Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34372d3437203d3e203237383735.roa
File:                     323830313a3165303a3a2f34372d3437203d3e203237383735.roa (raw, json)
Hash identifier:          Q4RaxQF9DjHHZ8Rh1L0KsL7elFEW8HySBSNs7Eq6ZTc=
Subject key identifier:   AF:03:63:EF:0A:50:C2:48:63:0C:0F:E6:6F:95:D8:31:DA:3E:1E:67
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       3E17E4C5A6075D6C2B698F68D3529D3F5A0DDE49
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34372d3437203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:27 +0000
ROA not before:           Tue 05 Mar 2024 17:48:27 +0000
ROA not after:            Tue 04 Mar 2025 17:53:27 +0000
asID:                     27875
IP address blocks:        2801:1e0::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:17:e4:c5:a6:07:5d:6c:2b:69:8f:68:d3:52:9d:3f:5a:0d:de:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:27 2024 GMT
            Not After : Mar  4 17:53:27 2025 GMT
        Subject: CN=AF0363EF0A50C248630C0FE66F95D831DA3E1E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:21:67:c0:fa:dd:65:18:7d:01:2f:e1:79:
                    b4:ed:30:89:d2:fb:4b:a2:13:9a:34:d8:78:af:86:
                    bd:90:e6:ba:8f:4f:f4:08:05:e4:52:45:df:52:28:
                    cb:5c:23:6c:da:12:b1:ab:c3:4b:37:18:97:06:d2:
                    b9:2b:a3:9b:25:ad:91:d9:45:d0:32:68:aa:ec:43:
                    a6:78:da:b1:25:1f:53:c9:29:7f:b9:ce:a9:78:6c:
                    cb:ea:e8:25:a9:53:09:a1:2e:ea:3f:4d:5c:0d:c8:
                    43:0a:89:ba:33:b7:29:18:0f:32:37:22:43:fd:89:
                    db:3d:54:32:5e:e1:63:74:0e:bf:ee:3e:4f:7f:95:
                    63:5d:12:48:87:46:7a:09:3f:de:2f:8d:64:78:51:
                    e5:4d:6c:a7:7b:ad:53:af:82:21:51:92:6e:d2:c1:
                    0c:f2:5d:d1:25:7f:09:f9:b9:e4:6c:26:5a:62:73:
                    89:eb:97:0f:17:74:f2:11:b5:2d:d9:30:2d:6f:51:
                    ec:1c:d6:b5:62:ae:84:dd:24:8a:bc:34:3a:1a:6e:
                    d5:7e:95:f6:eb:fc:b2:55:0c:a3:64:74:48:be:ba:
                    07:53:53:ab:14:91:29:bc:07:23:03:39:d8:99:eb:
                    61:7e:0b:b5:47:fc:e9:2f:2f:96:14:93:ae:55:51:
                    d8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:63:EF:0A:50:C2:48:63:0C:0F:E6:6F:95:D8:31:DA:3E:1E:67
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34372d3437203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/47

    Signature Algorithm: sha256WithRSAEncryption
         2e:32:a8:9c:cf:ef:1a:4b:f5:a6:cd:d9:a3:4a:6e:47:06:4f:
         1b:61:02:9c:b3:9a:73:e1:94:e3:d2:06:e0:46:7e:b1:a9:27:
         0d:f8:d3:b0:13:5c:2d:7a:30:3b:fd:09:c5:88:16:53:38:94:
         58:ac:d1:ea:79:83:4f:d5:7f:38:01:ea:17:c5:ef:36:4f:6f:
         72:68:96:84:01:1d:2c:1e:fd:c5:16:9a:81:f5:63:fc:d3:60:
         86:37:d4:e7:3e:af:dd:28:90:48:b6:36:9b:9b:21:bd:d6:fb:
         65:45:60:3e:ff:46:74:61:5a:ac:4f:31:fd:a3:39:48:26:f9:
         25:4e:ed:cb:b7:5f:6e:58:a0:63:d5:8b:c1:42:e5:d5:c2:fb:
         4c:6f:bd:0b:9b:9d:c3:4d:0d:d8:f7:29:74:a8:65:18:8a:e9:
         da:28:51:77:86:d4:79:4a:cd:7c:fc:77:68:f9:d9:82:eb:64:
         4b:74:9c:d6:f0:b1:a7:31:81:38:be:4e:db:fb:90:ae:7d:5c:
         75:c0:3f:1d:3b:d5:24:f8:20:16:74:a4:c1:39:16:04:af:64:
         bd:56:0c:c8:af:3f:b4:c9:c4:d3:23:e2:5f:1e:43:02:9a:ac:
         72:61:d2:4b:52:ae:d3:71:df:6f:12:15:ef:bf:53:68:78:f3:
         87:38:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:31 2024 by rpki-client on console-ams.rpki-client.org