Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/323830313a31333a383830303a3a2f34382d3438203d3e20323639373538.roa
File:                     323830313a31333a383830303a3a2f34382d3438203d3e20323639373538.roa (raw, json)
Hash identifier:          w1Vszp5FigGj7vsKXKW/OVxVEKXS8XyBgKzHzj8ifqQ=
Subject key identifier:   4F:EB:30:70:B7:8E:36:67:95:04:D1:5B:20:81:4E:F4:BF:8B:3F:0E
Certificate issuer:       /CN=626C22B37E986FBB36DBE7A36C8BC48148D8366D
Certificate serial:       4064C82EEC4A4E1F9ADA3AF6978E04DFD01716CA
Authority key identifier: 62:6C:22:B3:7E:98:6F:BB:36:DB:E7:A3:6C:8B:C4:81:48:D8:36:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/323830313a31333a383830303a3a2f34382d3438203d3e20323639373538.roa
Signing time:             Tue 05 Mar 2024 17:42:34 +0000
ROA not before:           Tue 05 Mar 2024 17:37:34 +0000
ROA not after:            Tue 04 Mar 2025 17:42:34 +0000
asID:                     269758
IP address blocks:        2801:13:8800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:64:c8:2e:ec:4a:4e:1f:9a:da:3a:f6:97:8e:04:df:d0:17:16:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626C22B37E986FBB36DBE7A36C8BC48148D8366D
        Validity
            Not Before: Mar  5 17:37:34 2024 GMT
            Not After : Mar  4 17:42:34 2025 GMT
        Subject: CN=4FEB3070B78E36679504D15B20814EF4BF8B3F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:08:cc:ff:7c:16:4c:f5:40:6e:96:a2:b4:
                    70:d7:0a:f4:ee:9d:46:56:02:54:4e:64:26:1f:8b:
                    f5:05:5d:71:a0:df:92:63:ea:2d:e4:3a:97:3b:f0:
                    2f:a7:d1:ce:70:b2:6d:df:3a:86:4f:97:0c:1e:62:
                    6d:0c:6f:d4:ca:f7:fa:95:c4:1c:66:ae:80:4a:72:
                    af:70:40:6a:7e:78:fd:15:1f:a3:30:7f:f2:ca:0a:
                    f8:3e:1c:f6:45:de:25:4a:13:aa:45:c8:8c:06:14:
                    25:91:13:35:b7:21:b3:23:dd:14:2c:ce:4e:ed:f0:
                    10:10:52:1e:e0:31:75:9f:10:e7:03:dd:9e:94:b5:
                    5e:11:22:73:5b:6c:bf:9a:0e:59:94:bb:b5:a9:e5:
                    de:d1:75:f3:19:8f:e2:ec:2e:b8:e7:f5:2c:5d:e0:
                    10:0d:50:cb:66:55:be:02:eb:e6:31:30:03:37:be:
                    3d:0f:f1:77:5c:e6:78:a0:4c:5a:17:3a:d2:fb:72:
                    70:c3:0d:92:a1:75:54:bd:51:63:8d:94:46:ed:c8:
                    9a:58:fc:55:ac:2c:94:9b:9c:ff:3d:25:61:2f:12:
                    28:bd:93:ce:3d:39:0c:d0:ea:2c:c2:d8:da:2e:69:
                    c2:f0:f2:79:97:84:ec:67:81:68:7b:45:71:cc:10:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EB:30:70:B7:8E:36:67:95:04:D1:5B:20:81:4E:F4:BF:8B:3F:0E
            X509v3 Authority Key Identifier:
                keyid:62:6C:22:B3:7E:98:6F:BB:36:DB:E7:A3:6C:8B:C4:81:48:D8:36:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/323830313a31333a383830303a3a2f34382d3438203d3e20323639373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:2d:f2:24:13:bd:1d:27:03:b5:86:5c:80:60:36:97:6d:1b:
         25:01:d1:29:4a:22:51:09:4e:f3:8f:1c:04:96:aa:90:8e:64:
         22:8c:c2:24:1f:1b:db:6b:fe:ba:57:6f:ce:1a:3a:74:8c:1a:
         d3:0d:cf:c3:7f:76:4d:8a:39:17:b6:44:7e:c8:0c:6c:da:18:
         ef:94:88:38:65:3c:4a:eb:95:56:fe:47:ff:78:e2:9c:13:98:
         cb:8f:18:17:5c:8c:ea:be:f4:5a:bd:61:d3:af:4d:92:c7:ff:
         95:dc:7a:81:ec:28:c9:d5:2b:c2:1a:3e:45:71:2c:cf:a2:30:
         1d:e5:b1:28:2e:07:32:ec:25:86:2b:30:c2:b5:c8:b4:a0:16:
         55:a1:e2:47:1d:2b:24:a5:8c:5c:ec:b3:09:1a:4a:e8:52:ea:
         b3:35:0b:ad:31:d1:f0:6e:43:cf:15:f6:d2:28:93:04:6a:43:
         86:c6:4a:3c:a1:c2:04:51:c3:ee:4d:bd:43:cb:8c:54:89:15:
         f3:c5:23:a1:47:8b:ac:7e:0c:29:f3:78:38:e5:67:34:12:c6:
         a9:ac:6a:28:c4:00:f6:f5:0e:98:9c:23:e1:e0:aa:ab:1c:fc:
         ea:3e:d0:9e:06:f8:16:4d:40:71:84:84:70:79:8a:86:01:7a:
         30:a6:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:15 2024 by rpki-client on console-fra.rpki-client.org