Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34382d3439203d3e20323733323432.roa
File:                     323830313a31393a373830303a3a2f34382d3439203d3e20323733323432.roa (raw, json)
Hash identifier:          yCZ6HJRXSA8cbibhUOIoiNdAW8nGW4SdFodB7qR4+0Q=
Subject key identifier:   92:D2:4E:05:04:00:78:BE:E1:8A:A0:15:F2:A7:27:70:48:6E:81:86
Certificate issuer:       /CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
Certificate serial:       1709B6B5859474948725B6E3504043FDF2B800ED
Authority key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34382d3439203d3e20323733323432.roa
Signing time:             Fri 10 May 2024 17:25:00 +0000
ROA not before:           Fri 10 May 2024 17:20:00 +0000
ROA not after:            Fri 09 May 2025 17:25:00 +0000
asID:                     273242
IP address blocks:        2801:19:7800::/48 maxlen: 49

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:09:b6:b5:85:94:74:94:87:25:b6:e3:50:40:43:fd:f2:b8:00:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
        Validity
            Not Before: May 10 17:20:00 2024 GMT
            Not After : May  9 17:25:00 2025 GMT
        Subject: CN=92D24E05040078BEE18AA015F2A72770486E8186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:6c:b5:6c:5c:a2:46:d4:65:d2:db:bb:9d:
                    2c:e3:70:af:62:46:0d:28:c9:ef:a9:4b:51:e7:39:
                    05:70:9e:c4:b7:0b:74:4c:59:41:9b:9d:25:cb:bd:
                    30:75:0c:e1:e0:11:cc:7d:13:a5:fc:6a:5e:8b:c9:
                    f3:50:ba:40:cd:36:74:0a:4e:4e:bb:9e:80:4b:ba:
                    5d:d5:02:7b:1c:27:50:d7:7b:5c:f7:82:77:a5:19:
                    ed:d5:dd:19:4e:a9:da:7c:b7:6f:3a:f4:b4:17:4f:
                    1a:b7:01:c8:1f:51:7f:ba:98:b9:fc:43:57:d2:70:
                    a6:dd:f7:6a:88:b3:fa:0e:61:29:0c:ce:f7:e7:c1:
                    2b:18:67:b2:25:ab:1e:00:93:38:c6:b5:3e:b3:01:
                    f8:a1:96:45:9f:85:db:66:71:4e:3a:51:07:6f:39:
                    21:cd:e5:10:ef:64:11:22:ca:e7:bd:9f:27:19:bb:
                    4a:ac:3d:01:e0:73:69:ae:83:7f:46:9f:bf:72:8b:
                    2a:13:64:c9:50:07:2c:a1:a7:d0:b3:c6:6a:04:73:
                    89:0a:03:f9:de:4d:3e:89:8d:68:84:4c:17:75:a6:
                    ce:fe:ac:ed:c1:ca:95:71:a0:ce:bf:bd:46:f0:5e:
                    31:11:56:a6:17:72:21:b1:bd:bd:c1:bc:de:f0:ce:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:4E:05:04:00:78:BE:E1:8A:A0:15:F2:A7:27:70:48:6E:81:86
            X509v3 Authority Key Identifier:
                keyid:06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/323830313a31393a373830303a3a2f34382d3439203d3e20323733323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:c8:60:ab:e4:25:12:d7:87:6d:7d:6a:f0:c8:4a:0f:46:48:
         c0:08:4d:da:ab:1c:cb:ee:35:75:d1:89:48:c0:85:f9:b8:cb:
         97:70:18:1a:50:36:b9:10:b7:3d:77:be:06:d8:cd:7a:e5:e6:
         cb:c3:9d:d7:dd:68:96:4f:63:75:94:b6:5a:8d:1c:b5:0f:60:
         04:16:96:c7:d3:58:f4:b0:e0:35:b1:4f:ca:4a:2f:6e:5b:f7:
         e1:57:54:6f:22:2b:d9:29:63:3d:be:68:77:db:5d:f6:c6:d9:
         56:55:2e:c7:3a:3b:e7:b5:e3:e3:26:cc:37:0b:4a:d3:88:19:
         54:8a:07:8f:f3:3b:41:9a:b6:0d:a1:e4:7a:05:35:e5:2a:2f:
         94:9c:f8:13:4a:45:51:41:89:92:93:a3:57:bc:ff:96:9c:fb:
         46:0e:24:c5:bc:b9:08:56:ad:7d:db:74:c5:59:c0:f1:90:51:
         3a:dd:47:18:c4:d1:c5:c9:36:32:b5:a7:8b:23:1b:e8:b6:75:
         80:87:8b:ee:b4:9a:0e:2e:4e:f4:83:33:66:02:45:62:64:f7:
         5b:1b:39:ab:74:49:07:1f:30:8c:2d:cb:1b:7a:97:a1:43:6a:
         6a:bd:93:a2:e4:72:42:fb:26:e4:63:9d:8b:28:a2:4d:9e:15:
         c5:0b:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org