Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa
File:                     323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa (raw, json)
Hash identifier:          Pp66VNMeObgQCC8PWzsuSmj/Kf7S37XcZIvirNgFgjE=
Subject key identifier:   86:66:FC:4A:DB:3B:88:F3:E1:16:D3:64:7E:61:A9:40:FE:CB:A1:A7
Certificate issuer:       /CN=CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6
Certificate serial:       4C9A36A6D90EDD92FFBC0461AD120CD055F0DD8C
Authority key identifier: CA:5F:2F:F2:2D:8B:FD:C1:6B:EB:B4:D2:85:79:F0:30:74:25:F5:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa
Signing time:             Tue 05 Mar 2024 18:17:00 +0000
ROA not before:           Tue 05 Mar 2024 18:12:00 +0000
ROA not after:            Tue 04 Mar 2025 18:17:00 +0000
asID:                     61476
IP address blocks:        2801:18:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9a:36:a6:d9:0e:dd:92:ff:bc:04:61:ad:12:0c:d0:55:f0:dd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6
        Validity
            Not Before: Mar  5 18:12:00 2024 GMT
            Not After : Mar  4 18:17:00 2025 GMT
        Subject: CN=8666FC4ADB3B88F3E116D3647E61A940FECBA1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:3a:b3:fe:ce:63:a7:74:54:57:7b:9a:ad:
                    03:b5:3e:2a:49:d8:14:6c:9b:52:3a:35:63:91:af:
                    a9:de:fb:0b:79:72:3b:d3:f7:b0:b8:dd:4e:8c:5d:
                    8b:53:2d:4a:06:1d:39:63:86:99:59:c6:38:8f:56:
                    ad:68:a2:3e:85:25:84:7d:36:19:6b:31:71:f2:0d:
                    32:e6:4d:cb:43:ab:a8:b4:1c:f6:14:52:7d:aa:e6:
                    91:02:de:c4:57:37:f0:a1:d9:cf:b9:e8:0f:43:09:
                    87:20:d2:b0:26:b1:31:a8:42:e6:95:e9:3d:05:bb:
                    31:7f:d3:29:ff:61:68:82:c2:3f:c1:75:5e:d9:20:
                    2c:8c:e6:ad:c8:1f:1b:41:b2:9c:90:b0:7f:04:88:
                    01:f2:5c:38:65:e0:23:c0:4c:09:e7:68:5d:b7:64:
                    56:ed:81:e5:83:67:bc:dc:ff:ec:11:ec:10:fb:63:
                    12:49:7c:cd:de:50:a0:ab:97:f9:72:38:c6:a9:56:
                    a0:b3:2c:2d:55:90:de:c8:e0:3c:e2:5d:0c:79:e8:
                    53:1a:7a:5c:d3:b7:36:b8:da:f7:8b:23:c0:f6:02:
                    f2:6d:86:4f:a4:ac:60:e8:4b:3a:ad:36:57:b5:d2:
                    45:4b:22:3e:3f:81:a1:31:d0:1f:6a:2c:ac:b4:ba:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:66:FC:4A:DB:3B:88:F3:E1:16:D3:64:7E:61:A9:40:FE:CB:A1:A7
            X509v3 Authority Key Identifier:
                keyid:CA:5F:2F:F2:2D:8B:FD:C1:6B:EB:B4:D2:85:79:F0:30:74:25:F5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:d5:ee:ac:c8:3d:9a:8e:79:45:a7:41:a3:32:f2:01:4b:
         ba:f2:fc:aa:9d:dd:63:12:20:3c:ed:2d:7b:4e:66:81:06:57:
         49:a6:db:b9:ef:b5:05:9c:bb:f8:59:d5:15:f9:b6:e8:03:5f:
         b8:98:c3:ed:99:3e:69:b7:79:58:03:27:1f:ef:34:00:46:5e:
         31:f8:c7:b9:69:4d:0e:c5:f6:b3:69:84:fa:10:03:32:b8:f9:
         f8:ed:4f:95:12:bf:da:d4:04:70:b9:d9:e4:7b:99:86:02:dc:
         a9:66:ac:0b:21:12:bb:f3:15:f5:3a:5d:e0:36:a0:a1:42:ed:
         1e:cd:8a:e7:79:95:c9:fe:1f:e2:51:8a:0d:e1:90:09:99:b4:
         a9:81:9d:bd:70:15:f7:51:f9:b2:28:17:e7:a4:35:42:4c:24:
         ac:2d:34:7b:22:f7:cf:1d:14:53:fd:b2:4f:93:89:2d:dc:c9:
         ef:2d:66:94:47:ac:84:2d:ee:04:2b:f4:b3:e7:b9:9f:33:31:
         31:6d:d5:b9:db:9f:43:51:13:41:91:c9:93:93:9f:9f:85:29:
         a1:58:19:d7:01:5e:d1:af:32:41:dd:2e:32:4e:af:91:3d:46:
         49:17:33:4f:19:42:a2:8b:ce:ad:5b:c0:00:82:40:89:a0:e4:
         2b:1c:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org