Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3437203d3e203238303030.roa
File:                     323830313a3136353a3a2f34342d3437203d3e203238303030.roa (raw, json)
Hash identifier:          jLzmsvboIFkYdVON4phhEoTnXZhBQl34Drn8BTdBjr4=
Subject key identifier:   F3:BE:51:D6:55:66:DD:3B:A3:29:BE:9C:B0:10:78:33:BD:97:8D:98
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       798F38A234576FC4D5500C6C6E2DC251CB68CC92
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3437203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 18:45:00 +0000
ROA not before:           Tue 05 Mar 2024 18:40:00 +0000
ROA not after:            Tue 04 Mar 2025 18:45:00 +0000
asID:                     28000
IP address blocks:        2801:165::/44 maxlen: 47

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8f:38:a2:34:57:6f:c4:d5:50:0c:6c:6e:2d:c2:51:cb:68:cc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Mar  5 18:40:00 2024 GMT
            Not After : Mar  4 18:45:00 2025 GMT
        Subject: CN=F3BE51D65566DD3BA329BE9CB0107833BD978D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:73:f1:d8:dc:95:2f:86:11:97:d5:87:e3:
                    45:06:40:03:e5:a5:7c:e3:c8:2d:4e:d7:94:a2:aa:
                    29:1e:47:46:b8:22:8b:31:68:8c:d7:45:2a:c7:a2:
                    ee:f9:9c:c5:83:8d:0a:f3:e6:da:7a:10:d3:72:c9:
                    2d:90:c4:35:90:f2:34:b2:b4:11:d5:ce:33:12:95:
                    47:95:f4:bd:05:55:78:d1:20:f8:44:03:4a:b5:3b:
                    39:50:a8:2a:ac:f6:91:d2:50:a7:62:1f:00:57:18:
                    4c:34:bb:3d:52:81:f7:f2:82:28:46:90:2a:98:8a:
                    d1:65:69:b6:d0:e7:98:4a:83:d9:cd:4d:78:2a:45:
                    12:da:a3:31:48:eb:19:a7:c6:44:f0:5a:83:92:d6:
                    b6:93:39:12:de:66:9a:24:ef:ae:dd:05:47:2e:8e:
                    56:85:63:48:88:79:94:46:b8:63:44:1a:8c:37:ae:
                    11:a1:ea:10:7f:42:b3:b5:8e:56:e6:56:82:b6:0e:
                    ef:a3:08:ac:cf:02:93:7f:53:39:7d:17:41:24:5c:
                    d9:28:aa:99:89:44:08:e9:d7:97:38:f0:3b:1d:09:
                    20:28:36:59:62:20:bd:50:62:60:89:47:10:ff:9e:
                    5f:68:e1:88:24:f7:76:e2:76:9c:92:20:fd:e6:af:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BE:51:D6:55:66:DD:3B:A3:29:BE:9C:B0:10:78:33:BD:97:8D:98
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3437203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:45:61:b7:5e:59:83:5f:cb:c6:45:6c:71:42:be:3f:59:7c:
         83:9f:1d:b0:e1:33:af:ed:54:4a:3c:d1:d2:4f:03:d4:da:66:
         0c:9b:b4:ca:77:e6:c1:3a:a8:f0:3f:d4:d8:b0:df:5a:d8:d9:
         22:14:4f:be:e7:e2:c1:29:47:2f:5b:a5:d6:61:75:f4:61:fe:
         d1:62:13:76:0d:d5:b6:d8:6e:52:b2:20:d5:a4:36:d0:57:8b:
         ea:ab:b9:82:c0:cc:97:db:25:e6:18:8f:41:d0:15:cb:a5:df:
         08:e7:3a:31:c7:d3:88:f8:ab:3f:3a:58:01:14:9f:5c:dd:d4:
         29:37:aa:62:49:61:05:df:0c:67:cc:6b:7d:96:4f:8e:c9:4d:
         28:8a:0e:9b:df:2e:a3:b4:a0:51:8f:58:a9:3c:f2:95:90:38:
         3e:96:46:28:29:bd:e3:d3:de:96:5e:62:b6:c4:b1:63:7a:73:
         43:bf:26:1d:b9:cc:a1:82:b5:ec:01:b2:9d:24:59:8e:a3:d7:
         46:6a:19:ca:00:73:c0:07:31:6e:19:43:13:89:25:f4:f1:07:
         8e:fb:20:13:01:b7:5a:81:52:d2:22:ec:a3:23:01:af:1a:fe:
         28:f9:e3:1b:2e:64:eb:29:ad:fd:78:f3:c6:92:10:5a:b4:13:
         d9:68:ef:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org