Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/323830313a31343a663830303a3a2f34382d3634203d3e20323734303033.roa
File:                     323830313a31343a663830303a3a2f34382d3634203d3e20323734303033.roa (raw, json)
Hash identifier:          IWg0E/ZJ/z/K5JyjK9O/4G69cdv/wzyB5faCaXe6y2A=
Subject key identifier:   97:E7:31:66:2A:06:88:7C:22:8E:5B:E9:5E:F0:1E:53:CB:4B:B0:8A
Certificate issuer:       /CN=373B136C9A64FBA75FE203A91B8D3770CAFEBAD3
Certificate serial:       239E25F37FC4C04DE1B371608C653EC3C06C2C29
Authority key identifier: 37:3B:13:6C:9A:64:FB:A7:5F:E2:03:A9:1B:8D:37:70:CA:FE:BA:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/323830313a31343a663830303a3a2f34382d3634203d3e20323734303033.roa
Signing time:             Tue 10 Dec 2024 14:30:00 +0000
ROA not before:           Tue 10 Dec 2024 14:25:00 +0000
ROA not after:            Tue 09 Dec 2025 14:30:00 +0000
asID:                     274003
IP address blocks:        2801:14:f800::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Dec 2024 14:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9e:25:f3:7f:c4:c0:4d:e1:b3:71:60:8c:65:3e:c3:c0:6c:2c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B136C9A64FBA75FE203A91B8D3770CAFEBAD3
        Validity
            Not Before: Dec 10 14:25:00 2024 GMT
            Not After : Dec  9 14:30:00 2025 GMT
        Subject: CN=97E731662A06887C228E5BE95EF01E53CB4BB08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:71:f6:1c:0a:29:8e:bc:5f:f9:fb:d4:20:
                    14:a2:36:31:18:66:62:7a:cc:78:9c:b5:f3:f7:e5:
                    17:55:b0:0e:65:5a:9c:63:a1:d5:0c:a5:27:9b:04:
                    26:9e:f6:54:29:55:c6:98:dd:d7:0f:25:33:70:05:
                    cc:ef:4f:48:ce:94:18:a9:cb:16:8c:59:bb:79:a3:
                    c5:cb:a7:62:c3:2c:fc:81:67:9a:e5:2c:a8:94:a6:
                    0d:cb:f1:4d:38:e3:f2:7d:55:76:4a:04:8f:09:9f:
                    04:cf:0d:0f:fe:54:4c:f2:cd:42:1a:0d:22:e0:71:
                    b2:3a:c9:22:e0:6e:bc:f4:35:c4:8b:bb:f4:c1:ee:
                    17:c7:af:f3:71:7d:83:dd:aa:74:03:42:94:ee:25:
                    97:32:84:e5:4a:64:46:2a:04:6e:57:94:41:06:81:
                    19:58:9a:0b:7c:a9:7a:ad:68:71:1f:7e:c0:92:e5:
                    13:d3:be:53:b3:c4:9f:b4:4c:22:2f:9f:2b:20:2d:
                    95:9b:6c:86:a7:55:73:b1:b2:4f:4f:0b:b6:e3:7f:
                    24:4a:8d:cc:d9:93:2c:54:48:4c:4b:88:ef:f9:dd:
                    95:8c:83:6b:1f:b4:f0:bc:37:7f:4a:56:97:84:38:
                    03:2e:d9:51:83:f5:89:70:a2:fb:4a:1b:92:b7:ba:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E7:31:66:2A:06:88:7C:22:8E:5B:E9:5E:F0:1E:53:CB:4B:B0:8A
            X509v3 Authority Key Identifier:
                keyid:37:3B:13:6C:9A:64:FB:A7:5F:E2:03:A9:1B:8D:37:70:CA:FE:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/373B136C9A64FBA75FE203A91B8D3770CAFEBAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79D0CFD380AC93A61AAA2ADA28A54721614A7211EE4F9285DF1864723A0ECE75/0/323830313a31343a663830303a3a2f34382d3634203d3e20323734303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:02:15:d6:0b:6c:4a:8b:29:60:4c:73:3e:f7:90:ef:15:
         02:ef:fd:16:ec:d0:5e:cf:64:00:ef:e1:44:1e:29:fa:ff:4b:
         53:00:2f:ca:fd:5d:30:bb:8d:14:13:45:50:7b:62:65:c8:65:
         c7:f5:b6:de:da:f1:4d:e1:7b:f1:92:62:09:67:1d:7e:98:55:
         c3:5e:52:52:bf:ce:b3:13:0d:ad:2b:a5:a7:d9:9a:f4:78:6e:
         50:ad:85:a4:27:b7:9e:47:6f:69:93:a6:93:cb:88:5d:11:f8:
         b8:07:47:09:03:38:5a:90:a8:23:8e:e2:ed:fa:d6:e1:cd:f3:
         6f:22:bd:41:49:37:44:0e:3b:6b:6b:10:1d:ab:09:30:93:62:
         2a:9c:3b:4f:98:ed:de:ca:c4:31:02:c7:83:7a:7e:d6:c9:4e:
         91:a8:25:4d:a6:45:36:b0:b6:19:10:07:c1:ea:6d:df:4d:f8:
         e4:b5:14:5f:3b:0e:c3:f8:0c:7f:9a:41:6a:5f:c3:d1:a4:6d:
         23:03:31:c3:4c:27:93:37:50:93:30:9f:b5:ba:8e:d1:37:a8:
         ef:41:d6:bd:28:4e:8d:e6:a7:61:85:7f:df:80:3d:3e:ea:ea:
         05:5c:d8:03:fb:b0:bc:cc:b3:13:62:cd:56:08:1a:02:a0:b4:
         a6:9b:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 05:11:48 2024 by rpki-client on console-fra.rpki-client.org