Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa
File:                     323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa (raw, json)
Hash identifier:          Dg1s7rd8+qU8pH0jqkOEmCnA82o5Gy3DK7Oibxml4Rk=
Subject key identifier:   1E:E2:FA:50:42:FD:0C:14:A7:74:8B:55:D7:A4:B3:A4:64:89:FF:2F
Certificate issuer:       /CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
Certificate serial:       0958BA16D9C48CC06CB886D9EB904C8A57A75670
Authority key identifier: B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa
Signing time:             Tue 05 Mar 2024 17:47:42 +0000
ROA not before:           Tue 05 Mar 2024 17:42:42 +0000
ROA not after:            Tue 04 Mar 2025 17:47:42 +0000
asID:                     273027
IP address blocks:        2801:1ba:e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:58:ba:16:d9:c4:8c:c0:6c:b8:86:d9:eb:90:4c:8a:57:a7:56:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
        Validity
            Not Before: Mar  5 17:42:42 2024 GMT
            Not After : Mar  4 17:47:42 2025 GMT
        Subject: CN=1EE2FA5042FD0C14A7748B55D7A4B3A46489FF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:89:72:37:5a:92:0c:75:65:09:8b:7d:0e:
                    e9:28:02:f8:2e:e5:43:54:dc:f4:f0:d6:9b:4c:db:
                    00:f2:5e:46:0f:6e:6c:d6:bb:ae:30:3b:5c:81:61:
                    ba:0f:d4:08:ce:53:ed:c8:72:22:8a:cb:51:36:9d:
                    bc:47:2c:7a:cc:03:3a:87:5d:c7:ba:7b:35:0a:5c:
                    9e:32:5c:ec:92:35:e2:50:41:e3:4d:41:6e:04:79:
                    89:dd:d0:ec:fa:99:a0:ee:d8:76:9d:75:f0:57:67:
                    37:ee:91:41:8a:bb:08:c1:a3:2f:6e:9c:87:0e:68:
                    74:eb:40:c4:38:b6:83:83:0e:91:fc:3f:90:da:f8:
                    cd:52:7d:36:e4:4d:59:64:48:4d:0b:8f:e4:1e:c7:
                    19:88:70:c6:e6:0e:81:89:a8:b3:dd:83:ef:d5:f5:
                    8a:88:31:b2:6b:d2:bf:67:3e:91:2c:a5:d0:39:0a:
                    57:2b:17:ce:fd:b7:f6:ae:0f:ba:c7:a9:c0:0f:47:
                    a2:a0:6f:bc:a1:1d:69:d1:f2:a1:68:9c:ca:1a:b0:
                    8f:a3:2d:70:66:8a:99:df:d1:ed:6a:14:a9:39:f6:
                    e0:cd:dc:93:4d:ed:b8:9c:84:0e:3f:bf:c5:02:2d:
                    42:a7:33:37:ac:bd:b4:77:ce:ee:56:96:ef:f1:9b:
                    69:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E2:FA:50:42:FD:0C:14:A7:74:8B:55:D7:A4:B3:A4:64:89:FF:2F
            X509v3 Authority Key Identifier:
                keyid:B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/323830313a3162613a65303a3a2f34382d3438203d3e20323733303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ba:e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:42:02:2f:64:f0:06:00:fd:7d:30:01:2a:9b:af:6f:7d:c9:
         db:5e:a7:09:09:c6:8b:28:ea:e1:05:1b:f9:6a:9f:5d:e4:70:
         6e:6f:59:fd:03:d5:d0:41:d8:82:76:05:ed:d6:9a:b9:72:d3:
         15:2b:2f:e3:2b:83:9e:ec:b9:15:a3:44:36:9d:04:3b:e5:82:
         79:93:d0:7a:ee:1a:3f:57:44:03:8e:fa:a0:24:6f:27:f1:5c:
         34:56:a1:f5:c5:5e:3b:25:63:17:3d:f1:09:9e:95:df:a0:2e:
         c1:9d:f3:f3:fa:6c:23:ca:33:47:95:5b:5e:c8:72:0a:d8:31:
         82:ca:54:a1:96:c0:f2:c8:35:57:01:44:d5:39:29:99:8d:31:
         0a:5a:5e:bc:4c:05:c1:22:90:61:20:17:1d:b8:65:64:77:83:
         bd:5b:08:c9:22:93:3d:15:46:ab:2f:73:dd:5a:36:57:73:d7:
         44:e7:92:3e:bf:61:fd:42:48:25:55:5b:eb:02:1a:e7:7f:54:
         5d:31:c8:11:38:82:bb:39:1a:70:a0:64:e2:43:62:68:f2:73:
         5c:32:79:b2:2c:6c:c4:8f:47:23:4c:dd:ee:2f:11:8e:ab:f6:
         93:44:94:0f:6e:15:03:cd:e4:bf:9c:71:62:2a:78:65:ad:eb:
         49:43:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org