Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e20323730323034.roa
File:                     323830313a63343a39353a3a2f34382d3438203d3e20323730323034.roa (raw, json)
Hash identifier:          vG7GlkkC43cITWIrQ+TGTF839m8OWeiv2iG0hHaDETo=
Subject key identifier:   EA:20:A9:F5:5B:54:C7:2A:0D:D5:4E:3B:2C:53:43:C4:32:E5:E5:0B
Certificate issuer:       /CN=75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E
Certificate serial:       387B9F6CF90F865F09A9586854715F0200B2FE26
Authority key identifier: 75:80:6F:8E:B3:68:FC:BB:81:D2:DA:BA:CA:0A:A8:AC:1F:6B:57:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e20323730323034.roa
Signing time:             Tue 05 Mar 2024 18:13:44 +0000
ROA not before:           Tue 05 Mar 2024 18:08:44 +0000
ROA not after:            Tue 04 Mar 2025 18:13:44 +0000
asID:                     270204
IP address blocks:        2801:c4:95::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:9f:6c:f9:0f:86:5f:09:a9:58:68:54:71:5f:02:00:b2:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E
        Validity
            Not Before: Mar  5 18:08:44 2024 GMT
            Not After : Mar  4 18:13:44 2025 GMT
        Subject: CN=EA20A9F55B54C72A0DD54E3B2C5343C432E5E50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b6:c7:50:99:67:52:d8:9a:f8:5e:21:53:18:
                    1c:c3:48:42:8c:4e:65:a1:f9:40:44:e3:92:27:b1:
                    e3:89:3e:8d:9b:31:ad:40:3e:40:1d:80:b5:17:6a:
                    8c:20:fb:ec:74:7f:18:a6:ea:ed:2f:65:79:c4:92:
                    67:01:cb:1b:da:06:d5:cd:bd:bf:91:5d:db:43:32:
                    14:76:99:8b:3d:ca:fe:ef:a3:e3:a8:3c:66:4c:08:
                    1e:0f:4b:2c:a7:36:37:47:dc:2d:14:e1:4a:52:5f:
                    8b:32:0b:c8:3f:60:d2:fa:7a:bf:9b:9c:78:55:2b:
                    2c:d3:2a:4f:35:f8:99:92:58:0f:d3:fe:55:50:f9:
                    c8:f7:37:74:ca:50:ac:ee:bb:4c:fe:a6:a3:8b:0c:
                    b4:ea:ac:7e:a1:7b:35:88:7a:b5:4d:94:47:16:01:
                    8e:87:8b:f3:0b:79:61:c0:a1:34:20:15:ac:1a:96:
                    d9:46:92:6d:e5:fc:69:19:2a:f4:d8:b9:50:16:dd:
                    70:35:95:f3:83:3d:40:6f:ef:74:8a:8f:7b:ef:1b:
                    c2:39:46:3a:66:c7:1f:e2:f3:1d:ed:87:05:55:a2:
                    7d:d8:98:08:b4:61:cc:19:55:d9:c4:7d:59:b9:d7:
                    f1:4a:13:05:ed:8d:51:ce:73:71:52:00:3a:84:1f:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:20:A9:F5:5B:54:C7:2A:0D:D5:4E:3B:2C:53:43:C4:32:E5:E5:0B
            X509v3 Authority Key Identifier:
                keyid:75:80:6F:8E:B3:68:FC:BB:81:D2:DA:BA:CA:0A:A8:AC:1F:6B:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e20323730323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:95::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:cb:29:51:16:4c:cd:aa:08:20:f5:94:13:f0:5d:2a:d2:02:
         e5:6d:a8:58:f3:c4:92:c5:9e:2e:1f:af:55:36:b0:57:d9:9d:
         f8:89:7c:76:59:15:ee:00:29:ca:fd:b6:d0:68:b4:84:dc:b3:
         f6:eb:db:19:d3:35:e5:13:e6:4e:36:ef:94:19:ff:9a:ac:23:
         09:9f:d4:57:4e:3c:64:49:96:8b:fb:97:4b:18:40:92:91:ab:
         3d:a9:c8:ac:65:ad:e3:f3:d8:16:01:c0:d6:67:de:25:40:b9:
         55:1f:ba:f4:69:22:69:17:c6:8f:7b:4b:45:b1:44:9b:01:cc:
         af:96:bb:4c:a1:30:ad:be:2a:6f:7f:1f:1b:19:de:87:7b:a7:
         7e:22:8c:87:da:ea:a8:22:87:78:05:b0:0e:fc:ae:1b:7a:8d:
         0b:2c:64:2b:00:04:5e:1f:d8:fc:8d:cf:c3:d4:9b:59:61:30:
         44:42:13:90:67:e3:af:8b:88:94:f8:b7:8f:e9:97:3c:ab:f0:
         02:76:15:03:4f:07:ed:b0:dc:24:8a:72:91:e9:36:01:ae:9e:
         1a:47:c3:83:b1:c2:2e:9a:a0:80:ac:91:b7:d1:80:48:21:4c:
         55:c5:b2:16:8f:94:27:ba:bd:a4:da:6d:06:38:67:89:ee:5b:
         b6:73:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org