Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323632353839.roa
File:                     323830313a3161653a3a2f34342d3434203d3e20323632353839.roa (raw, json)
Hash identifier:          20hAHH1EagzfMpWHJI4sGlYG+IUG7qurTP5+J26W88w=
Subject key identifier:   31:F9:0C:B7:80:E3:6A:B2:C6:7A:27:92:C5:1B:B9:A9:EE:0E:DE:69
Certificate issuer:       /CN=CF477A09FD00FCC1096160610330797C70454FCB
Certificate serial:       788EC6D4DCE0ACD0ADE9ACDC4AC02BC3431A41E2
Authority key identifier: CF:47:7A:09:FD:00:FC:C1:09:61:60:61:03:30:79:7C:70:45:4F:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF477A09FD00FCC1096160610330797C70454FCB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:21:24 +0000
ROA not before:           Tue 05 Mar 2024 18:16:24 +0000
ROA not after:            Tue 04 Mar 2025 18:21:24 +0000
asID:                     262589
IP address blocks:        2801:1ae::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/CF477A09FD00FCC1096160610330797C70454FCB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/CF477A09FD00FCC1096160610330797C70454FCB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF477A09FD00FCC1096160610330797C70454FCB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8e:c6:d4:dc:e0:ac:d0:ad:e9:ac:dc:4a:c0:2b:c3:43:1a:41:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF477A09FD00FCC1096160610330797C70454FCB
        Validity
            Not Before: Mar  5 18:16:24 2024 GMT
            Not After : Mar  4 18:21:24 2025 GMT
        Subject: CN=31F90CB780E36AB2C67A2792C51BB9A9EE0EDE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:b1:1a:f1:4d:59:24:93:c4:f0:60:dd:d3:
                    46:fb:d4:b5:3c:fb:07:aa:a3:b0:e9:0b:0e:79:95:
                    75:ee:c1:be:07:ea:e0:04:f6:b2:a4:85:08:1c:b2:
                    a7:21:05:50:6a:23:13:e2:0e:bf:ea:11:aa:4b:00:
                    36:62:70:ec:2c:26:e2:76:80:ee:cf:97:c8:58:8d:
                    cc:8f:45:75:e9:32:69:14:e2:9f:ff:54:55:00:69:
                    7f:d3:47:0e:b4:84:3c:71:22:2c:76:f0:49:d2:e1:
                    cc:25:15:22:21:dc:bd:92:0c:c7:6c:85:45:b1:36:
                    c2:cb:96:8e:34:b9:1d:f4:c0:de:00:81:7b:b0:94:
                    26:74:b9:6e:3f:7e:ef:21:6f:0c:70:9d:30:55:dd:
                    09:4c:f4:0d:f0:09:71:d1:d8:4b:3e:18:67:3a:a8:
                    30:ee:ea:ef:e0:f0:37:4d:24:6b:b5:01:d4:b5:d9:
                    cf:e8:a1:b9:84:d0:cd:6f:98:4d:69:c1:dd:13:63:
                    c7:fb:8e:f5:1b:ad:b5:b7:cc:ee:17:63:bd:2e:7a:
                    ed:fc:96:3d:31:5b:1b:3a:51:8d:3e:2d:07:03:32:
                    96:4c:81:96:09:3d:f9:c9:b2:0f:05:bb:ff:1c:5f:
                    3e:14:f4:e8:5b:8f:9e:96:21:f4:3a:67:f6:26:9e:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F9:0C:B7:80:E3:6A:B2:C6:7A:27:92:C5:1B:B9:A9:EE:0E:DE:69
            X509v3 Authority Key Identifier:
                keyid:CF:47:7A:09:FD:00:FC:C1:09:61:60:61:03:30:79:7C:70:45:4F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/CF477A09FD00FCC1096160610330797C70454FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF477A09FD00FCC1096160610330797C70454FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9830ECDDCB21265CE5B2E48FA834AE5EC0901417F9AA520FF90848103459250B/0/323830313a3161653a3a2f34342d3434203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ae::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:1b:c2:10:a7:de:f4:62:4e:59:20:b5:1f:8d:24:3f:a4:
         98:b6:54:09:fa:b4:1c:7d:e2:09:05:b8:61:92:79:cf:60:1d:
         01:93:24:1d:2b:16:32:7c:5b:ff:09:94:e5:fb:7e:ce:cc:d6:
         3f:7d:52:e6:f6:c6:fc:ad:e3:a0:a3:23:19:62:90:a4:a1:a3:
         06:c5:07:cc:4e:89:a1:06:29:2d:ed:1f:e2:1b:8b:f0:25:dc:
         73:90:37:58:67:c9:b4:a6:df:5c:35:26:0d:d1:cb:50:8d:5f:
         f7:a6:60:37:ab:9f:94:e1:ac:d4:c8:81:38:20:c5:4c:cb:c0:
         78:20:41:7f:8a:63:b9:7d:12:60:7f:45:95:e4:71:b2:e0:40:
         d0:c5:82:4d:cd:5b:d7:6e:ce:6f:ab:2b:4b:78:c4:fa:e7:bb:
         7f:fa:42:fd:72:b0:4b:2c:3f:e1:9c:ae:bf:f9:f4:3f:18:25:
         d1:fc:0d:72:e7:93:4b:7e:0c:bb:8f:a8:7c:49:ec:43:d7:8e:
         1f:67:83:bc:67:d4:59:44:95:e0:19:70:f0:cc:20:96:4d:67:
         39:b7:ec:78:4b:87:b9:5a:86:80:0b:4e:00:1e:29:54:ad:a3:
         cb:83:05:14:ae:d8:1f:b5:91:55:b3:d6:10:cb:d2:07:ad:cf:
         f7:47:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org