Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a343a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a343a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          dqC52Ivm6XJMOHLYyO4DtdaWg6jcWzWAowM4SVItPlo=
Subject key identifier:   8C:E6:C1:15:2B:08:F8:A3:5A:41:3E:DA:1C:4B:8B:96:F8:08:82:66
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       10C4C51BD4AA1C2718965EA40ACF88793F4CF9BE
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a343a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:07 +0000
ROA not before:           Tue 05 Mar 2024 17:49:07 +0000
ROA not after:            Tue 04 Mar 2025 17:54:07 +0000
asID:                     273041
IP address blocks:        2801:1a5:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c4:c5:1b:d4:aa:1c:27:18:96:5e:a4:0a:cf:88:79:3f:4c:f9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:07 2024 GMT
            Not After : Mar  4 17:54:07 2025 GMT
        Subject: CN=8CE6C1152B08F8A35A413EDA1C4B8B96F8088266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:1d:4b:bc:a0:c4:7c:0f:92:f4:df:fa:6a:
                    ba:30:da:27:c6:54:9b:6b:20:4e:8b:d1:58:0a:36:
                    5d:f1:5d:69:55:f2:af:26:cd:13:1e:47:04:aa:ee:
                    5f:bb:01:b6:a6:2c:31:8c:32:d8:13:7b:32:e3:e5:
                    8c:95:65:72:9f:4b:cc:bf:f7:6a:cd:82:72:53:ae:
                    03:77:ea:61:f0:f3:90:ae:88:7a:ff:b6:ee:15:b8:
                    ce:eb:17:f4:c2:d3:e2:11:a8:75:dc:3d:d1:ac:ce:
                    54:60:70:c6:d1:f1:8f:87:48:91:39:20:b4:d8:ad:
                    38:bd:30:14:cf:6e:4a:2b:99:b1:b3:27:64:6d:72:
                    6a:c3:59:aa:01:a8:a6:79:4d:d8:43:5f:02:64:e1:
                    51:7d:ed:1d:91:6e:35:19:3c:16:85:a8:22:b1:2f:
                    1c:97:2e:03:37:a4:6b:b7:68:de:2e:0e:c6:cb:d4:
                    75:36:27:5b:97:ff:7e:dd:34:9d:b5:e9:db:6a:45:
                    4c:f3:37:0c:e6:1e:79:6f:2a:59:c3:85:89:7b:b0:
                    d7:f8:c6:9f:ea:05:56:8d:35:23:80:76:97:03:85:
                    1e:9c:1b:f0:82:7b:39:d5:28:51:0d:a6:ed:a0:5b:
                    c5:61:2a:90:8a:1f:60:e2:96:7b:34:2f:96:9e:7b:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:C1:15:2B:08:F8:A3:5A:41:3E:DA:1C:4B:8B:96:F8:08:82:66
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a343a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:60:3e:c2:31:bd:01:3b:4c:b2:21:d4:52:34:d9:77:4e:91:
         7a:c3:4f:fc:5c:cb:2a:3a:4c:a4:bb:6b:83:95:f6:0b:f5:41:
         a8:3a:ba:1a:73:45:cd:d4:26:9a:1f:d5:5e:a5:b7:92:06:ab:
         94:5f:24:9d:49:08:24:98:de:15:33:76:f4:55:1f:47:4c:91:
         0d:51:51:19:a0:89:7d:47:a4:72:4c:eb:6b:a0:a0:1d:95:fb:
         cc:a8:22:f9:18:e7:cd:d1:2c:13:4c:1f:99:14:2e:2d:54:f6:
         90:bb:66:b7:db:66:c1:07:dd:77:97:14:2c:e6:0c:c8:dc:56:
         e6:60:17:39:23:5e:9f:55:83:76:c7:88:01:5b:f0:3d:e2:1b:
         b6:19:2e:c9:c9:63:6e:51:9b:0c:82:8a:40:b7:44:38:79:81:
         bf:ab:a8:61:94:a4:71:44:02:67:2e:36:f9:22:48:90:a9:4d:
         98:8f:b4:12:6e:61:dc:55:6b:e6:94:78:3c:2b:2a:b4:5d:50:
         bc:d3:64:74:23:82:f7:9a:d0:00:67:20:0b:5a:69:ac:58:85:
         29:44:42:a8:26:a0:85:09:89:40:4c:bb:64:28:85:fb:05:a1:
         6b:88:6e:e2:3b:4e:af:ad:a3:51:e9:ed:22:3c:5b:1e:e0:42:
         cb:44:4e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org