Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a663a3a2f34382d3438203d3e20323733303431.roa
File:                     323830313a3161353a663a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier:          ISOT6qIAUHb+uqDNeMa4/mgX5v2G1et7cyTIgRvPNzA=
Subject key identifier:   40:55:7D:0E:FC:E9:66:82:27:60:76:65:F3:45:01:B7:F2:04:34:EC
Certificate issuer:       /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial:       6B4EE5B0EF81589737E3AA7A8ECA8355AEECDDBD
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a663a3a2f34382d3438203d3e20323733303431.roa
Signing time:             Tue 05 Mar 2024 17:54:04 +0000
ROA not before:           Tue 05 Mar 2024 17:49:04 +0000
ROA not after:            Tue 04 Mar 2025 17:54:04 +0000
asID:                     273041
IP address blocks:        2801:1a5:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4e:e5:b0:ef:81:58:97:37:e3:aa:7a:8e:ca:83:55:ae:ec:dd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
        Validity
            Not Before: Mar  5 17:49:04 2024 GMT
            Not After : Mar  4 17:54:04 2025 GMT
        Subject: CN=40557D0EFCE9668227607665F34501B7F20434EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:2c:d7:61:a3:7b:47:df:33:ac:ad:9c:65:
                    34:d9:e9:1d:0c:19:d4:24:9d:34:89:51:29:99:eb:
                    f7:95:4f:2d:06:b9:2a:45:03:ae:22:b7:40:ae:50:
                    3a:ce:f5:e6:87:1b:16:27:7a:17:fc:1e:df:de:db:
                    74:32:19:f5:1d:4f:83:6e:05:56:8f:3b:ec:8d:34:
                    e7:c9:66:6a:2d:db:a6:11:8c:37:ae:bf:8b:b0:b3:
                    35:69:82:46:9c:36:bb:43:51:34:24:93:58:53:77:
                    64:b0:fc:62:fd:28:36:c7:6b:9e:eb:19:b0:4b:61:
                    f5:31:9e:ec:d5:05:8d:a3:56:21:05:bf:3b:db:07:
                    36:f2:4c:a5:bd:d8:6d:4d:78:84:1b:0d:db:5f:1b:
                    82:5e:80:1f:d6:b3:b7:ae:24:44:d3:52:a7:0b:c7:
                    f5:cc:0e:7b:ad:38:5f:d3:dd:bb:68:23:6f:5e:da:
                    3d:52:71:54:15:a3:05:b1:99:45:5b:69:89:93:d4:
                    db:47:d0:77:0a:6b:48:a9:ab:27:09:d1:0f:0a:39:
                    06:f5:9b:9d:25:48:f1:3d:0b:4c:15:63:9f:7f:b7:
                    fc:d5:c1:4d:0f:26:47:63:8b:8b:58:85:30:5d:d6:
                    65:1e:19:1f:2e:d7:ee:55:94:76:95:ca:e3:f0:84:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:55:7D:0E:FC:E9:66:82:27:60:76:65:F3:45:01:B7:F2:04:34:EC
            X509v3 Authority Key Identifier:
                keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a663a3a2f34382d3438203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:62:fd:94:35:ba:86:11:1b:0d:27:5f:26:ce:f5:74:96:bc:
         57:bb:c4:cf:a3:7e:ea:19:85:2f:14:e5:94:fb:85:44:bf:7d:
         94:80:d9:65:1a:c8:43:ce:80:c6:f2:64:dd:ec:5c:1f:fa:17:
         57:ba:ee:37:bb:88:1d:ce:4d:ee:fb:34:8e:bc:34:7c:15:76:
         19:f5:d6:02:e3:b8:3f:67:98:e6:d8:af:4e:38:4a:32:d3:97:
         4d:1a:62:1c:d7:05:14:06:f0:d2:a3:68:5a:6d:50:f3:39:cb:
         73:ea:73:9b:04:a3:58:9f:a8:cf:d4:ab:f6:b9:37:04:c6:40:
         9d:7a:fa:7f:1f:6e:7b:d0:a4:8f:5b:ce:c0:33:0e:6b:35:24:
         cd:95:5f:ce:c7:36:53:14:d4:98:65:cc:2d:73:a3:40:73:af:
         44:4d:22:9a:52:0c:42:a7:8c:30:ea:84:98:00:17:1a:77:cd:
         98:9f:e3:c3:b1:0d:48:dd:ba:05:ff:c9:f0:3a:fa:ad:e3:75:
         b8:f1:83:7b:74:a6:69:90:62:56:97:43:8f:01:e1:97:4a:97:
         ac:7e:d5:27:b3:6c:62:8e:1b:4d:f2:f9:81:f2:f8:1d:3f:67:
         d7:a7:87:5b:1d:ad:2f:4d:0a:00:f9:75:bd:c0:53:8f:ac:86:
         f1:0c:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org