Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          ZmIfvbJcddyvoo1FTg3M4NuN68qDBx3FhRSxWCpgmCE=
Subject key identifier:   A9:3A:85:03:BA:15:A9:BA:B4:40:93:68:F1:04:1D:62:B2:CA:74:66
Certificate issuer:       /CN=24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B
Certificate serial:       5A3BA0DD3042C0AB7CA7232CAB5202092C72E2A6
Authority key identifier: 24:E5:CB:DF:A3:78:0F:8B:7B:FB:97:79:1F:5B:34:87:17:2B:CB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:00:38 +0000
ROA not before:           Tue 05 Mar 2024 17:55:38 +0000
ROA not after:            Tue 04 Mar 2025 18:00:38 +0000
asID:                     27951
IP address blocks:        2801:17:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3b:a0:dd:30:42:c0:ab:7c:a7:23:2c:ab:52:02:09:2c:72:e2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B
        Validity
            Not Before: Mar  5 17:55:38 2024 GMT
            Not After : Mar  4 18:00:38 2025 GMT
        Subject: CN=A93A8503BA15A9BAB4409368F1041D62B2CA7466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:99:2a:59:5c:4d:c5:5f:63:a2:87:7e:e0:
                    f0:ea:9d:3e:08:08:6b:98:04:a4:f1:83:03:a1:79:
                    0a:75:a1:74:7d:ce:4a:d6:4f:9c:48:e8:b8:f6:43:
                    25:e4:f2:92:84:61:73:63:b7:f9:04:31:8f:f1:b3:
                    97:e2:3d:f6:a8:2c:83:27:de:7b:af:78:12:de:de:
                    c6:53:88:29:42:e2:3d:da:8e:a2:00:c3:99:f3:be:
                    47:ae:7b:43:26:3f:b5:94:34:54:4a:cb:35:12:ba:
                    3a:37:23:cd:f4:b9:55:86:94:7c:00:71:18:28:e6:
                    7c:55:79:b7:b9:77:2e:79:15:0d:5c:f9:45:ae:00:
                    1d:fb:fb:ab:90:59:05:eb:1e:c1:56:a7:0b:e4:0e:
                    6a:74:1a:15:cd:c5:df:a5:6b:76:88:7d:dd:3b:2f:
                    21:bb:db:84:cb:25:22:98:8c:72:4f:9b:1b:4b:b4:
                    84:49:8f:65:cd:09:9b:d6:95:89:98:b4:c5:d8:dc:
                    d6:3d:35:3d:15:f5:c0:79:ad:1b:63:4a:60:1c:16:
                    7f:72:69:ae:28:76:e4:0e:9e:94:43:31:22:ba:d3:
                    cd:14:bd:06:45:78:34:61:04:2f:84:af:34:69:ae:
                    15:fe:62:7d:6b:11:03:34:df:1a:fe:7b:82:a9:cf:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3A:85:03:BA:15:A9:BA:B4:40:93:68:F1:04:1D:62:B2:CA:74:66
            X509v3 Authority Key Identifier:
                keyid:24:E5:CB:DF:A3:78:0F:8B:7B:FB:97:79:1F:5B:34:87:17:2B:CB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24E5CBDFA3780F8B7BFB97791F5B3487172BCB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C7F5E7D44D40870ABDDF369BC6567D5DBDC7CBDC323102248845F6DE259BBF9/0/323830313a31373a343830303a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:12:53:52:ef:2e:33:7b:1e:63:0f:7c:ba:7d:d8:93:1e:ea:
         65:22:15:ba:84:f8:b9:17:df:9e:0f:b2:47:3b:bf:55:a3:37:
         9b:b3:1e:69:3d:81:82:87:4a:11:f8:bb:d1:8a:26:5c:c3:46:
         ca:54:7f:7f:4b:46:2c:b0:8b:38:69:31:65:19:8c:cd:76:8d:
         0f:ea:03:9d:bf:11:d1:df:3d:5f:d7:8e:7c:25:32:2a:a1:53:
         b3:39:be:c0:3a:71:fd:28:46:0e:6f:33:91:2d:46:1d:2b:6d:
         5a:af:ba:fb:f6:b0:f6:14:ec:62:40:76:09:76:3c:3a:4a:83:
         4c:e1:bc:5b:f3:52:74:c0:1c:92:d2:93:df:de:54:ae:42:26:
         72:cd:18:66:2e:50:2e:e6:c9:ea:c9:22:6e:e4:08:14:bb:98:
         1c:33:fe:d7:21:4f:1a:99:3d:65:33:c5:5e:c8:5a:70:2e:ea:
         6a:a2:09:c9:13:0a:4f:2c:80:33:f3:f7:c0:04:e8:d0:62:16:
         2e:76:60:0c:d4:89:e4:24:cf:68:2f:f4:95:2f:af:4e:97:73:
         55:e6:b7:be:e1:6f:80:33:b3:b8:74:dd:9f:c4:71:ea:cb:5b:
         a1:fe:ee:ce:14:25:8a:f3:a2:31:0e:92:52:1d:3e:bc:cc:30:
         2b:66:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org