Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/323830313a31633a373830303a3a2f34382d3438203d3e203237383435.roa
File:                     323830313a31633a373830303a3a2f34382d3438203d3e203237383435.roa (raw, json)
Hash identifier:          earmuVaM1g9Ma6f+6ReOTe1DpuqkpqmsFsry8j9If5g=
Subject key identifier:   85:F4:F4:11:6D:46:33:AA:E2:50:92:1D:43:FA:A7:75:6D:22:42:09
Certificate issuer:       /CN=242C1430601FCC8B8B1006AA2B46A28528735333
Certificate serial:       7571F1D696A5821FAC288A44DACE51DFC295BBB8
Authority key identifier: 24:2C:14:30:60:1F:CC:8B:8B:10:06:AA:2B:46:A2:85:28:73:53:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242C1430601FCC8B8B1006AA2B46A28528735333.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/323830313a31633a373830303a3a2f34382d3438203d3e203237383435.roa
Signing time:             Sat 18 May 2024 16:10:00 +0000
ROA not before:           Sat 18 May 2024 16:05:00 +0000
ROA not after:            Sat 17 May 2025 16:10:00 +0000
asID:                     27845
IP address blocks:        2801:1c:7800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/242C1430601FCC8B8B1006AA2B46A28528735333.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/242C1430601FCC8B8B1006AA2B46A28528735333.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242C1430601FCC8B8B1006AA2B46A28528735333.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:71:f1:d6:96:a5:82:1f:ac:28:8a:44:da:ce:51:df:c2:95:bb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=242C1430601FCC8B8B1006AA2B46A28528735333
        Validity
            Not Before: May 18 16:05:00 2024 GMT
            Not After : May 17 16:10:00 2025 GMT
        Subject: CN=85F4F4116D4633AAE250921D43FAA7756D224209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:13:5c:48:65:cc:32:2d:bf:03:91:1b:d7:
                    27:ba:60:e1:dd:0f:aa:d4:2b:53:6e:10:34:d5:63:
                    7e:7d:ed:1e:05:00:fb:70:3d:37:44:78:ea:7c:b4:
                    69:b2:b4:8f:3d:71:3f:52:84:a3:5f:3b:57:2b:7f:
                    6d:33:f5:71:75:66:20:f8:36:cd:1e:d0:c4:02:d8:
                    4d:02:90:bc:b3:63:2b:cf:55:35:2d:a5:14:8f:e0:
                    2d:92:46:9a:57:4a:cf:52:52:03:0b:b3:d2:8b:80:
                    ff:59:45:dd:02:55:6d:33:9c:26:fc:37:e4:13:79:
                    b1:a1:ff:e2:c4:44:42:0d:18:03:b4:95:c3:7f:d1:
                    cb:82:e3:31:c0:c9:c1:79:ec:62:37:9a:4a:92:f2:
                    e1:55:ab:88:88:63:4d:7f:ec:a2:10:7e:a3:06:eb:
                    e5:e6:7f:0a:8a:a0:0f:39:66:01:a5:80:8d:df:a7:
                    c1:ec:a9:58:80:36:af:77:76:0c:ae:00:7d:b4:08:
                    16:4a:80:72:3e:37:d4:c0:e5:3c:f9:17:55:cc:a7:
                    a5:d1:12:0c:a3:91:50:6e:5e:5b:d3:ae:69:fd:2a:
                    12:97:2a:2e:39:3d:e8:14:58:cd:1d:91:3c:a2:6b:
                    ab:90:91:e0:d2:44:9d:a2:f8:03:13:d2:0c:50:4f:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F4:F4:11:6D:46:33:AA:E2:50:92:1D:43:FA:A7:75:6D:22:42:09
            X509v3 Authority Key Identifier:
                keyid:24:2C:14:30:60:1F:CC:8B:8B:10:06:AA:2B:46:A2:85:28:73:53:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/242C1430601FCC8B8B1006AA2B46A28528735333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242C1430601FCC8B8B1006AA2B46A28528735333.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/323830313a31633a373830303a3a2f34382d3438203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:49:8b:d8:fe:1b:8c:74:a5:95:c8:a5:e5:1f:2b:b3:6d:
         7a:3e:b1:13:ac:e7:e7:a5:19:87:96:20:8b:29:99:de:a8:ce:
         10:9d:04:8e:72:47:9a:7f:2d:21:f7:48:d9:a6:d8:e4:9c:d3:
         4e:a9:08:fe:20:9f:96:ce:a9:0a:49:40:8f:45:37:9c:79:56:
         08:1e:b2:4a:6e:77:16:51:2d:91:ae:ef:b6:94:34:c3:5b:12:
         34:f6:8b:24:0d:d0:1d:4c:b4:38:e4:2f:69:98:3a:a7:51:ab:
         0b:ee:0d:bf:66:29:70:60:bb:ec:70:88:2b:78:61:46:5c:b9:
         de:9a:59:bb:b0:19:27:28:7f:4f:67:2a:35:3a:0d:cb:d3:ee:
         52:14:12:07:b4:6c:1c:e6:9a:fb:db:c7:b3:28:d7:c9:c7:a4:
         29:8e:55:eb:3e:ee:9c:39:57:19:b5:f8:32:64:b1:a5:7f:ce:
         00:8b:26:07:37:2b:5e:14:bb:13:f5:79:b8:30:6b:5d:c0:6d:
         56:d2:f6:7d:a1:10:7a:89:d8:ce:71:36:bc:82:07:ed:92:8c:
         14:4a:7b:94:c2:5e:f4:c1:ac:04:f0:e7:30:84:74:f1:e7:aa:
         d9:ae:1b:28:4a:ce:f3:2c:11:c8:f6:7c:e1:55:0c:b7:2f:d8:
         38:68:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 10:53:48 2024 by rpki-client on console-fra.rpki-client.org