Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961373a333030303a3a2f33362d3434203d3e203134353232.roa
File:                     323830303a3961373a333030303a3a2f33362d3434203d3e203134353232.roa (raw, json)
Hash identifier:          p3ddQMeDjoPUFQkJ+P0SDIaIpPTFgxtxfZk+Iqj9tME=
Subject key identifier:   73:30:6F:4A:46:6E:68:01:7D:96:72:EC:2D:D5:DB:11:B4:91:CF:54
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       779A3B01461E8664B61470B52AAE1830965528B0
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961373a333030303a3a2f33362d3434203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:55 +0000
ROA not before:           Tue 05 Mar 2024 18:15:55 +0000
ROA not after:            Tue 04 Mar 2025 18:20:55 +0000
asID:                     14522
IP address blocks:        2800:9a7:3000::/36 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9a:3b:01:46:1e:86:64:b6:14:70:b5:2a:ae:18:30:96:55:28:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:55 2024 GMT
            Not After : Mar  4 18:20:55 2025 GMT
        Subject: CN=73306F4A466E68017D9672EC2DD5DB11B491CF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:f0:80:ca:17:67:19:bd:90:81:95:7e:8b:
                    07:9f:f4:14:5d:3a:a9:11:b3:69:e3:40:29:cf:16:
                    ae:ac:88:d7:09:61:fd:67:93:a7:2f:00:30:f7:40:
                    58:77:c9:7c:41:27:d2:03:20:0d:c8:79:38:16:ec:
                    60:58:a9:49:d8:f4:57:14:af:76:e1:a6:ef:db:a2:
                    fd:69:5a:15:a4:0b:fe:60:0e:4b:14:4a:aa:d1:66:
                    a7:72:87:fe:88:64:1e:8d:b3:5e:d0:cc:4e:46:28:
                    45:5f:81:c1:08:e9:eb:14:6a:72:a1:c5:06:3b:a5:
                    a7:94:82:63:72:fb:d2:7e:34:fc:11:35:96:40:2f:
                    54:ad:f1:a6:ed:75:6a:fc:de:32:c5:3d:03:b6:76:
                    1b:74:60:67:0f:d5:42:49:da:f3:89:dc:85:0f:25:
                    5b:b2:18:9c:ef:e8:29:7f:c2:80:bb:1d:00:75:4a:
                    20:6f:ac:7c:d1:66:04:33:9f:8e:07:30:9d:f9:1b:
                    a0:6f:c1:b0:a5:d6:65:69:59:e3:63:f1:fc:5e:02:
                    9a:c4:b9:28:49:70:e4:b5:4d:ce:dd:c9:3d:33:fc:
                    5d:cd:f7:76:4a:b0:26:26:ee:6b:0a:c0:0a:47:7c:
                    e1:5e:d2:74:c9:d7:f5:0c:88:c3:c5:53:60:37:3e:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:6F:4A:46:6E:68:01:7D:96:72:EC:2D:D5:DB:11:B4:91:CF:54
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961373a333030303a3a2f33362d3434203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a7:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d1:00:47:f4:66:9e:34:c4:18:89:f0:d1:b4:e4:d0:bb:d9:3b:
         0e:1f:2f:66:d5:1d:90:dc:7c:6a:62:73:cf:88:e1:0d:ba:e9:
         b9:c4:9a:cd:ae:f0:d2:40:0b:88:6e:0a:fc:f7:fe:a1:29:14:
         8f:3c:e2:e7:cd:be:c8:57:00:08:d1:42:cf:ba:77:22:05:8e:
         69:50:97:b8:07:6a:3e:0a:f8:83:75:fb:4a:16:f8:8f:c3:7e:
         f6:f3:29:2a:b5:b5:84:4a:87:a5:bd:47:f7:b6:72:41:97:01:
         a0:0b:63:43:cf:77:70:a0:2e:db:dc:e8:43:e0:6f:5c:50:66:
         6f:86:96:f8:6f:52:41:9e:55:51:58:04:5c:0b:67:0b:b4:4f:
         fd:f8:48:7b:99:9c:e7:24:8a:a5:00:50:4f:75:a6:96:e3:52:
         00:b7:a2:06:01:10:2c:01:37:20:8d:b9:ac:da:74:97:05:05:
         43:18:66:f0:a9:6c:8c:ef:7f:48:8a:c9:6d:5b:1b:9a:9b:b0:
         1d:0d:5e:51:d4:b3:31:02:76:b8:5b:2a:e4:d3:cf:fa:eb:32:
         36:4e:11:4d:ad:47:f5:94:dd:cc:18:7c:a9:ea:46:dc:b7:64:
         32:99:a1:0c:01:7b:38:ee:bf:64:2e:42:59:0d:6f:5e:0e:75:
         52:e5:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org