Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/323830313a31623a393030303a3a2f34382d3438203d3e20323634373239.roa
File:                     323830313a31623a393030303a3a2f34382d3438203d3e20323634373239.roa (raw, json)
Hash identifier:          yocC5BEc2upNLpzwMzQ6b3tloHpXFKwhP85CFLwoUis=
Subject key identifier:   93:1C:27:BE:8C:83:CC:E0:4B:FB:D3:0E:8B:A0:DF:39:2C:52:52:EE
Certificate issuer:       /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial:       215EBCFF47B5CC0E2B3BA703F23B5EA19602325B
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/323830313a31623a393030303a3a2f34382d3438203d3e20323634373239.roa
Signing time:             Tue 05 Mar 2024 17:47:07 +0000
ROA not before:           Tue 05 Mar 2024 17:42:07 +0000
ROA not after:            Tue 04 Mar 2025 17:47:07 +0000
asID:                     264729
IP address blocks:        2801:1b:9000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5e:bc:ff:47:b5:cc:0e:2b:3b:a7:03:f2:3b:5e:a1:96:02:32:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
        Validity
            Not Before: Mar  5 17:42:07 2024 GMT
            Not After : Mar  4 17:47:07 2025 GMT
        Subject: CN=931C27BE8C83CCE04BFBD30E8BA0DF392C5252EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:a5:09:2f:39:1d:36:11:eb:c8:de:3d:b0:
                    40:bc:88:57:fc:da:36:95:ba:b4:8f:2b:0f:c2:52:
                    87:a0:2b:e5:0b:89:ab:f8:69:82:9a:84:9f:e5:d0:
                    9a:88:4d:51:79:a1:d9:55:01:8c:f2:9f:96:52:ea:
                    dd:41:bb:dc:a4:f5:79:2e:13:c8:90:59:4b:20:b8:
                    ec:e7:d0:0d:37:1f:97:a5:aa:c9:e9:31:02:ec:14:
                    b4:4e:89:c0:4d:ec:6d:15:c6:df:47:05:31:46:62:
                    09:56:e2:e4:c7:40:a1:42:8c:9d:46:a4:52:3c:36:
                    61:b1:85:5c:7d:06:0f:3a:7b:01:33:f5:a8:35:8d:
                    bc:86:29:93:11:61:03:6b:93:7b:1e:fb:2d:92:6e:
                    eb:9b:cd:bf:cf:6d:51:74:b9:4b:49:42:79:15:6c:
                    12:de:17:40:21:8e:24:a2:1f:6f:3c:4f:53:d7:20:
                    69:5e:f1:15:44:9a:27:10:0c:9d:e8:e1:01:e0:9b:
                    ee:2f:d8:45:79:86:f7:82:e0:a2:08:97:d8:0f:df:
                    b0:d8:3e:f5:78:4f:ac:65:77:b9:8d:e2:94:59:32:
                    62:4b:77:0c:86:e0:67:58:55:54:6f:45:2f:86:6b:
                    ff:ab:3f:65:ca:2b:0d:34:44:ad:0e:fd:70:d6:81:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1C:27:BE:8C:83:CC:E0:4B:FB:D3:0E:8B:A0:DF:39:2C:52:52:EE
            X509v3 Authority Key Identifier:
                keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/323830313a31623a393030303a3a2f34382d3438203d3e20323634373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:af:7c:e8:39:75:6c:62:98:71:2c:d4:02:a9:5f:f0:77:
         d9:40:dd:a2:e5:71:da:bd:11:55:df:fe:1a:23:9c:ed:ec:36:
         cb:81:5f:97:a2:25:ef:d3:7b:f4:0f:10:b4:88:5d:cc:a9:da:
         f4:a4:49:16:75:ba:35:b9:41:2b:39:58:a0:c4:89:45:5b:8e:
         4c:af:5d:a0:4c:06:fa:4a:6d:9b:5c:34:33:97:f9:18:bf:1f:
         cb:3c:0c:56:fb:c4:81:82:77:89:ee:07:37:83:c8:31:6a:4a:
         92:9a:f9:f1:91:e0:b5:6a:ca:29:3b:91:f8:0b:2d:14:37:ca:
         06:d9:1b:e9:d2:33:37:3d:a7:dc:4f:ec:4b:6b:b9:33:c3:a9:
         42:e8:e0:33:2c:c7:88:78:fc:6c:56:d5:27:f4:79:d8:3b:c9:
         38:40:ca:a9:8f:44:89:39:cb:b2:45:66:72:40:7f:33:1c:89:
         c1:f5:62:dd:22:87:88:36:76:91:da:68:a8:a5:8e:d6:ec:12:
         0d:73:fa:4d:3d:f0:87:4f:d6:5b:fe:ac:3f:c1:3d:b8:98:7a:
         41:71:5e:e3:cf:e1:04:5a:06:5e:73:ac:6c:fd:e4:e2:2e:bc:
         7f:63:6d:a5:77:1c:35:2a:f6:dc:71:ae:26:36:2d:51:3d:46:
         0c:4b:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org