Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a363030303a3a2f34302d3430203d3e203134353232.roa
File:                     323830303a3961333a363030303a3a2f34302d3430203d3e203134353232.roa (raw, json)
Hash identifier:          MBhTElXhF2P+Lvabjkb4uLaCWUrmH8PTO/G2nSDE5aQ=
Subject key identifier:   68:81:B3:E9:AB:3D:03:A7:62:D0:A8:E6:0E:C3:B3:88:40:AD:0E:9F
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       1B9D76025B40444D4570AE5F7125C17A48662B3A
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a363030303a3a2f34302d3430203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:54 +0000
ROA not before:           Tue 05 Mar 2024 18:15:54 +0000
ROA not after:            Tue 04 Mar 2025 18:20:54 +0000
asID:                     14522
IP address blocks:        2800:9a3:6000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9d:76:02:5b:40:44:4d:45:70:ae:5f:71:25:c1:7a:48:66:2b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:54 2024 GMT
            Not After : Mar  4 18:20:54 2025 GMT
        Subject: CN=6881B3E9AB3D03A762D0A8E60EC3B38840AD0E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d9:8b:8c:e3:ce:2a:fb:31:46:71:8a:af:3e:
                    c4:e3:6e:0c:70:1c:48:27:a6:aa:3a:cc:c0:37:ec:
                    72:d2:25:49:8a:1b:87:0d:fc:be:e9:22:95:45:25:
                    54:8c:d1:6a:f7:99:e2:9d:97:47:26:50:53:a8:49:
                    b1:d3:99:7e:fd:79:0a:40:a1:38:84:ab:25:5c:c2:
                    07:63:6a:09:44:83:1f:00:f6:06:86:00:99:84:3b:
                    6b:5b:5a:14:39:c9:b8:b5:ec:ad:89:18:40:dd:38:
                    39:ff:d4:ef:69:48:0d:f7:80:4d:a4:11:09:34:3c:
                    42:fa:53:49:a3:a4:1f:0a:5a:b0:43:2e:b2:64:bf:
                    00:cc:60:93:47:17:cd:16:69:35:c9:d1:8e:5c:5a:
                    12:a8:d3:60:a7:2b:d8:c7:e2:c9:ea:73:56:ed:d8:
                    7f:39:c0:ed:23:c8:7d:63:3b:3b:56:a2:aa:b7:54:
                    f8:3f:61:c1:29:f0:b3:2f:18:ad:5c:1d:ed:49:56:
                    22:0c:8a:a2:73:dc:a5:8a:f1:0b:1e:8b:fa:76:a1:
                    e5:b7:a9:ea:17:bf:93:99:81:51:6d:e1:8f:23:ff:
                    32:03:ef:31:4c:84:9f:f6:e9:ff:94:26:67:03:28:
                    a0:70:91:77:72:65:c7:2f:25:9d:40:bb:44:aa:65:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:81:B3:E9:AB:3D:03:A7:62:D0:A8:E6:0E:C3:B3:88:40:AD:0E:9F
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a363030303a3a2f34302d3430203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a3:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:c5:75:d6:f9:3a:94:7a:fb:8d:9e:80:0b:cc:e0:ec:e2:31:
         5d:28:69:d2:9e:67:8d:56:a8:69:fa:7d:a7:cd:92:22:fe:7b:
         9d:42:64:f3:ec:20:5b:32:81:1c:d6:44:01:ca:ca:9b:5b:c3:
         cf:06:6b:6e:8c:1f:7f:66:4f:b6:58:f8:25:ed:15:f4:bc:c6:
         f8:90:ed:ca:7c:25:4f:80:7b:85:b6:8b:60:8e:ab:ee:d4:e5:
         87:e1:48:65:e0:90:a9:67:e3:d7:82:3c:96:c9:84:46:36:88:
         bb:47:17:98:1b:60:9b:e7:9e:c9:59:6b:2b:e8:0d:3b:7e:da:
         1e:8d:52:9a:75:06:61:bd:06:e9:58:53:83:98:3f:96:cd:ae:
         ff:c7:e0:cf:2b:3b:e5:c4:6c:ad:8e:97:46:21:77:c7:19:c6:
         23:de:5b:f1:41:5f:18:06:57:a9:be:9e:7b:45:57:28:d1:32:
         47:48:45:48:97:82:85:ba:05:15:f7:b5:61:cc:b6:f1:a1:30:
         67:9a:d5:2d:ab:1e:1c:5e:ea:de:dd:bd:2b:91:c6:de:fa:e8:
         f1:7e:0d:8c:60:5f:4c:6c:08:92:5d:5b:96:96:da:cf:f9:7f:
         8d:a5:31:9c:71:4b:65:09:51:2a:c7:a5:6f:96:ad:11:b5:a2:
         ac:f1:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org