Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          JZcGx5Kg1CrX2n+8lFil4Z7qMTemjhY2zbREe+fLNxw=
Subject key identifier:   C3:67:A4:27:9E:1C:E6:E9:FC:57:9B:F8:50:86:FE:2A:EE:E1:DE:1A
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       6B62724B22219AAE8AA344E9BF9A59C72FA25672
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:03 +0000
ROA not before:           Tue 05 Mar 2024 17:49:03 +0000
ROA not after:            Tue 04 Mar 2025 17:54:03 +0000
asID:                     273041
IP address blocks:        2801:1a5:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:62:72:4b:22:21:9a:ae:8a:a3:44:e9:bf:9a:59:c7:2f:a2:56:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:03 2024 GMT
            Not After : Mar  4 17:54:03 2025 GMT
        Subject: CN=C367A4279E1CE6E9FC579BF85086FE2AEEE1DE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:8b:90:57:70:93:66:1a:66:23:53:82:78:
                    07:38:6c:f2:26:95:a9:b2:76:55:07:02:d5:43:30:
                    de:5e:44:13:bf:9a:02:8d:7d:8c:10:7b:41:97:8c:
                    ce:65:1b:2c:55:3d:80:6b:6d:b2:19:ba:61:95:c6:
                    ca:65:75:3a:93:e1:fd:80:87:45:ac:5c:8c:6b:c1:
                    eb:be:21:23:bf:76:9d:07:d2:3d:d0:e8:a4:bc:f1:
                    d6:a5:2c:dd:8d:cc:70:65:b4:62:e9:e8:f3:cb:3e:
                    57:0d:5d:dd:dd:3d:56:5d:3c:de:dc:72:5f:92:72:
                    a8:b4:dd:49:10:d8:e7:a1:2d:d4:b7:60:b5:12:d8:
                    23:f7:1f:93:41:a8:1b:ce:89:e3:a2:13:1b:3d:74:
                    63:d0:59:c5:b6:d2:48:0e:eb:94:61:63:75:c9:cb:
                    f5:2c:6b:69:63:8e:73:41:fe:75:75:64:4f:27:48:
                    48:20:73:ae:22:0f:4e:3a:5d:ec:13:52:08:49:e2:
                    b9:0e:f9:da:21:a1:5d:6f:e3:e9:d1:73:56:a5:a7:
                    40:46:f6:78:20:90:a0:68:45:bd:b8:e9:43:d9:f7:
                    47:be:a1:b3:6e:29:c9:16:84:6f:bf:82:6b:76:ec:
                    86:42:70:20:cc:97:8a:df:75:b3:c3:f2:13:df:62:
                    66:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:67:A4:27:9E:1C:E6:E9:FC:57:9B:F8:50:86:FE:2A:EE:E1:DE:1A
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a313a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:b9:75:28:b4:f8:27:16:bc:bf:04:4e:1f:7b:f4:2f:63:33:
         7f:25:2b:c0:4a:b8:9b:9a:cb:e9:18:f4:16:d0:7a:e4:93:8b:
         6c:fb:9e:26:f8:ac:7b:a8:40:58:ec:b2:2b:e5:a5:28:d1:36:
         aa:dc:61:1d:b1:10:02:f6:96:e3:2e:ef:aa:f4:bc:c3:1a:d8:
         e0:43:d0:d1:24:0a:3e:55:30:67:ee:50:4e:20:af:9a:f8:5e:
         a7:f0:78:15:18:c7:0d:39:ea:f5:95:7b:f2:cc:4b:90:6d:1b:
         73:56:dd:83:45:30:be:c6:03:97:48:6d:4f:61:a6:81:a6:b7:
         d3:dc:4c:11:5f:26:1f:d9:b9:1a:3c:a7:9f:18:54:ed:e1:b6:
         de:a7:54:8f:ee:bf:ab:61:9b:43:e8:c3:07:11:57:d9:25:a5:
         4d:5d:58:d1:59:f7:e7:d9:9b:46:b2:78:55:eb:2e:f0:95:e6:
         e9:45:35:99:84:10:e2:cf:d0:ff:0b:83:7c:90:07:67:28:1e:
         a6:3b:cf:61:01:a7:f4:b4:a6:d3:4b:92:e0:8c:6d:ae:9b:78:
         f6:91:3b:d8:f8:a0:77:e2:58:ea:e6:c9:4c:fb:e3:c6:34:c2:
         76:9b:34:aa:c3:7c:f4:3b:b7:2b:37:ad:94:c2:44:ff:6c:aa:
         23:91:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org