Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a333a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a333a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          LocIMMaJsSw8JoNnY0HaZoTbVoXHSW/hEn3vGTsVHyM=
Subject key identifier:   79:61:CA:A7:02:A1:EF:1B:6D:51:3D:14:0D:10:20:C8:C2:92:0B:68
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       25A7128987C3A194CE90339C91A1F0D5D1CFEFDC
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a333a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:07 +0000
ROA not before:           Tue 05 Mar 2024 17:49:07 +0000
ROA not after:            Tue 04 Mar 2025 17:54:07 +0000
asID:                     273041
IP address blocks:        2801:1a5:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a7:12:89:87:c3:a1:94:ce:90:33:9c:91:a1:f0:d5:d1:cf:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:07 2024 GMT
            Not After : Mar  4 17:54:07 2025 GMT
        Subject: CN=7961CAA702A1EF1B6D513D140D1020C8C2920B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:3e:ee:fa:a1:d6:4c:b8:4b:86:07:aa:d7:
                    84:0f:23:f4:bd:05:e2:92:b9:32:99:b9:6c:e0:84:
                    3a:ef:c1:fd:c0:a3:e8:56:0a:45:d2:0f:86:22:93:
                    be:17:13:4d:2d:23:e4:ad:f4:72:a5:d5:db:50:83:
                    2c:f5:0d:05:8e:9d:41:59:eb:49:6f:df:e7:40:52:
                    aa:fc:57:f3:f3:51:92:e2:aa:89:0a:8e:54:ec:5c:
                    d9:79:00:48:19:f2:59:22:9c:e2:1c:13:2c:59:6a:
                    9d:82:1a:52:b2:81:40:c8:f2:69:d1:ca:05:9d:3b:
                    6e:0d:12:34:a3:85:e1:f1:90:b2:9e:41:48:6d:a1:
                    d0:51:0c:af:6d:60:4e:61:2e:0f:24:7e:e3:7e:dd:
                    b5:40:9a:d0:73:6b:d5:0a:95:69:83:93:2f:82:aa:
                    6b:af:1c:f2:02:06:9c:f4:6f:ce:b9:76:75:6b:6b:
                    62:86:6c:46:a4:e6:5a:cb:c7:28:1a:b6:50:58:3b:
                    63:65:6b:65:ae:99:8f:44:38:b5:fa:ec:1a:6c:eb:
                    b2:ba:71:ec:53:8d:d3:88:89:94:b8:1c:9e:b7:2e:
                    99:ff:dd:4f:02:6f:7d:42:74:68:c3:4a:0d:eb:cb:
                    30:59:22:76:96:ab:b4:86:eb:35:48:2c:58:23:dd:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:61:CA:A7:02:A1:EF:1B:6D:51:3D:14:0D:10:20:C8:C2:92:0B:68
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a333a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:02:72:e8:c6:d9:05:28:9e:44:20:38:ff:27:f4:96:4a:75:
         f6:31:aa:7f:38:b6:c0:59:e9:99:d3:43:95:c5:63:a6:96:78:
         be:40:d3:f2:f6:a4:55:73:67:78:3c:65:7a:d2:31:14:0d:03:
         34:37:55:e9:7a:ce:c8:e6:a3:8b:eb:e9:aa:e9:89:ff:b2:32:
         1d:d7:29:36:d8:88:e8:29:0e:81:38:a9:17:7d:55:ee:d1:b6:
         99:06:09:5d:8a:2a:7d:18:76:63:98:5a:47:6e:b3:5e:86:31:
         15:80:a2:21:c7:5a:6c:a8:d9:24:a3:90:8d:1f:5a:c9:ef:9b:
         d1:dd:56:00:84:03:90:9c:85:cd:15:23:92:af:47:40:d8:71:
         43:af:f4:93:ba:1f:c0:0e:dd:aa:1c:90:73:92:0b:5c:a8:f6:
         2e:14:d2:90:91:88:09:c1:74:9c:19:d0:0d:00:bd:67:f2:57:
         37:0f:02:37:b8:30:fb:a1:dc:03:6d:23:8a:56:a5:04:75:16:
         57:2f:a5:c1:f9:cf:00:c4:7f:6c:3f:4e:44:10:c6:6b:8a:9a:
         c6:12:f3:71:bf:61:51:b3:d6:9e:16:7f:a6:52:8f:86:2c:d5:
         5d:3f:5a:46:bf:0f:a3:fb:ac:57:4f:2e:c4:6c:df:d3:33:cb:
         b7:dc:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org