Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa
File:                     323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa (raw, json)
Hash identifier:          /UH9vWiGAPEF8eS++Oska4MZabFLnaW0NzY4V2TEktk=
Subject key identifier:   E1:7E:54:FE:23:4A:B9:17:94:0C:CD:7E:7A:29:1D:39:81:C3:5A:0B
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       3AECE5FA999FB8FED87A287D920F67730F205CB9
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa
Signing time:             Tue 05 Mar 2024 18:01:50 +0000
ROA not before:           Tue 05 Mar 2024 17:56:50 +0000
ROA not after:            Tue 04 Mar 2025 18:01:50 +0000
asID:                     61471
IP address blocks:        2801:11:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ec:e5:fa:99:9f:b8:fe:d8:7a:28:7d:92:0f:67:73:0f:20:5c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Mar  5 17:56:50 2024 GMT
            Not After : Mar  4 18:01:50 2025 GMT
        Subject: CN=E17E54FE234AB917940CCD7E7A291D3981C35A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:35:56:15:e2:05:a6:15:04:c8:42:6d:1c:
                    71:bd:6c:ea:b5:e9:ec:62:cc:20:0c:d9:50:b0:9b:
                    e5:01:ab:e2:52:21:3b:39:2e:d7:48:c0:c4:b1:ab:
                    84:69:4f:1d:16:ee:47:05:d5:93:22:a8:73:33:8f:
                    7a:40:8f:b7:f0:d1:d4:0f:c1:1c:38:96:22:5b:7c:
                    80:aa:ec:11:d7:8f:ac:cc:f1:cf:a8:b5:5d:c7:2a:
                    12:5a:93:e4:73:b4:46:fd:00:da:81:77:ba:88:d9:
                    ad:f9:1a:e2:2b:bc:bb:ac:05:65:e9:53:55:2c:0d:
                    41:30:91:fb:3c:7d:4c:f1:8a:c8:61:b7:26:5c:14:
                    67:ab:a5:bb:af:e9:82:77:ce:0d:d8:e2:68:eb:05:
                    f9:b3:71:36:b5:77:fa:60:ca:ef:f3:4e:50:e5:57:
                    19:f6:c5:97:0d:37:0d:31:8b:76:cd:04:e8:a2:5e:
                    f4:f7:3a:49:77:d0:e8:a3:ec:4e:03:3c:10:41:37:
                    d1:52:b7:0b:c8:71:02:1a:98:a9:06:2c:fb:5d:f3:
                    e0:6a:79:8c:fd:96:cf:cd:4b:28:1c:11:2e:3e:5e:
                    ca:a8:f0:19:b1:b5:0f:c2:e5:60:ae:4a:5c:65:0c:
                    00:92:0d:cd:ba:bc:9f:0c:a8:b8:c0:ee:9f:b5:8c:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:54:FE:23:4A:B9:17:94:0C:CD:7E:7A:29:1D:39:81:C3:5A:0B
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e203631343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:d0:35:43:81:d9:33:cf:1b:7a:11:f9:1e:60:a4:23:7b:
         84:a5:31:b5:f9:95:98:df:af:dc:47:ec:1d:7d:08:4d:8e:c1:
         d6:b8:ca:02:fe:a3:c8:81:9d:cf:f4:e5:1f:9d:27:c4:27:a1:
         cf:19:f6:bb:6a:f3:41:98:98:fc:cc:bb:7f:06:5c:8a:81:c9:
         88:13:d0:b1:54:8c:33:77:36:23:8d:75:40:1c:8b:18:d8:d7:
         4c:6a:95:ef:e4:3e:b0:48:7b:57:65:47:53:2b:4e:3e:9f:4a:
         c1:6a:b8:48:9f:3b:4f:d5:69:8c:e3:b9:95:c1:14:0e:4c:fc:
         54:b5:35:d9:c7:c3:99:d3:8e:55:55:be:5d:31:6d:2e:54:74:
         1c:d2:44:e9:03:aa:af:bb:d6:06:04:c2:d1:66:2a:a7:7c:79:
         bd:10:54:0a:86:0a:fa:8c:6f:db:e6:be:95:db:d3:58:c9:00:
         98:55:e0:65:71:5c:11:93:1f:ef:f4:56:ee:5d:b3:f3:22:43:
         c3:90:a1:e2:ac:d9:82:ff:e0:cf:2e:ef:ed:30:d4:8d:1e:b4:
         82:c0:08:1f:09:95:a1:d4:ef:b8:b7:92:ae:cb:12:51:06:7e:
         2b:50:51:11:73:b9:77:62:be:cb:a1:f8:fa:5d:67:5e:b2:b1:
         da:53:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:05 2024 by rpki-client on console-ams.rpki-client.org