Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          VYRuxAdnmaubhJgtEA+kU5xhQT7J+6IssDd7jRFamvw=
Subject key identifier:   35:54:4B:48:FD:D4:CB:01:69:D3:84:CD:2F:EA:57:0C:24:0B:06:23
Certificate issuer:       /CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
Certificate serial:       2733A5665E7DDB26F541E8B38268C5548BF4C507
Authority key identifier: 2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:40:01 +0000
ROA not before:           Tue 05 Mar 2024 17:35:01 +0000
ROA not after:            Tue 04 Mar 2025 17:40:01 +0000
asID:                     19429
IP address blocks:        2801:13:d808::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:33:a5:66:5e:7d:db:26:f5:41:e8:b3:82:68:c5:54:8b:f4:c5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B
        Validity
            Not Before: Mar  5 17:35:01 2024 GMT
            Not After : Mar  4 17:40:01 2025 GMT
        Subject: CN=35544B48FDD4CB0169D384CD2FEA570C240B0623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:74:bd:87:86:2c:61:70:dd:d5:94:ea:2a:
                    fd:5d:d9:40:97:46:16:44:01:86:fa:f8:18:0b:3c:
                    59:b6:33:c9:2a:99:e9:9f:a8:5b:bd:4e:59:12:e9:
                    87:5e:b8:ec:93:31:6c:6c:01:b9:8c:9d:de:17:38:
                    c3:80:bd:6e:a4:88:7d:6c:b1:f6:75:30:23:41:aa:
                    4f:46:dd:c9:4e:e1:a3:88:34:e0:8f:27:2b:1e:84:
                    59:8f:1f:2d:ec:f4:dd:89:bd:14:a0:43:8d:e5:ac:
                    38:06:58:28:2f:43:ee:89:3e:ed:7f:a9:57:29:c4:
                    9e:9e:44:5f:78:27:73:20:06:7b:86:aa:cc:93:cb:
                    4a:6a:20:51:1f:5c:2d:96:86:09:d2:a3:8e:7c:63:
                    db:23:2c:6c:9a:36:2f:28:c7:5d:3b:07:81:cf:7e:
                    ee:35:35:00:79:a0:5a:bc:0c:b1:ee:d2:50:ab:78:
                    26:39:be:ff:7a:7b:0b:e4:00:d3:bc:4a:89:a8:27:
                    a9:2e:b1:fd:ce:13:d6:ae:69:03:48:c2:08:b7:12:
                    3b:23:47:4b:86:2b:ae:af:e9:90:3b:43:1a:c9:81:
                    10:20:b8:ad:e5:dd:bf:9f:1f:a5:f6:29:2b:2a:4a:
                    fc:3f:ee:15:80:38:d6:f4:0e:21:64:a5:a0:74:7b:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:54:4B:48:FD:D4:CB:01:69:D3:84:CD:2F:EA:57:0C:24:0B:06:23
            X509v3 Authority Key Identifier:
                keyid:2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:d808::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:40:a6:f3:d0:bf:e8:1c:35:31:fa:f8:97:e6:09:ad:2d:
         0c:9c:db:d3:ec:fc:bc:4c:69:27:23:b7:f5:ba:1d:9d:21:aa:
         1c:31:43:b9:70:43:45:ee:31:8c:0c:d6:99:b2:47:ec:f3:f7:
         7b:e6:c2:68:68:46:2b:7a:ea:b2:21:a2:63:79:eb:b7:1f:7e:
         9b:bc:57:d2:a8:c7:25:9b:c4:ab:9f:6d:4f:08:9a:6b:3f:82:
         22:af:22:6e:0e:9b:13:a4:01:b9:4e:6f:ec:14:fb:f1:d0:47:
         2b:71:15:ba:fd:f1:d4:f0:29:b2:d2:3b:d0:96:bd:c7:00:18:
         50:f1:2b:3d:09:98:f9:80:5b:66:6f:41:44:00:c5:8a:aa:72:
         16:15:63:52:76:2f:0b:22:25:32:0a:5a:75:2f:7d:b2:37:0a:
         6b:c5:29:db:4d:29:3b:3b:13:10:b9:1e:73:97:6c:6e:30:38:
         67:1e:bc:91:e2:1b:64:b3:89:74:0b:50:fd:d2:e9:52:0c:d7:
         64:c0:8b:f6:7e:c4:c0:bf:91:56:94:56:45:d1:73:22:e3:3c:
         7e:1c:50:20:34:d6:d1:a5:c1:82:aa:77:d2:b8:53:46:6f:cd:
         0d:81:1e:54:c9:eb:a5:e6:38:05:dc:4d:48:bf:20:31:c1:e2:
         85:22:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org