Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203631343638.roa
File:                     323830313a31363a393830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier:          kJcTictQY6psG9ArYPNDI33z9NHJEgDeAGC7GdJoOE4=
Subject key identifier:   6D:84:EF:4D:1A:F2:98:ED:CD:0D:62:49:31:DF:5F:41:D5:B3:68:E6
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       6DB80D544F662AF1896D6A83D43655DB133B506A
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:23:17 +0000
ROA not before:           Tue 05 Mar 2024 18:18:17 +0000
ROA not after:            Tue 04 Mar 2025 18:23:17 +0000
asID:                     61468
IP address blocks:        2801:16:9800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b8:0d:54:4f:66:2a:f1:89:6d:6a:83:d4:36:55:db:13:3b:50:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Mar  5 18:18:17 2024 GMT
            Not After : Mar  4 18:23:17 2025 GMT
        Subject: CN=6D84EF4D1AF298EDCD0D624931DF5F41D5B368E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:a4:9e:6e:ed:38:68:ac:27:a7:63:ae:8b:
                    2c:20:40:a1:86:64:ba:ad:e1:1e:8a:dd:40:64:e6:
                    15:cc:f8:af:8c:78:f8:67:1a:2b:e1:5c:4f:f0:03:
                    b2:ab:bb:35:74:64:d4:68:b7:8b:af:44:24:ff:12:
                    b8:bb:1d:be:af:0a:ae:e3:9d:12:e2:44:2b:2c:f7:
                    81:52:bb:49:41:e6:be:fb:21:cf:ad:59:60:cf:8b:
                    a9:3d:26:62:d0:88:e8:ff:99:49:19:dc:26:62:b2:
                    03:7b:fe:e3:b6:77:95:8b:b5:d2:bc:7f:b5:4e:8b:
                    b8:38:1a:8b:fb:77:b3:8a:99:38:49:e4:8d:3c:a4:
                    2b:c9:30:ba:af:10:c6:a4:37:5f:66:21:43:c4:de:
                    43:e3:a2:9a:dc:fb:27:be:77:c1:8a:41:27:55:20:
                    bb:74:7a:c3:00:f0:7d:bf:cf:8c:a8:1f:48:30:d3:
                    73:62:d6:e6:de:d7:be:e7:a5:e6:96:b6:7c:75:17:
                    5a:96:90:7d:8d:ec:bb:ab:99:db:2c:eb:20:e1:9c:
                    d9:72:fb:d4:8c:71:43:41:66:ae:1b:c3:a0:39:7e:
                    70:3c:7b:8f:21:8b:38:d0:ff:a3:67:65:64:db:00:
                    e6:4b:b6:66:33:23:92:61:a5:ac:33:43:cc:0c:96:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:84:EF:4D:1A:F2:98:ED:CD:0D:62:49:31:DF:5F:41:D5:B3:68:E6
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:80:92:ba:28:0a:ce:1a:ca:db:fa:0c:82:13:27:f3:f7:94:
         b3:bc:6a:43:77:c1:e1:8e:1c:cd:36:b7:b7:77:c7:96:31:c9:
         50:20:67:ec:3b:de:67:28:f8:a1:45:67:92:65:68:26:e5:3a:
         55:cc:d7:a7:5f:74:64:f4:6d:64:92:ca:ab:8c:20:b9:23:28:
         a7:db:16:ba:99:80:96:c8:f6:53:51:7f:34:67:79:6c:48:56:
         0b:3c:5d:24:c8:58:87:b5:53:51:39:db:5a:2d:65:44:bc:57:
         d6:8b:d1:51:b6:99:73:32:3d:ff:00:13:49:86:6e:41:cb:20:
         15:b8:e2:fc:13:77:07:bb:12:e0:4a:8f:49:eb:af:4b:b5:c6:
         d4:e9:9d:47:cf:a5:75:69:d2:7b:16:19:a2:50:ca:ea:64:f7:
         c6:7b:d0:50:9d:bd:c0:b1:95:35:a7:2f:e1:2a:33:36:1f:d0:
         4a:67:01:9f:68:96:ae:e3:85:66:8b:24:71:f2:67:00:48:32:
         cd:9a:fc:da:bc:66:5e:e1:36:90:2e:2e:9a:0b:df:9a:26:9b:
         a0:09:7a:15:27:71:7b:1f:a4:6a:64:5a:97:e5:ed:a9:58:c9:
         bf:0a:7c:e0:e0:b9:d7:e6:31:ca:8a:40:8b:26:63:51:4c:d0:
         3b:02:8b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:07:58 2024 by rpki-client on console-ams.rpki-client.org