Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa
File:                     323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa (raw, json)
Hash identifier:          7jH+v6eLM7Cemlmkob4a2U5n1peqPdnUfUxgqTNtAlk=
Subject key identifier:   EE:89:02:32:34:15:84:61:AC:8B:AF:74:71:9A:8B:6B:02:FE:7A:2B
Certificate issuer:       /CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
Certificate serial:       22FB17FEA69192CB959AD06C2BC022CE01A8C8BA
Authority key identifier: C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa
Signing time:             Tue 05 Mar 2024 18:23:02 +0000
ROA not before:           Tue 05 Mar 2024 18:18:02 +0000
ROA not after:            Tue 04 Mar 2025 18:23:02 +0000
asID:                     262212
IP address blocks:        2801:0:270::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fb:17:fe:a6:91:92:cb:95:9a:d0:6c:2b:c0:22:ce:01:a8:c8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
        Validity
            Not Before: Mar  5 18:18:02 2024 GMT
            Not After : Mar  4 18:23:02 2025 GMT
        Subject: CN=EE89023234158461AC8BAF74719A8B6B02FE7A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:ff:6a:32:44:6c:b6:fa:8e:d3:8a:bf:ab:
                    08:6e:98:d2:3a:03:6f:c0:5f:f8:fa:c7:8f:7c:f9:
                    ef:34:0f:d2:8a:99:86:0e:f6:d0:4f:7c:8f:c7:d2:
                    39:02:2c:33:b0:cb:92:00:73:e3:07:37:dd:c3:7f:
                    fa:17:0a:50:89:7c:59:c5:c3:9e:91:f1:bd:b3:3f:
                    25:2c:d4:c9:b6:c0:23:19:20:bc:67:11:ca:5c:85:
                    0e:3b:58:35:12:16:59:74:94:23:d1:f3:55:01:0d:
                    41:c6:99:ce:04:26:28:f6:d8:50:d8:e0:8e:38:88:
                    c7:b0:e2:13:35:27:f4:31:03:17:d8:ad:4f:dc:20:
                    82:05:f9:0d:e6:25:51:da:fd:ae:81:27:83:4d:6a:
                    1b:73:3d:ba:58:fc:90:f0:8d:dd:f6:f9:cc:79:6e:
                    ae:25:96:6c:e2:a8:78:dc:9c:8f:a5:cb:c4:6d:11:
                    43:e8:1d:22:08:ba:c4:dd:78:5b:39:ea:0f:a2:0b:
                    db:e2:bd:58:0f:c5:b1:c8:ad:75:18:c3:bb:13:3b:
                    bd:8a:3b:e0:10:88:fc:a0:ec:6e:e4:84:98:42:e5:
                    e5:9c:30:3d:d3:af:e9:24:6c:bc:b5:f2:b3:6f:76:
                    c2:31:a8:17:46:80:1e:5a:81:ac:c4:ef:f2:9f:ba:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:89:02:32:34:15:84:61:AC:8B:AF:74:71:9A:8B:6B:02:FE:7A:2B
            X509v3 Authority Key Identifier:
                keyid:C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/323830313a303a3237303a3a2f34382d3438203d3e20323632323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:270::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:30:2d:b7:b4:fb:b7:5e:54:ec:ef:f9:e2:37:cf:ab:9d:68:
         b7:89:41:c2:f1:84:f6:37:c2:17:9c:65:77:de:e8:ba:7c:b2:
         ee:46:03:31:cc:a4:ca:c9:c2:39:f1:51:2d:a1:2f:9c:fb:dd:
         75:45:80:b4:60:f6:5e:5b:a7:d7:c6:8f:6b:3d:23:3d:87:d6:
         bc:e9:f9:29:1f:a5:b9:3a:64:02:42:21:3d:00:17:7a:9f:50:
         04:55:92:db:c2:36:90:b6:1c:a2:28:ba:47:6c:42:d7:91:5f:
         3d:42:26:3a:fd:96:32:d5:2e:95:b5:31:23:c8:6e:d8:a3:9e:
         6b:50:82:e7:ae:87:aa:4d:c0:f6:9a:51:2d:4d:cc:7a:4d:d5:
         df:46:f2:5d:9c:69:98:c7:ed:7b:1e:d2:5a:c0:be:4e:6e:9c:
         1a:98:3b:8c:b0:9c:ad:3a:a5:ba:cf:de:7a:c8:50:49:10:c2:
         d3:50:a3:d0:14:4e:4f:13:da:fd:e7:4f:bb:e1:ab:a2:c0:b1:
         e4:63:d5:56:29:a0:b1:52:80:49:89:62:b5:95:45:4c:6a:ce:
         6e:4b:be:c4:f0:1a:7d:aa:aa:b1:51:34:3b:cd:48:82:9a:d8:
         e4:6a:3d:dc:5d:5b:5a:cf:6d:71:64:89:a0:be:26:9a:73:3b:
         a3:5e:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:12 2024 by rpki-client on console-ams.rpki-client.org