Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa
File:                     323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa (raw, json)
Hash identifier:          DaJzABjQR7qckbUokvejdmej29CNINmJ2Tu0WlzBnP8=
Subject key identifier:   9A:36:76:BA:86:9F:70:24:82:A0:35:EF:A8:56:02:19:87:D3:FD:F4
Certificate issuer:       /CN=AADC68CACCD7A12B6A019949E964F33953EF7228
Certificate serial:       08352884241D00F95730741918F45945A7C6D8A3
Authority key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa
Signing time:             Tue 05 Mar 2024 18:14:56 +0000
ROA not before:           Tue 05 Mar 2024 18:09:56 +0000
ROA not after:            Tue 04 Mar 2025 18:14:56 +0000
asID:                     271885
IP address blocks:        2801:12:e800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:35:28:84:24:1d:00:f9:57:30:74:19:18:f4:59:45:a7:c6:d8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADC68CACCD7A12B6A019949E964F33953EF7228
        Validity
            Not Before: Mar  5 18:09:56 2024 GMT
            Not After : Mar  4 18:14:56 2025 GMT
        Subject: CN=9A3676BA869F702482A035EFA856021987D3FDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:a7:7f:5a:2b:d5:3c:c2:6d:0d:c6:ef:6c:
                    d5:78:87:67:02:35:a6:6e:87:ea:2c:64:db:54:eb:
                    51:60:66:c1:8e:63:77:b8:ee:da:0b:9b:bc:3f:1f:
                    ad:8b:bd:24:70:da:f2:d6:f2:e9:e2:eb:97:5e:f5:
                    c9:60:6c:96:22:2d:54:52:b2:a9:7e:c3:ec:55:46:
                    d8:fd:b1:7e:b2:a6:ef:1c:7f:a8:66:6f:6e:70:03:
                    dc:39:d6:bb:36:2c:b3:72:ff:00:c0:ab:ad:bc:0b:
                    6c:68:0c:b1:da:d2:f2:ab:3f:af:bf:b8:87:0e:bf:
                    5f:28:ac:a0:79:97:ab:a7:ff:9d:b5:c2:11:cc:c8:
                    fa:77:8d:8e:e1:56:53:39:f1:ca:61:d1:1b:ec:24:
                    f5:01:e4:f8:67:52:34:a8:7e:b6:11:a4:2d:a9:d4:
                    c6:3d:67:b1:d5:61:6f:6d:0d:67:b3:cf:d1:0c:8f:
                    d3:b0:dd:0e:a1:01:ed:69:ba:5f:f4:75:b2:a9:e2:
                    fb:87:cf:ec:7d:28:7c:dc:09:d7:50:c5:df:02:90:
                    a3:35:ea:21:9f:be:69:dd:dd:83:1e:52:3c:76:04:
                    e8:e0:b0:dc:c2:99:7b:30:f2:a3:8b:d8:c9:db:3b:
                    7c:03:cc:a1:dd:1b:a6:a9:fd:b9:41:0e:6f:9c:04:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:76:BA:86:9F:70:24:82:A0:35:EF:A8:56:02:19:87:D3:FD:F4
            X509v3 Authority Key Identifier:
                keyid:AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:b0:c3:2e:a2:20:e5:0a:66:41:bd:18:41:c4:86:bf:23:80:
         4a:66:e9:51:db:3a:4b:3c:2e:be:21:b9:d2:8d:1c:4e:61:86:
         f1:ae:95:45:ef:6c:67:94:26:76:33:37:93:aa:8b:6f:cf:f5:
         14:c0:84:ee:fb:ef:66:cf:32:49:df:e4:49:cf:26:9b:4e:52:
         76:9b:be:c2:63:86:be:0e:dd:5f:eb:18:cf:62:4b:71:4a:67:
         f7:2f:50:53:0f:4b:ba:2e:7e:17:f9:c1:a6:c6:ab:32:8d:8c:
         f1:6f:5d:e5:31:ec:38:29:45:0c:5f:34:e3:4c:49:ed:3c:e4:
         df:ab:66:f2:c5:4d:fe:e2:79:ff:4d:9e:fe:8a:76:03:90:d9:
         5b:6a:0c:bb:a2:ac:b3:cc:af:87:90:fc:19:7c:2a:b2:2d:69:
         b4:6a:59:a0:d1:00:e3:eb:06:b6:52:0e:ef:35:36:fc:cc:dd:
         9c:93:ef:f5:f3:8b:55:1c:1f:f9:30:b8:ee:70:6a:17:bc:a1:
         94:f2:03:95:6a:85:4b:33:ed:de:ff:2e:cf:65:88:00:9f:83:
         10:32:9d:32:65:9d:59:82:e3:17:7d:90:2e:04:e5:bc:b0:84:
         cc:69:41:ab:7e:4f:e5:ec:20:1f:10:8f:32:07:dd:37:43:e6:
         cc:d5:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org