Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/323830313a31303a3830303a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a31303a3830303a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          kE7TYNtUnrsaeowazBASP03OmPGWDeMxeWKw9aO6Ia8=
Subject key identifier:   86:C9:5F:93:95:26:0C:EF:BF:50:A1:D0:ED:F8:84:6B:0B:84:CF:78
Certificate issuer:       /CN=1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167
Certificate serial:       1F510CA0004FC2DE559B337B7F0DE58DFC1D7B44
Authority key identifier: 1C:BD:B3:7A:B8:E4:CD:D5:71:7B:BF:2A:56:ED:47:FC:4E:35:F1:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/323830313a31303a3830303a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:05:26 +0000
ROA not before:           Tue 05 Mar 2024 18:00:26 +0000
ROA not after:            Tue 04 Mar 2025 18:05:26 +0000
asID:                     18747
IP address blocks:        2801:10:800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:51:0c:a0:00:4f:c2:de:55:9b:33:7b:7f:0d:e5:8d:fc:1d:7b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167
        Validity
            Not Before: Mar  5 18:00:26 2024 GMT
            Not After : Mar  4 18:05:26 2025 GMT
        Subject: CN=86C95F9395260CEFBF50A1D0EDF8846B0B84CF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:e9:43:f1:09:24:df:c6:38:a3:3e:3e:06:
                    bf:1e:20:34:e0:46:8c:3f:a6:6b:0e:43:8f:c9:68:
                    1b:b0:91:e3:28:14:31:0d:6f:33:55:56:c3:8d:4d:
                    a8:76:8a:89:a0:33:60:86:e2:69:e3:92:bc:5f:c2:
                    93:b0:f9:b7:0e:93:c6:32:9e:71:27:4b:f3:d9:77:
                    78:b8:37:53:36:9f:3d:2b:fe:92:4f:a4:1a:72:2c:
                    b0:d9:84:15:26:f1:f6:8f:3d:39:eb:a0:17:d5:3b:
                    6f:06:dd:e5:80:1f:89:64:20:4c:e5:e1:30:49:d7:
                    51:12:78:f7:64:8f:64:3a:33:11:11:8d:18:19:17:
                    d5:8c:12:98:b3:5b:0f:76:cc:61:36:28:59:a9:a0:
                    fd:cf:62:60:8c:b9:29:b4:f0:95:41:d6:22:5b:78:
                    f6:01:14:4f:d0:c4:75:0c:5f:c2:b3:7f:01:91:9f:
                    bf:84:bc:13:47:0a:7a:90:15:a2:2d:b9:cb:45:73:
                    ac:cf:24:76:53:3e:da:30:6a:81:99:85:83:2e:e4:
                    c5:72:80:80:f0:94:8b:5f:2f:05:d5:47:0e:96:08:
                    d4:83:a1:e1:2b:51:38:e8:ca:0d:c1:22:fd:0e:5b:
                    52:f6:ee:ee:84:88:02:13:ff:d1:5a:8e:5b:16:cb:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C9:5F:93:95:26:0C:EF:BF:50:A1:D0:ED:F8:84:6B:0B:84:CF:78
            X509v3 Authority Key Identifier:
                keyid:1C:BD:B3:7A:B8:E4:CD:D5:71:7B:BF:2A:56:ED:47:FC:4E:35:F1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CBDB37AB8E4CDD5717BBF2A56ED47FC4E35F167.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1D0548A220ADE8F3FF7CD106D307BA5B963750C276F5290FF7CCABD0325AA75/0/323830313a31303a3830303a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:f3:be:3e:38:57:07:0b:80:c2:ee:d6:c6:ad:ce:e2:93:e9:
         51:e6:0c:f1:26:9f:4a:cb:4c:11:5d:b1:ba:12:4c:4e:8d:e4:
         5e:3c:39:d1:b2:27:be:37:93:27:1f:00:07:6a:56:aa:bd:25:
         55:f6:1b:76:36:4a:c7:35:f6:de:69:89:3c:ec:92:7c:00:4b:
         39:0f:f8:b6:59:a4:2a:3b:9e:22:37:b0:b6:6d:05:8f:5f:5f:
         11:70:59:e9:5f:a3:39:c6:45:da:0e:c2:32:34:11:2c:8a:67:
         bd:55:fe:7f:6c:f3:b6:2a:45:05:19:66:61:df:15:0e:e9:bd:
         1e:4a:99:84:0f:7b:5a:17:b0:8d:11:f3:65:71:73:3f:72:d1:
         8e:8c:4d:46:fe:32:48:5b:55:1c:7f:81:88:8f:ea:80:af:38:
         ca:12:8f:db:4b:b3:37:ed:21:92:3c:74:de:95:e3:0f:e5:58:
         1f:db:8e:ec:52:a1:ea:1a:e0:55:20:bf:3b:92:70:97:82:19:
         cd:63:f8:f7:02:c1:aa:e7:63:ad:35:2a:40:bf:98:92:83:0e:
         62:23:d7:0b:54:c3:e9:4e:75:27:9c:39:e2:4b:c2:31:32:ca:
         14:f7:e9:44:2b:7c:23:13:40:35:11:8a:c7:6f:5d:43:43:9a:
         9e:b2:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org