Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa
File:                     323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa (raw, json)
Hash identifier:          U29WLDil20zbxvcKKnQPyYcC5I3Ei4w37HTi2C2wcn8=
Subject key identifier:   C8:09:88:4C:E0:23:12:D6:C2:8B:4D:38:74:BD:82:C9:24:F5:B9:FC
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       46AF2A9CA404AA5485071A6EBB3405A053A9AE3F
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:01:51 +0000
ROA not before:           Tue 05 Mar 2024 17:56:51 +0000
ROA not after:            Tue 04 Mar 2025 18:01:51 +0000
asID:                     8048
IP address blocks:        2801:11:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:af:2a:9c:a4:04:aa:54:85:07:1a:6e:bb:34:05:a0:53:a9:ae:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Mar  5 17:56:51 2024 GMT
            Not After : Mar  4 18:01:51 2025 GMT
        Subject: CN=C809884CE02312D6C28B4D3874BD82C924F5B9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:70:b9:a1:d2:66:96:b8:3e:fd:96:3f:d6:
                    24:88:2e:78:4c:66:3a:7c:7c:a0:cf:9d:ab:72:f5:
                    1a:7a:7b:ab:00:3e:33:3b:45:98:b2:bc:7b:a7:0d:
                    d7:ae:8d:9e:d8:3b:65:50:ee:68:43:d2:bd:32:2d:
                    db:28:f2:bc:66:9c:7c:62:40:e3:4d:1f:fe:c9:21:
                    b6:60:87:1b:8c:60:21:81:f8:fc:28:cb:9f:39:c5:
                    ec:55:e4:2f:66:71:1a:08:38:2c:9e:3b:68:f1:8a:
                    83:be:c2:7e:56:2d:80:08:c5:46:5a:72:a0:8e:86:
                    be:11:24:15:a7:80:59:aa:c7:f3:3c:51:bd:64:01:
                    e3:ba:3b:62:13:d5:65:5c:13:92:08:1e:5b:cb:4b:
                    37:52:fb:94:b1:93:db:b9:e8:71:c3:e3:af:5b:8e:
                    c2:98:07:37:05:cb:19:b6:93:83:51:04:5e:4c:d1:
                    85:34:90:1e:c0:b8:23:2f:55:8c:08:54:77:05:30:
                    19:5b:34:dc:17:3d:31:12:66:98:49:c4:00:34:9b:
                    d3:3d:cd:d1:44:48:ae:8c:b4:42:a8:d3:bb:fe:1f:
                    2c:6f:14:10:f2:1d:d9:41:c5:0e:99:ef:48:9c:fb:
                    70:a6:c0:a9:06:25:38:6d:0c:3b:06:ec:60:5b:ca:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:09:88:4C:E0:23:12:D6:C2:8B:4D:38:74:BD:82:C9:24:F5:B9:FC
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/323830313a31313a613030303a3a2f34382d3438203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:03:75:de:49:67:1a:6d:24:07:60:0c:44:cf:d9:0f:43:01:
         0b:bb:02:75:d3:30:2c:11:3a:fa:cf:c6:ed:22:77:a9:e2:66:
         ee:cd:06:41:64:6e:a0:69:51:00:30:06:4e:f9:ee:52:f5:81:
         56:bb:9b:86:b2:9f:f0:1b:e7:64:e4:e6:00:e9:3f:f8:0d:96:
         30:25:26:1c:b9:27:d9:a5:9c:4e:5e:9b:f6:0d:57:9b:c3:15:
         e2:58:39:8d:e5:c3:5b:d9:86:9a:30:01:bf:ea:8f:26:fa:76:
         20:a1:5a:f4:06:44:b4:6e:37:72:b1:72:5b:d6:2f:00:f2:7e:
         fa:99:ed:df:e9:af:d7:c5:51:db:69:af:67:57:9d:46:a7:75:
         6d:61:67:f4:70:60:2b:f3:fe:17:00:19:5a:ef:69:f1:35:3f:
         16:01:2a:63:4b:fe:fc:ee:6e:de:7b:a7:be:e9:2f:d4:70:21:
         92:a2:f2:dd:9f:16:24:ca:2b:ca:9d:07:f7:84:09:ac:46:02:
         a9:d3:bb:41:cb:78:a1:9a:96:7b:12:a6:63:f5:db:f6:ce:ab:
         99:9a:71:34:f2:12:1c:72:2c:de:3d:58:8d:8f:cb:8e:d4:28:
         00:12:1a:9c:57:9e:3f:bb:ad:0a:42:a2:be:55:38:48:f9:f9:
         cb:7b:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:39:57 2024 by rpki-client on console-ams.rpki-client.org