Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/323830313a63343a32363a313a3a2f36342d313238203d3e20323635353834.roa
File:                     323830313a63343a32363a313a3a2f36342d313238203d3e20323635353834.roa (raw, json)
Hash identifier:          LksorBjAtdocbWnOv4V03fmigUE1vawe4TyFCJlTj8c=
Subject key identifier:   85:FD:D1:3C:5D:B0:42:8A:38:F7:8C:6A:57:37:E6:38:AC:C7:2F:8C
Certificate issuer:       /CN=CD0B4D24BCD10878701F4C262615351929118638
Certificate serial:       204C862DF49F399C9F8ABFB69436E45F751CE103
Authority key identifier: CD:0B:4D:24:BC:D1:08:78:70:1F:4C:26:26:15:35:19:29:11:86:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/323830313a63343a32363a313a3a2f36342d313238203d3e20323635353834.roa
Signing time:             Tue 05 Mar 2024 17:43:34 +0000
ROA not before:           Tue 05 Mar 2024 17:38:34 +0000
ROA not after:            Tue 04 Mar 2025 17:43:34 +0000
asID:                     265584
IP address blocks:        2801:c4:26:1::/64 maxlen: 128

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4c:86:2d:f4:9f:39:9c:9f:8a:bf:b6:94:36:e4:5f:75:1c:e1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0B4D24BCD10878701F4C262615351929118638
        Validity
            Not Before: Mar  5 17:38:34 2024 GMT
            Not After : Mar  4 17:43:34 2025 GMT
        Subject: CN=85FDD13C5DB0428A38F78C6A5737E638ACC72F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:2f:b1:f4:16:08:99:16:11:f3:14:0e:36:
                    c1:36:5d:50:59:14:24:e0:94:ef:8d:8f:0b:e6:81:
                    17:51:07:a4:9f:dd:d2:a5:d8:4f:21:ca:87:a4:4e:
                    ec:58:9e:ba:1c:a7:b1:ee:87:ad:78:5c:41:c3:10:
                    6b:2f:5d:fb:67:23:c6:e9:f2:74:4b:11:5e:ec:4c:
                    a5:87:a4:63:ce:b3:8c:06:fd:10:40:21:ab:c2:38:
                    6a:19:23:38:9b:c2:2e:d1:6f:41:cd:28:1a:ea:75:
                    3d:ff:68:9c:99:54:df:72:fd:d9:f9:19:18:bb:6f:
                    b7:0c:6d:c3:3d:64:43:dd:67:d5:b6:a5:b7:9a:a6:
                    12:48:40:0f:fd:c8:00:a5:87:37:1d:75:89:d1:cf:
                    0d:6e:ef:53:e8:77:cc:1c:67:2d:17:e3:2f:0b:4b:
                    f3:d3:f3:ef:65:89:29:42:76:32:b7:df:4e:ff:df:
                    c7:1b:7c:cf:3b:d5:b2:53:9f:a3:dd:b6:2b:22:dc:
                    c8:d2:5f:1b:ad:34:e7:a2:80:e0:0a:62:8a:38:7e:
                    8c:37:8a:b7:2b:b9:5d:95:2b:0f:42:52:99:bf:47:
                    a8:c8:86:75:e4:b8:e8:0f:29:2e:f8:2f:dd:71:b9:
                    d8:6a:a9:5e:37:de:9d:49:5a:58:3a:97:96:0b:dd:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:D1:3C:5D:B0:42:8A:38:F7:8C:6A:57:37:E6:38:AC:C7:2F:8C
            X509v3 Authority Key Identifier:
                keyid:CD:0B:4D:24:BC:D1:08:78:70:1F:4C:26:26:15:35:19:29:11:86:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/323830313a63343a32363a313a3a2f36342d313238203d3e20323635353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:26:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         72:c7:fb:c8:28:5f:c1:98:03:5d:9a:af:a2:36:dd:5e:d0:e2:
         48:cf:42:1e:88:cf:e4:2b:4a:1f:c3:64:9c:29:bf:30:62:64:
         46:0f:9f:df:f1:28:fa:18:da:51:c8:07:93:cf:9a:05:44:6b:
         62:6e:bf:04:e9:55:2e:39:48:35:29:00:8a:03:09:15:e8:d2:
         6e:5d:f5:a2:e7:fb:3c:26:25:ec:5d:9f:8f:1b:64:d6:f3:59:
         2a:cf:60:4c:8c:5a:03:d7:0c:e4:ea:19:4f:4e:76:e0:c5:6b:
         b4:b0:14:5d:f7:ef:5a:41:e5:7d:a5:d5:0f:bf:fd:a5:70:cd:
         c0:74:b7:11:65:c0:8e:dd:32:3b:e7:2f:37:82:6c:a8:4f:13:
         68:62:2b:67:d2:9d:47:13:be:ec:df:ce:2a:12:ef:a6:c1:d5:
         ba:89:d3:d4:f4:74:fc:df:6f:b2:37:3f:fe:4e:03:04:e4:fc:
         02:46:b7:21:6b:09:5f:cc:b6:bc:de:e7:57:90:b5:06:20:a4:
         45:cb:14:e8:10:01:14:20:a1:d1:1e:43:ef:c2:53:ea:97:d8:
         18:c4:87:01:63:65:6d:df:30:d5:ba:69:0b:f2:a2:56:bf:58:
         12:bb:7e:77:6a:23:a5:b5:06:7e:da:bd:d5:8d:56:0f:5e:cb:
         26:1b:63:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org