Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/323830313a31363a633030303a3a2f34382d3438203d3e20323633323034.roa
File:                     323830313a31363a633030303a3a2f34382d3438203d3e20323633323034.roa (raw, json)
Hash identifier:          74uNxfYdx5H+D+UDhHsC5H3OlPxEcKq+6NHtvxDhvzM=
Subject key identifier:   7C:17:99:2D:18:A5:20:B1:2F:FB:8E:B3:23:68:98:D2:94:4C:73:3D
Certificate issuer:       /CN=C198D1C54DAB7708481D5361509D7D3E3976EA31
Certificate serial:       6C9FE4076D9F480C8A52883FFC7711167047A1D9
Authority key identifier: C1:98:D1:C5:4D:AB:77:08:48:1D:53:61:50:9D:7D:3E:39:76:EA:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/323830313a31363a633030303a3a2f34382d3438203d3e20323633323034.roa
Signing time:             Tue 05 Mar 2024 18:10:12 +0000
ROA not before:           Tue 05 Mar 2024 18:05:12 +0000
ROA not after:            Tue 04 Mar 2025 18:10:12 +0000
asID:                     263204
IP address blocks:        2801:16:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9f:e4:07:6d:9f:48:0c:8a:52:88:3f:fc:77:11:16:70:47:a1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C198D1C54DAB7708481D5361509D7D3E3976EA31
        Validity
            Not Before: Mar  5 18:05:12 2024 GMT
            Not After : Mar  4 18:10:12 2025 GMT
        Subject: CN=7C17992D18A520B12FFB8EB3236898D2944C733D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:58:6d:2f:d0:ab:91:6f:2a:83:0a:dd:ff:
                    e3:30:24:3b:6f:14:e8:c5:ba:d9:54:5b:c5:1a:e4:
                    54:4a:fa:19:25:d2:b0:63:9c:06:8e:61:80:61:54:
                    4e:44:fb:48:99:17:72:6d:ac:74:53:7a:93:19:0f:
                    9e:ed:ca:1e:3a:0d:36:d6:91:78:25:8a:33:7d:37:
                    2e:00:73:b3:3a:0b:45:47:55:66:fe:95:3a:06:d9:
                    eb:9b:88:7c:45:43:a2:d2:20:92:cd:f7:b6:cb:b0:
                    ce:48:2d:19:f8:ba:2b:a9:7e:00:ed:55:e2:07:0b:
                    17:f5:14:2b:50:06:d4:c3:eb:ec:85:0f:f1:71:0f:
                    42:c8:be:4a:7d:19:79:a5:b0:a4:fc:e5:5e:89:51:
                    19:04:ee:57:d7:19:7a:45:c6:88:c6:06:fc:9c:0f:
                    7f:d9:0d:f9:70:79:94:92:34:b1:0c:15:c7:80:0b:
                    27:46:37:7a:96:dd:f2:62:cb:27:c3:b3:9c:5a:d1:
                    c0:b0:5e:d2:b9:ab:64:b3:2e:76:8d:67:38:b8:d9:
                    b3:6c:23:d5:77:86:eb:d6:c5:36:c4:6d:9d:cf:be:
                    36:4b:20:2e:d3:be:ea:12:f2:57:85:9f:82:97:4e:
                    fb:4c:46:9c:0a:ae:44:79:9e:08:77:d9:45:20:e2:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:17:99:2D:18:A5:20:B1:2F:FB:8E:B3:23:68:98:D2:94:4C:73:3D
            X509v3 Authority Key Identifier:
                keyid:C1:98:D1:C5:4D:AB:77:08:48:1D:53:61:50:9D:7D:3E:39:76:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/323830313a31363a633030303a3a2f34382d3438203d3e20323633323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:25:5b:9c:81:99:d8:3e:4f:d2:be:c7:a5:3a:ed:e0:fd:2c:
         a0:c5:2a:32:da:c2:68:ac:d3:90:28:44:14:66:62:1e:e0:38:
         74:f9:06:51:e7:ea:de:cf:92:67:fd:ff:b5:ce:98:78:c1:7b:
         50:d7:d3:37:3f:c7:45:c8:31:85:d2:30:5e:0b:07:f9:3f:f2:
         ea:36:38:81:fc:06:97:22:fc:37:50:16:95:28:0d:31:be:53:
         fd:96:b2:5e:f4:d3:eb:65:87:16:68:a7:2f:c6:6c:6b:fe:2a:
         bc:ef:ea:e8:b1:d1:b0:21:de:0e:80:cd:0d:d8:97:38:ea:45:
         e3:3f:36:f1:ba:ce:a1:9c:30:61:da:07:59:da:b9:9d:a1:35:
         22:c2:b9:f4:f7:6d:32:21:0b:8e:97:38:3d:d4:8e:e8:8f:51:
         44:7e:2f:c0:c6:e6:57:15:0a:4d:26:64:67:f0:f5:3b:a0:98:
         d4:e8:1a:d3:01:8b:60:6b:c9:85:5e:11:ff:73:1f:f1:44:28:
         77:25:27:da:cc:6c:cf:c4:28:93:f8:42:16:6d:d6:44:2f:dd:
         2a:4f:0e:91:6a:72:9d:b5:08:c8:a4:3f:76:42:b6:6b:46:3d:
         aa:54:04:6b:c5:c2:a2:26:b5:d5:de:05:b4:1b:be:3b:65:ae:
         38:c6:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org