Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa
File:                     323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa (raw, json)
Hash identifier:          d+l1L+V//9cGDEhf0yVeNWeS6IsCWH9F8PAwJ6UgmFg=
Subject key identifier:   D9:6F:F1:F4:04:D4:10:F8:F6:DC:1E:00:32:33:67:6E:44:F7:17:6F
Certificate issuer:       /CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
Certificate serial:       2E290B86B31724B29B52707E69244057620D9A57
Authority key identifier: 4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa
Signing time:             Tue 05 Mar 2024 18:00:35 +0000
ROA not before:           Tue 05 Mar 2024 17:55:35 +0000
ROA not after:            Tue 04 Mar 2025 18:00:35 +0000
asID:                     262201
IP address blocks:        2801:0:290::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 09:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:29:0b:86:b3:17:24:b2:9b:52:70:7e:69:24:40:57:62:0d:9a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
        Validity
            Not Before: Mar  5 17:55:35 2024 GMT
            Not After : Mar  4 18:00:35 2025 GMT
        Subject: CN=D96FF1F404D410F8F6DC1E003233676E44F7176F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:f0:40:ab:29:5f:f5:1e:81:52:4c:22:a3:
                    da:90:16:36:60:26:69:27:ba:19:a4:71:e6:9a:55:
                    d2:86:1b:63:a1:3d:92:c5:ba:43:70:5e:f6:3b:7f:
                    56:89:e6:67:5e:95:ed:76:14:0f:25:e8:c8:e1:60:
                    6f:4b:48:b0:b2:e4:c7:d8:ff:4d:21:76:da:01:6e:
                    36:01:07:22:22:64:5e:c8:6c:59:25:49:0f:2c:32:
                    d2:a5:6d:8e:27:e2:3e:cf:48:52:52:47:ab:2e:42:
                    44:62:4f:bd:16:57:d6:9b:27:18:e2:e2:00:fa:4d:
                    f6:72:03:09:4a:5f:c1:6d:4f:0a:2f:f9:c3:b9:53:
                    f4:c3:32:81:02:56:fd:6a:4d:88:a2:99:13:d5:7b:
                    31:81:7a:b2:88:03:99:85:53:7c:9d:7f:5c:e2:f3:
                    5e:7f:8e:1a:1f:51:71:30:d4:6b:b6:d7:89:0f:84:
                    fb:46:16:56:99:de:89:56:05:7f:10:df:5a:94:ee:
                    3d:94:52:0c:c3:b9:23:66:77:70:9f:2b:a7:e1:ee:
                    4f:2f:0f:18:dd:91:64:4e:0e:08:70:f1:3b:0e:7a:
                    96:a8:b1:7a:51:73:93:24:3f:a5:c6:3f:c3:de:f2:
                    b1:44:c2:0f:41:99:1c:05:c3:f5:3f:d3:22:56:96:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:F1:F4:04:D4:10:F8:F6:DC:1E:00:32:33:67:6E:44:F7:17:6F
            X509v3 Authority Key Identifier:
                keyid:4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:290::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:94:11:ef:5d:ed:6e:66:2b:82:6c:00:b0:d8:61:39:75:
         75:ca:1e:53:a1:f1:fc:82:dd:06:f3:0a:62:7c:6b:7b:74:3c:
         70:8d:94:00:73:17:bb:71:e1:0c:04:2a:b5:82:aa:94:91:b8:
         fc:ee:ef:20:86:f3:dc:5e:38:f9:7f:27:ec:7a:2c:de:38:94:
         c5:f0:b0:4b:03:d2:5a:0f:90:60:59:62:34:07:94:26:1f:88:
         5f:ed:2f:c8:43:af:a1:3d:21:aa:47:0e:6b:8d:20:f7:7c:bf:
         1a:f0:40:67:07:e1:6d:1c:59:1f:e7:2c:07:42:c9:6c:82:8a:
         eb:9a:c7:72:6e:da:73:68:37:f7:0b:b1:8f:f9:0c:46:10:c5:
         f1:a1:f4:25:d1:df:19:29:48:04:94:ff:28:4a:d2:1f:26:6a:
         c6:40:21:05:32:ac:fc:0b:24:55:02:c3:09:75:7e:58:82:d6:
         5f:23:e4:fa:9f:b6:6d:92:1e:7b:0d:1e:7c:28:39:00:e5:f4:
         69:2d:fe:34:a8:b7:94:43:20:42:01:c2:97:24:f9:d9:ff:1b:
         10:2a:b2:73:3f:53:2d:cd:5f:57:fc:68:63:f4:27:db:76:12:
         bb:38:3d:77:d6:a2:d7:bd:6b:b8:bc:06:71:22:aa:f7:06:48:
         46:ef:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:23:21 2024 by rpki-client on console-ams.rpki-client.org