Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a3a2f33322d3332203d3e203137313437.roa
File:                     323830313a323a3a2f33322d3332203d3e203137313437.roa (raw, json)
Hash identifier:          kSK/41zWVoGpmBI3QiQXkjn7l5J6LNw+S3gvJMyCGCY=
Subject key identifier:   69:E6:52:71:B2:9E:36:20:F0:1F:87:D5:E0:FC:33:95:F5:80:DB:66
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       7E0675B13A7295B753FED50356C95445972CCF9B
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a3a2f33322d3332203d3e203137313437.roa
Signing time:             Tue 05 Mar 2024 17:49:09 +0000
ROA not before:           Tue 05 Mar 2024 17:44:09 +0000
ROA not after:            Tue 04 Mar 2025 17:49:09 +0000
asID:                     17147
IP address blocks:        2801:2::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:06:75:b1:3a:72:95:b7:53:fe:d5:03:56:c9:54:45:97:2c:cf:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Mar  5 17:44:09 2024 GMT
            Not After : Mar  4 17:49:09 2025 GMT
        Subject: CN=69E65271B29E3620F01F87D5E0FC3395F580DB66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:58:34:c6:30:27:cf:08:fe:f3:b6:64:7b:
                    d0:fa:6f:e7:89:9e:e7:88:a7:fb:a4:74:c2:9c:98:
                    de:de:0b:02:45:c2:db:13:17:c8:79:be:b7:79:9b:
                    c4:04:a7:3f:b2:b7:fa:af:78:9c:a1:41:40:f9:80:
                    71:29:47:a7:71:a6:f6:27:2c:ab:4d:63:fb:38:fd:
                    e6:c9:d7:2d:b5:c9:09:86:10:4d:8d:91:5f:37:02:
                    2b:c1:17:d2:15:58:7e:bf:af:04:06:51:c9:11:f1:
                    56:96:df:8a:b9:a3:e3:76:d7:ce:d1:e6:54:4b:6f:
                    2c:26:52:a5:fd:59:ae:4e:f2:12:1e:16:85:6b:19:
                    c9:ae:99:d1:f2:83:f8:55:de:de:e1:a5:99:ed:51:
                    55:34:c5:ba:64:ac:6a:64:cf:d7:38:75:2e:b0:2a:
                    b9:13:34:47:a1:26:5a:ec:df:02:dd:5d:f7:87:e1:
                    c4:0e:05:35:46:d8:ac:72:91:89:7f:28:d2:fd:28:
                    df:f8:89:0f:1e:cf:8b:57:4e:8a:4b:12:73:9d:85:
                    2d:67:d8:3e:6d:dc:c5:84:af:18:ce:6a:df:2a:d4:
                    20:39:8d:b4:9e:c7:b7:5f:ad:cc:46:f3:5c:11:cf:
                    44:fa:55:a7:b1:1a:51:8e:c0:ef:97:48:02:ab:28:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E6:52:71:B2:9E:36:20:F0:1F:87:D5:E0:FC:33:95:F5:80:DB:66
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a3a2f33322d3332203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:2::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:10:21:58:0f:3a:ba:e3:7b:67:a5:ec:a6:32:6f:8b:62:b3:
         f4:49:04:f7:56:98:c8:c9:30:b2:4f:5c:6e:11:ab:5b:1f:11:
         86:f2:cf:e5:b1:b5:da:68:6e:e5:1a:24:fe:55:f2:6e:31:41:
         1d:ee:98:af:59:39:eb:04:aa:80:2d:07:ef:9a:95:6e:ed:bc:
         38:05:58:36:4e:50:8b:0a:9a:96:d4:69:ce:ec:9d:ff:f1:17:
         af:5c:d2:28:02:ee:9a:51:90:c4:c6:9a:aa:3b:a3:63:22:87:
         cf:ca:fa:7d:cf:91:c4:b4:5f:3d:c0:30:05:1d:4d:0e:09:59:
         c3:f6:43:75:01:ae:8e:f6:2e:e9:75:0b:f3:1a:cb:af:a0:73:
         80:9b:be:af:f7:14:f6:19:3a:aa:db:40:e6:7e:ea:30:b9:ac:
         f8:a6:be:89:25:33:96:3a:0b:1f:b5:b9:b2:2a:e4:70:cc:2a:
         fe:1f:0e:7c:87:e0:7e:83:56:42:69:5a:e9:01:8f:fb:39:60:
         ac:b6:53:c9:67:69:32:8a:0d:79:89:5d:9b:04:9c:e8:97:d6:
         01:43:1b:a3:c2:34:e9:f5:6b:c1:0a:65:1d:ff:de:a9:02:7f:
         90:8e:44:15:bc:07:8a:48:04:bb:56:2d:6f:34:2d:8b:84:b9:
         a2:3d:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org