Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34382d3438203d3e203237383735.roa
File:                     323830313a3165303a3a2f34382d3438203d3e203237383735.roa (raw, json)
Hash identifier:          0zMJj7l9c3Fy3MFK5M+QeXriunql83xvO26PnrRRf7I=
Subject key identifier:   77:DF:F9:70:A8:2B:42:64:5C:57:2F:D9:46:E4:E6:2D:BB:45:C6:C3
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       2B443145EF7BBD5F158974A10327EEBCE7AD372F
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34382d3438203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:28 +0000
ROA not before:           Tue 05 Mar 2024 17:48:28 +0000
ROA not after:            Tue 04 Mar 2025 17:53:28 +0000
asID:                     27875
IP address blocks:        2801:1e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Oct 2024 18:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:44:31:45:ef:7b:bd:5f:15:89:74:a1:03:27:ee:bc:e7:ad:37:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:28 2024 GMT
            Not After : Mar  4 17:53:28 2025 GMT
        Subject: CN=77DFF970A82B42645C572FD946E4E62DBB45C6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:43:ba:66:24:a2:5c:8f:38:c2:85:d2:b6:
                    bb:e5:f2:8d:46:43:8a:66:77:d4:04:76:e9:5a:78:
                    0e:e1:26:74:08:b9:0c:0d:95:11:20:f0:93:fd:01:
                    08:fd:49:49:dd:80:1c:d1:14:b7:94:65:3c:cf:ff:
                    95:bc:f9:3a:07:d8:90:7d:8b:1a:d7:2e:65:0b:a1:
                    57:77:79:43:ea:75:58:7c:6c:8d:b3:98:b5:2d:9c:
                    9d:a9:86:e1:ac:ea:e1:e3:b2:8b:ff:fd:56:6f:23:
                    eb:3c:1e:ec:6b:85:af:d1:89:c4:d3:3c:ca:c3:d5:
                    95:ab:da:81:56:9c:0d:7d:fe:06:83:8b:0b:12:79:
                    f2:ff:3f:ab:86:23:a8:62:6c:ec:bf:5a:bb:d4:f8:
                    e4:1c:12:21:ee:d1:e9:79:2b:9f:dc:8a:d6:14:d9:
                    76:bb:34:ac:21:93:c7:82:36:5a:04:69:30:aa:86:
                    43:9e:5f:9f:81:64:58:8f:98:62:b2:fd:6f:07:77:
                    f6:38:4e:f5:f2:94:e5:be:d7:93:2f:f3:e9:0b:f4:
                    eb:9c:6d:2e:03:de:87:2a:12:5d:9a:46:68:16:26:
                    29:dc:5d:0d:84:24:e7:b3:ec:52:2c:ab:bb:d7:5c:
                    83:cd:27:45:fa:3e:29:88:31:f3:8d:ba:85:11:56:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:F9:70:A8:2B:42:64:5C:57:2F:D9:46:E4:E6:2D:BB:45:C6:C3
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34382d3438203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:18:26:95:da:07:4f:db:92:7d:79:0f:fe:f1:e9:38:1e:c1:
         91:18:cc:bf:4d:14:a9:e3:fa:48:d2:4b:b3:31:85:3f:fb:8a:
         93:0d:be:69:ec:e4:2c:73:bb:b9:1e:e7:5a:f3:80:16:fd:03:
         49:5b:23:76:2c:7e:1f:d2:34:fb:b8:83:d7:a5:10:2a:75:f1:
         ba:c8:c7:db:9c:90:1e:fc:21:9b:f8:2a:ef:a8:dd:fe:2d:60:
         ce:43:c7:ac:c3:c5:17:2b:1e:8e:af:5f:8d:75:7f:4e:77:f0:
         11:d4:49:0b:87:23:74:6d:f8:89:3d:fa:7e:ac:3f:07:9b:e9:
         52:74:3c:54:bf:6b:8f:ff:49:3f:f4:f3:4d:1a:89:e1:a9:09:
         cc:b9:d4:f6:7b:21:a7:4d:d1:3e:09:1a:ac:55:65:34:eb:fd:
         17:0a:23:2f:2e:67:c6:ec:b7:58:28:87:71:c2:c8:bf:d4:93:
         5d:ac:2f:1c:9e:20:3a:b0:3b:f4:cf:7b:b7:b5:8e:f1:01:05:
         06:4e:2e:d0:df:a0:43:37:c4:c2:c4:49:f2:0c:dc:03:1c:39:
         95:69:03:59:03:9b:12:f7:ca:4f:ed:c3:c2:af:4c:da:e3:87:
         29:29:66:46:a0:2c:5e:ee:01:ff:2f:57:0d:ca:95:a3:00:51:
         27:ec:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 18:21:40 2024 by rpki-client on console-fra.rpki-client.org