Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e2030.roa
File:                     323830313a63343a39353a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          CaHoUWdu6Z41UIIBcLd3aPV0B1uUVeYujBGAo7+a2QM=
Subject key identifier:   77:0D:44:C8:D7:B6:17:E6:20:86:40:75:6F:68:3F:3B:84:23:DB:70
Certificate issuer:       /CN=75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E
Certificate serial:       5A6D6CBF7E8FFAEF260988F83F09D79CE0D6162F
Authority key identifier: 75:80:6F:8E:B3:68:FC:BB:81:D2:DA:BA:CA:0A:A8:AC:1F:6B:57:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e2030.roa
Signing time:             Tue 05 Mar 2024 18:13:44 +0000
ROA not before:           Tue 05 Mar 2024 18:08:44 +0000
ROA not after:            Tue 04 Mar 2025 18:13:44 +0000
asID:                     0
IP address blocks:        2801:c4:95::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6d:6c:bf:7e:8f:fa:ef:26:09:88:f8:3f:09:d7:9c:e0:d6:16:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E
        Validity
            Not Before: Mar  5 18:08:44 2024 GMT
            Not After : Mar  4 18:13:44 2025 GMT
        Subject: CN=770D44C8D7B617E6208640756F683F3B8423DB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:e8:5e:d7:f6:a7:1c:07:fb:f9:5e:e5:c7:
                    b3:73:7b:6f:28:fc:fe:ae:b6:72:f5:2f:a3:1f:75:
                    3e:77:cd:8c:25:2c:9a:9c:98:8f:bf:6a:9c:04:7f:
                    34:a6:f4:99:98:3d:87:99:73:8c:e3:0a:d3:20:5c:
                    04:70:01:87:b3:4b:0c:d0:33:12:41:13:25:19:4c:
                    c5:7f:48:6d:5c:14:00:9b:6c:62:17:fa:ae:15:a2:
                    fd:3b:b1:bc:48:81:9a:4c:20:94:7d:08:7e:29:30:
                    35:98:c9:3a:0e:8d:8d:d4:99:8e:cf:1c:e0:6e:f6:
                    fc:70:e8:2a:5b:6a:c9:1a:5b:af:9f:2c:5a:99:32:
                    c0:94:7d:ac:0e:9a:c5:08:c3:3b:26:dd:e8:ae:4a:
                    8c:73:17:db:13:c1:fd:8a:18:37:fb:89:cb:97:b9:
                    8b:62:0c:c3:52:c5:28:a5:7f:c3:f1:ec:26:e9:6b:
                    79:dd:4b:df:2e:00:2e:b2:a7:b0:23:60:9d:bb:73:
                    9f:15:2a:99:3f:ef:d1:6d:c4:d5:84:24:a4:2f:ac:
                    43:03:66:c8:c4:18:2b:cf:aa:4b:83:88:c0:9e:e6:
                    a8:88:82:bd:a3:8f:60:d4:bf:47:b5:c5:e4:8a:ad:
                    fe:73:3b:ec:fc:8c:57:33:40:ba:ca:0e:0e:08:9b:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0D:44:C8:D7:B6:17:E6:20:86:40:75:6F:68:3F:3B:84:23:DB:70
            X509v3 Authority Key Identifier:
                keyid:75:80:6F:8E:B3:68:FC:BB:81:D2:DA:BA:CA:0A:A8:AC:1F:6B:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:95::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:72:ea:b4:38:d0:35:3b:7d:9f:cf:6f:4c:7b:1e:df:1f:
         48:96:d0:c2:9f:2b:eb:3f:b4:a8:25:e1:8c:ad:94:aa:3f:07:
         f6:87:1a:2f:a8:38:76:63:fa:95:23:fc:dd:0d:2b:2f:6a:26:
         5f:41:bc:9d:97:ab:19:ae:51:88:3f:2b:b6:fc:ae:f0:6b:d3:
         26:13:dc:92:b5:4d:4b:d5:d4:b0:d0:6d:4f:fe:b3:e6:15:4c:
         a0:10:d6:73:f9:e0:f8:72:16:ff:f6:28:2b:b1:a2:53:d0:63:
         12:8b:3f:ce:ef:f5:63:b8:89:a4:db:4c:52:6b:50:22:bb:04:
         92:5d:21:14:93:ec:7f:7d:33:fa:56:41:44:e7:16:47:df:66:
         cc:93:c6:f6:9d:f6:29:2c:a7:41:7e:f3:0b:e5:5e:a2:9b:43:
         da:c3:a2:0b:24:e5:56:8c:d5:f9:5a:5b:ce:9c:2b:4d:ee:31:
         d7:f4:1d:d8:bc:26:e5:b1:9f:77:3e:15:44:48:00:e3:95:87:
         f5:d1:53:a6:c4:df:fd:e4:66:15:42:f0:cc:94:3d:4a:79:94:
         3f:ad:5f:fd:36:45:b2:6a:45:74:f2:f7:7f:fb:c2:47:13:0a:
         7b:72:cf:94:e0:92:05:62:62:ad:a4:fc:e6:68:1c:0f:87:38:
         21:5b:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org