Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a353030303a3a2f34302d3430203d3e203134353232.roa
File:                     323830303a3961333a353030303a3a2f34302d3430203d3e203134353232.roa (raw, json)
Hash identifier:          Da8+NFcf+hyOWGOlEY3RJNouOohtV44BAMFYNs7BWqE=
Subject key identifier:   83:BF:F1:84:AF:85:61:26:C6:D8:80:54:B8:3B:05:55:57:40:3E:BB
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       563E47AD396A61AE40021905C24ACED4DC6840FA
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a353030303a3a2f34302d3430203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:51 +0000
ROA not before:           Tue 05 Mar 2024 18:15:51 +0000
ROA not after:            Tue 04 Mar 2025 18:20:51 +0000
asID:                     14522
IP address blocks:        2800:9a3:5000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3e:47:ad:39:6a:61:ae:40:02:19:05:c2:4a:ce:d4:dc:68:40:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:51 2024 GMT
            Not After : Mar  4 18:20:51 2025 GMT
        Subject: CN=83BFF184AF856126C6D88054B83B055557403EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:ad:40:fe:fc:14:d2:8c:d7:59:e3:b0:80:
                    61:05:7e:4a:7a:46:1b:b7:21:c7:04:7c:0f:7b:b0:
                    60:49:b9:c0:22:22:fc:ac:54:8f:b0:2b:60:f6:b0:
                    f5:5c:ea:02:66:f8:66:bd:97:d5:f4:11:38:83:21:
                    29:80:c1:7e:85:c6:cf:d3:7a:5e:af:a8:58:a9:20:
                    6e:62:de:9a:b1:95:14:35:93:15:9f:b4:52:cf:a6:
                    11:4a:3d:90:25:fc:24:39:c1:6b:84:54:03:b7:67:
                    0d:42:62:9d:c2:35:73:84:70:e2:b5:23:b8:0b:9e:
                    4b:fc:cd:05:d1:89:21:a7:ef:54:92:9a:9c:56:7b:
                    d2:23:fa:87:c3:6f:38:bd:61:ca:63:b0:9d:9b:39:
                    2c:98:8e:9f:51:53:01:99:0e:39:16:5e:a7:b0:83:
                    ef:3b:9e:cd:5e:bc:29:30:81:0c:9b:08:5c:f8:0d:
                    3d:a4:91:50:5a:e6:cb:8a:74:a3:75:08:54:6e:59:
                    d6:d5:3e:25:c7:6e:cd:14:f8:68:01:52:46:4e:dc:
                    55:99:11:7a:cd:04:dc:73:23:0f:8f:82:ec:5c:18:
                    f1:55:49:37:4a:ba:ec:68:c2:41:5f:98:95:9c:2a:
                    33:ee:5f:61:4e:5b:b6:dd:97:8f:d0:d9:2e:a4:a0:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BF:F1:84:AF:85:61:26:C6:D8:80:54:B8:3B:05:55:57:40:3E:BB
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a353030303a3a2f34302d3430203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a3:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:35:06:c2:bf:fb:16:68:db:81:e7:77:fe:2e:bb:8d:b9:0b:
         c8:12:35:14:cd:85:21:ed:cd:7b:b2:8f:37:12:8e:0e:38:91:
         76:50:62:fa:bf:42:23:01:72:69:35:3f:62:9d:0a:aa:de:83:
         5e:4a:56:ef:2c:5f:6f:19:e7:75:07:96:53:f6:c1:97:90:87:
         79:e0:51:0f:15:1a:0d:b0:3a:49:ef:f7:20:1f:07:ba:27:9f:
         24:66:2d:d5:12:b4:f7:f5:fb:fa:e0:bb:92:ad:72:54:65:b7:
         0c:3c:2f:a0:7e:70:78:7b:b0:51:f5:dc:35:2c:df:f0:89:f1:
         db:58:0d:b8:f0:56:67:c8:98:5a:22:e6:c7:5e:48:b2:ad:c4:
         0f:55:d9:cd:5e:fc:af:4e:f6:44:09:a8:a9:7a:08:bc:a4:8b:
         f8:6f:5c:6f:62:e2:f3:c5:65:b1:1a:52:e2:20:6c:55:39:f7:
         9d:cc:28:ad:2e:57:b5:4d:ed:08:27:dc:f8:8e:52:2f:a7:3c:
         b5:e2:d8:06:a4:e5:4f:ca:d9:0d:72:4a:f5:d6:00:21:df:8e:
         5a:e2:5c:40:64:29:6b:32:e2:b8:2e:02:86:45:78:df:7f:13:
         5b:a1:b2:7d:b3:58:94:20:cb:44:bd:a9:24:6c:08:23:33:4a:
         0c:07:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org