Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          SqtJ8oTQyzYVtb4qW+Z05KHbM2CX5h1kFZ5+gmWHxps=
Subject key identifier:   6B:42:DC:34:70:13:A8:8D:34:89:26:5C:28:F8:A9:34:0B:E8:1C:46
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       30A84DC6A76D90EDF4B910D47F0537AC379FA147
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:04 +0000
ROA not before:           Tue 05 Mar 2024 17:49:04 +0000
ROA not after:            Tue 04 Mar 2025 17:54:04 +0000
asID:                     273041
IP address blocks:        2801:1a5:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a8:4d:c6:a7:6d:90:ed:f4:b9:10:d4:7f:05:37:ac:37:9f:a1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:04 2024 GMT
            Not After : Mar  4 17:54:04 2025 GMT
        Subject: CN=6B42DC347013A88D3489265C28F8A9340BE81C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:7c:61:b1:d7:b4:23:15:91:c0:93:94:41:
                    94:8d:35:af:ab:bf:a5:33:63:c4:c9:89:e1:1c:3e:
                    87:53:72:1e:a7:ee:7e:da:45:7e:1a:9c:b4:ab:5a:
                    f5:70:2c:49:a0:2b:90:fd:19:10:cf:76:03:39:46:
                    2e:ab:be:c1:27:88:6b:d0:2b:b5:00:05:e1:6d:c7:
                    b5:be:00:bb:2d:23:c6:74:00:ba:2b:9f:25:7e:c7:
                    b9:b0:86:64:60:9f:f4:c5:e6:64:50:3b:4f:a4:48:
                    95:d7:01:2e:05:1a:69:14:95:94:a2:06:83:b3:a5:
                    bb:1c:96:d0:50:88:7e:33:87:0e:5e:8d:57:85:28:
                    c6:35:13:5a:e3:1e:35:8f:0c:27:24:81:61:48:83:
                    ff:83:2c:80:f7:33:3e:6d:60:66:f6:de:d5:94:0e:
                    b3:d1:d2:95:f9:39:55:ce:59:d6:16:90:ab:27:22:
                    f7:e8:28:da:71:36:9a:0c:e4:8d:ac:30:6c:70:ef:
                    04:a8:55:b5:51:ce:a3:65:53:c4:d2:cc:84:a9:ca:
                    6c:23:7a:78:2b:3f:0d:a6:58:26:af:b4:2f:54:a5:
                    01:b8:9c:a2:56:ef:43:e3:09:f0:a3:aa:0e:84:e2:
                    0c:e4:57:32:ec:0f:61:08:f9:1c:2b:bf:e2:f8:3a:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:42:DC:34:70:13:A8:8D:34:89:26:5C:28:F8:A9:34:0B:E8:1C:46
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:35:f6:85:bc:ef:14:7d:77:04:62:61:4e:80:ba:34:93:e5:
         27:06:fe:40:46:a0:0c:a5:01:a2:7c:c7:ab:09:51:cb:66:b0:
         dc:6a:d0:4c:e1:e7:a8:9a:71:5a:42:41:9f:43:1e:96:cd:85:
         0e:6c:43:42:d9:7c:a8:fe:b0:3c:0b:cf:a5:8d:f1:9f:75:bc:
         d4:9a:d3:af:9d:4a:3c:40:c2:07:67:c1:ab:aa:38:53:be:8c:
         57:60:08:d1:fe:c1:17:4b:4a:f5:45:ae:34:7c:e3:5c:a8:39:
         bb:c9:b4:c2:3d:ab:45:c8:a2:b6:14:f2:d7:7e:7e:3b:a3:0e:
         86:18:0a:5e:16:6f:b1:6e:91:d4:97:0f:35:c8:34:6d:d9:7b:
         ea:39:88:e6:19:6c:37:d0:99:99:81:6f:c0:2e:2e:c0:2a:38:
         aa:19:8d:59:b6:c1:38:15:54:8d:89:4d:56:9f:32:7d:8f:22:
         7e:ef:2f:41:a3:20:95:04:4c:c8:f1:60:3e:fd:1e:12:e2:f5:
         3e:88:cf:1f:fd:a8:f1:8f:34:c1:e2:bd:9a:b9:79:0c:ae:76:
         92:3d:b6:da:21:73:50:ca:92:9d:72:39:78:00:93:13:b2:23:
         f4:e8:0a:3b:26:8c:53:60:41:5e:18:07:37:57:94:7e:48:00:
         f8:33:36:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org