6Kg/zrjwErI=
Subject key identifier:   D8:88:21:80:DC:4E:6B:0C:2E:02:20:4D:5D:E9:9D:D0:D1:2D:A1:1B
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       2A641EEE93B8CD345CF9BB9EA2F0D9633F32FEA7
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34362d3436203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:25 +0000
ROA not before:           Tue 05 Mar 2024 17:48:25 +0000
ROA not after:            Tue 04 Mar 2025 17:53:25 +0000
asID:                     27875
IP address blocks:        2801:1e0::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:64:1e:ee:93:b8:cd:34:5c:f9:bb:9e:a2:f0:d9:63:3f:32:fe:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:25 2024 GMT
            Not After : Mar  4 17:53:25 2025 GMT
        Subject: CN=D8882180DC4E6B0C2E02204D5DE99DD0D12DA11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:47:4a:b1:4e:a8:51:c3:ef:d4:4d:a4:2f:
                    6a:d7:66:fb:b4:a0:a0:86:c2:7a:c1:5a:3c:18:0e:
                    29:30:eb:3e:2c:20:ca:b7:73:05:68:a9:b1:94:7c:
                    fb:40:dc:dd:78:5d:ff:ca:f3:c6:2d:71:2d:96:37:
                    81:e7:53:69:2a:d0:3c:0e:f6:4c:a8:81:8f:6d:54:
                    69:ee:76:2c:d4:8a:ad:d9:b1:e7:40:89:d1:00:72:
                    8f:04:fa:b6:a8:ab:14:44:be:7d:f7:8d:ec:41:89:
                    bb:6f:7f:89:6f:cc:30:f5:32:78:1b:87:5e:d2:92:
                    6a:38:86:1d:5a:76:95:7b:dd:28:c1:06:10:e9:1f:
                    12:91:d8:4a:d3:2f:b8:fb:10:9a:10:09:0c:c0:e7:
                    b8:3d:b4:5d:ff:1e:88:d4:56:b0:25:49:82:c5:3d:
                    93:4a:8e:19:72:7a:5d:d6:6e:3a:db:21:65:22:10:
                    48:74:eb:95:c2:98:7f:72:81:ab:23:88:59:13:a9:
                    11:a6:32:1b:93:53:93:6c:30:b9:8c:ba:bb:1c:cd:
                    17:3f:73:86:d1:77:c0:75:34:df:61:16:a3:e8:22:
                    e0:cb:51:09:aa:06:09:0f:0d:8e:bf:8c:a0:b7:64:
                    b2:54:4e:c1:a8:1a:bc:bb:32:5f:97:82:da:0b:69:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:21:80:DC:4E:6B:0C:2E:02:20:4D:5D:E9:9D:D0:D1:2D:A1:1B
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34362d3436203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/46

    Signature Algorithm: sha256WithRSAEncryption
         a2:57:35:db:1d:50:48:bd:8d:81:10:d7:51:08:0d:bb:36:a5:
         ff:f1:6c:dc:38:d3:d7:b1:5c:7c:96:d1:13:0a:73:61:25:4c:
         9c:2a:fc:0c:a5:dc:16:ea:0e:af:ec:83:35:49:6f:4c:f7:ac:
         5e:2f:bc:a8:4d:4d:92:10:25:46:1c:92:83:57:f0:fc:54:10:
         9d:ef:a6:84:14:27:aa:9f:b6:1b:63:3c:aa:ee:50:3e:c1:cd:
         ea:13:17:0c:bb:3a:a5:8c:34:97:76:a7:5b:14:06:44:64:64:
         2b:af:c4:40:09:1f:61:95:e2:43:78:60:5c:8d:2a:86:ca:ed:
         83:65:5c:81:3d:2c:97:1f:cd:16:c4:ff:ac:cc:02:96:b6:f7:
         d3:4a:e0:8e:8d:79:60:b6:0e:fd:e1:2d:ca:b5:84:99:10:02:
         9d:ef:34:c7:3b:60:77:d9:e0:4a:40:1f:d1:6c:32:07:57:93:
         6e:b3:db:0a:8a:93:bc:f1:06:08:9c:74:da:3a:59:fd:de:53:
         b2:a5:08:71:a8:d6:90:5f:36:ba:ba:dd:43:76:41:c4:77:ac:
         b4:4a:e8:f6:c8:fb:79:c4:f4:39:ac:03:45:f9:4a:6d:72:3d:
         60:1a:d3:24:d1:12:a3:66:c5:26:c1:9c:e4:17:55:50:5e:ef:
         70:d9:1f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 18:06:02 2024 by rpki-client on console-fra.rpki-client.org