Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa
File:                     323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa (raw, json)
Hash identifier:          g320kCs+NePmCTlNRb0EyPqGRt8Mt5ApiWUj54/b+pQ=
Subject key identifier:   D7:32:8E:A1:F2:BD:9F:00:FC:F8:7E:7B:37:97:8E:B5:6B:6F:5B:5A
Certificate issuer:       /CN=B1584F435951195F9A1F345DE3A71C0FFAED9417
Certificate serial:       7ACEF1D049397F447B60B1436A6A0A280D69666A
Authority key identifier: B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa
Signing time:             Tue 05 Mar 2024 17:48:03 +0000
ROA not before:           Tue 05 Mar 2024 17:43:03 +0000
ROA not after:            Tue 04 Mar 2025 17:48:03 +0000
asID:                     269791
IP address blocks:        2801:16:4800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ce:f1:d0:49:39:7f:44:7b:60:b1:43:6a:6a:0a:28:0d:69:66:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1584F435951195F9A1F345DE3A71C0FFAED9417
        Validity
            Not Before: Mar  5 17:43:03 2024 GMT
            Not After : Mar  4 17:48:03 2025 GMT
        Subject: CN=D7328EA1F2BD9F00FCF87E7B37978EB56B6F5B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:14:d8:a2:5d:82:f8:81:44:0c:69:09:88:
                    d3:01:ff:6a:f4:ca:d2:01:c6:c2:1a:24:32:34:e4:
                    2f:8f:91:be:aa:d1:a4:18:cc:d3:80:87:12:b1:fa:
                    cb:eb:f7:54:e3:29:fb:f9:d5:03:9f:be:ef:17:be:
                    bc:ca:5a:59:45:63:de:85:db:7f:46:64:a9:03:14:
                    12:d1:6e:a2:f7:83:cf:54:26:08:b4:ae:92:36:2f:
                    ae:2d:47:3f:62:c7:a4:80:87:09:4f:eb:b1:1a:6e:
                    78:6c:ec:4d:d8:87:3d:f7:66:08:a4:ee:87:4c:c3:
                    17:6b:29:4c:fe:b6:1d:f1:73:e7:b6:46:35:a2:32:
                    49:65:c3:31:8f:f7:71:aa:f1:09:e3:ca:9f:4e:f0:
                    a5:fd:0e:1e:4e:65:23:58:e4:21:7b:7e:67:9c:da:
                    78:a7:6c:af:cb:f7:62:6c:b2:1b:dc:53:35:5c:e0:
                    52:1c:98:a2:9b:45:fb:de:66:c0:51:04:26:5a:b2:
                    c3:34:bc:81:cf:21:ae:38:39:b4:f3:3a:b3:70:c1:
                    7e:8c:2a:c4:b7:4a:e6:72:9c:92:ae:f7:ab:31:76:
                    bb:c8:0b:2a:05:83:44:c4:c4:86:c9:99:e1:5b:cc:
                    34:77:d0:80:b6:50:31:e5:99:6c:52:fb:c1:c8:a3:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:32:8E:A1:F2:BD:9F:00:FC:F8:7E:7B:37:97:8E:B5:6B:6F:5B:5A
            X509v3 Authority Key Identifier:
                keyid:B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:1b:01:1f:73:eb:41:f0:44:9f:0b:d6:a9:5e:d6:f9:37:
         bd:7f:a6:92:ee:d5:5e:b1:fe:1d:8e:db:37:80:6f:b4:6d:bd:
         6a:26:72:5f:ee:8e:21:c6:15:94:7c:3d:6a:02:e2:e7:30:8f:
         38:93:c8:b9:50:f0:f1:ac:83:8c:ab:de:59:a3:57:0c:43:85:
         21:e3:20:4d:47:cb:d1:d3:f8:45:0b:8a:d4:91:cc:8b:cc:59:
         8c:a6:2a:b8:fb:b5:d7:74:64:36:38:3d:10:ab:45:33:77:d1:
         cf:a6:30:87:16:86:31:8b:a1:83:43:87:00:0b:aa:7d:60:3b:
         0a:8a:a5:d2:60:1b:58:de:e3:c9:1f:56:57:04:a6:f2:c4:74:
         01:8e:a7:8e:a3:d6:b6:d3:9e:62:f2:0c:16:26:3b:95:1e:10:
         60:3c:9e:a2:03:69:8d:23:5a:81:8d:67:5d:57:0e:9d:7c:e2:
         ce:7d:58:a1:3b:e8:ec:5e:09:c0:a3:58:f2:f7:8e:3e:26:b5:
         d9:21:a8:69:e5:d9:79:45:fa:83:03:bb:54:e4:c5:f2:6c:24:
         c5:b7:d8:a4:51:68:26:c5:a1:85:33:9b:fa:a4:27:d8:29:bc:
         98:f0:b4:25:39:91:1f:df:6d:aa:6b:6d:5b:0c:5b:57:7b:50:
         4d:96:33:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:46:39 2024 by rpki-client on console-ams.rpki-client.org