Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030313a613a3a2f36342d3634203d3e20323131363132.roa
File:                     323830313a31643a613030313a613a3a2f36342d3634203d3e20323131363132.roa (raw, json)
Hash identifier:          OslCl/fI6SWLZaz6pDjXEBc8Yp14Yc2RazwJUVZ1xQw=
Subject key identifier:   99:05:F9:B9:75:07:BF:BC:7B:B4:65:76:D3:64:44:71:4C:1F:C1:49
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       1D4E7075EB0BC43BD2FF5FE1D586C81E887B6F7C
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030313a613a3a2f36342d3634203d3e20323131363132.roa
Signing time:             Tue 05 Mar 2024 17:41:17 +0000
ROA not before:           Tue 05 Mar 2024 17:36:17 +0000
ROA not after:            Tue 04 Mar 2025 17:41:17 +0000
asID:                     211612
IP address blocks:        2801:1d:a001:a::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4e:70:75:eb:0b:c4:3b:d2:ff:5f:e1:d5:86:c8:1e:88:7b:6f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Mar  5 17:36:17 2024 GMT
            Not After : Mar  4 17:41:17 2025 GMT
        Subject: CN=9905F9B97507BFBC7BB46576D36444714C1FC149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:00:23:02:d7:d5:c1:8e:00:03:f3:e3:c2:
                    fd:69:ed:65:98:1b:75:c1:d6:6e:a2:f2:fc:4c:9f:
                    15:6c:3a:1c:92:7a:30:f8:36:96:f1:bc:1f:1c:62:
                    22:f2:7f:7c:04:4c:66:39:38:ff:6e:5f:8b:7c:94:
                    bf:f8:4c:27:bb:d1:86:1a:34:98:39:03:6d:05:ce:
                    30:48:37:8f:e5:7b:de:86:a9:6d:68:03:8a:63:e5:
                    27:45:75:5d:7c:a6:71:91:65:ec:0f:64:1a:eb:e4:
                    99:69:3e:1b:ee:09:73:3c:45:50:39:cc:73:a6:7a:
                    07:89:6b:48:05:80:37:90:9f:bd:6c:97:77:2c:a7:
                    f2:81:24:58:68:f0:85:a3:b6:20:3f:b1:60:da:ac:
                    3b:4d:09:60:06:cf:e2:11:d6:1d:ad:d0:45:22:db:
                    73:89:78:5b:69:19:10:24:f0:7a:69:14:c2:02:3e:
                    57:14:63:b6:ed:c2:46:eb:83:7b:15:13:52:01:c0:
                    48:c6:7c:36:dc:40:d1:51:b2:78:ab:55:f5:f4:e8:
                    69:23:3e:d2:6a:a5:1f:4c:ca:62:d2:6f:15:89:3c:
                    67:da:1a:db:ac:90:b2:92:93:d2:50:50:bc:bd:74:
                    02:11:52:51:26:36:3a:cc:85:e2:76:23:3f:14:38:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:05:F9:B9:75:07:BF:BC:7B:B4:65:76:D3:64:44:71:4C:1F:C1:49
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030313a613a3a2f36342d3634203d3e20323131363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:a001:a::/64

    Signature Algorithm: sha256WithRSAEncryption
         2a:6b:ab:1c:13:cd:72:6b:b0:73:17:63:74:dd:ce:69:b7:31:
         2f:a9:6a:40:0e:48:da:31:22:04:1b:de:d7:ec:98:46:b1:52:
         cd:a6:8e:f7:b5:e2:7b:95:c8:ab:40:a7:76:32:df:4b:11:a1:
         a0:c0:b3:bf:fd:af:77:f5:0e:57:b0:4c:0c:e5:53:bd:74:bd:
         89:b9:d0:5c:4a:3b:10:64:ee:ab:58:85:a9:3c:16:2e:95:10:
         96:ac:6c:3b:62:ed:15:11:64:ec:a9:bc:02:9e:ff:e6:bd:8c:
         96:de:9b:f2:4a:ca:bf:97:9b:b0:27:5f:66:c4:a4:15:e7:45:
         13:dc:96:ee:f4:2f:27:5e:a8:29:45:bc:f7:46:b5:c8:03:05:
         02:f9:8a:2e:11:55:f8:08:5f:7a:d3:02:e0:02:9c:38:2d:5d:
         a6:8d:4a:71:b8:5b:7b:93:e2:38:6f:b2:0f:c4:f6:3f:1a:a9:
         be:d7:9e:33:37:eb:cc:30:ec:2c:4d:52:4b:28:0e:5c:26:55:
         ed:18:31:5a:5a:75:ac:9b:7d:d5:6b:95:58:f2:a1:04:9c:3f:
         27:26:c0:80:7b:a6:04:8a:b1:ff:09:99:66:b9:f1:d4:48:c9:
         6a:7c:9a:42:b0:32:ab:d6:66:d2:64:4a:6a:b8:f0:bf:92:1f:
         55:4d:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org