Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          p5zCuqBENqVDT+iqaHwkjff4ImamglYczTdsqgmBxpc=
Subject key identifier:   98:ED:76:4E:B6:06:1F:31:B7:AE:A7:26:FA:B0:39:B3:AE:02:B6:35
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       5C965EB2D33B6CFBA9CB08B97AB0581A63B24F69
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:05 +0000
ROA not before:           Tue 05 Mar 2024 17:49:05 +0000
ROA not after:            Tue 04 Mar 2025 17:54:05 +0000
asID:                     273041
IP address blocks:        2801:1a5:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:96:5e:b2:d3:3b:6c:fb:a9:cb:08:b9:7a:b0:58:1a:63:b2:4f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:05 2024 GMT
            Not After : Mar  4 17:54:05 2025 GMT
        Subject: CN=98ED764EB6061F31B7AEA726FAB039B3AE02B635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:3d:5d:ae:af:de:e9:59:8f:b1:9e:f9:e7:
                    ad:be:b5:ba:4d:60:72:09:f9:af:e3:7d:7b:09:6f:
                    fc:82:73:38:ff:4c:5c:7c:5a:c9:e7:0c:0c:bf:f4:
                    00:bc:4f:c4:49:d8:6b:5d:1a:ef:de:79:4d:21:b9:
                    4d:03:20:69:cc:39:25:50:76:3d:0c:7a:55:f2:ea:
                    de:c4:f5:e2:f2:96:74:73:71:3e:9f:0e:70:37:a9:
                    e3:09:d3:c8:ac:08:0b:ce:77:79:41:c1:66:1f:60:
                    f9:cc:a4:a6:05:f9:2f:32:7c:79:c1:ba:8d:e1:01:
                    db:36:9b:b5:30:20:6f:60:fe:c7:c8:23:2d:cd:bf:
                    d4:ad:ec:01:52:d4:40:46:7d:e6:56:4f:b6:cc:4a:
                    be:e8:52:bb:a7:3f:80:90:20:05:e0:c2:69:b2:4c:
                    8a:74:c1:61:a8:36:67:36:a3:6b:76:d0:2f:6d:d4:
                    9d:01:34:09:6a:e2:33:07:b0:0c:09:d2:cb:26:d0:
                    73:8d:5c:24:c4:9f:85:14:fb:4d:f3:9c:6d:5b:b6:
                    8a:47:43:85:83:62:c7:ae:c7:18:81:b9:e5:dc:84:
                    8f:e7:a6:02:fc:19:0f:80:df:c7:94:d2:95:cb:b1:
                    84:0c:82:b5:11:06:69:a0:80:8e:05:c7:93:18:c1:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:ED:76:4E:B6:06:1F:31:B7:AE:A7:26:FA:B0:39:B3:AE:02:B6:35
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a613a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:82:6b:61:4d:9d:9d:e7:88:a1:c5:64:b0:d2:7d:97:85:84:
         e0:c0:37:6f:93:98:6a:19:b7:45:cd:fa:88:d6:17:37:f9:55:
         e0:0e:13:35:e9:42:c8:33:56:f8:57:30:45:5f:a2:03:05:b0:
         e9:fc:bc:5e:a4:9d:79:25:28:8d:fd:d8:3e:e0:a2:52:40:c7:
         2c:94:3d:a8:ae:77:ac:2f:72:15:82:b6:98:cc:d6:6d:4b:e5:
         be:4a:14:52:b2:eb:13:36:8c:3c:56:12:02:9d:3f:97:08:fa:
         ca:04:57:04:e7:e4:ff:d3:65:f4:a5:1c:24:40:86:42:1a:26:
         2a:1d:2d:b8:12:1f:b6:73:27:be:6f:0d:ce:48:3e:b1:28:9b:
         1d:cb:fe:c9:3a:97:84:62:87:7c:db:89:73:9f:4f:be:03:82:
         3f:b7:01:cf:12:42:59:93:6b:ae:ab:43:ee:df:b1:b6:3a:b0:
         d4:16:5d:88:06:a8:42:1f:90:54:7b:b9:09:b1:8b:4d:9d:03:
         e4:33:b6:42:da:5a:40:1c:41:dd:57:f8:5f:55:c0:57:45:53:
         4d:69:f8:70:26:2b:0f:07:a2:03:a5:cd:10:39:71:93:83:83:
         00:f4:17:d3:c5:2d:db:3c:87:ce:94:3b:eb:e7:5e:3e:c0:bd:
         c7:c1:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org