Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/323830313a31363a623830303a3a2f34382d3438203d3e20323733303737.roa
File:                     323830313a31363a623830303a3a2f34382d3438203d3e20323733303737.roa (raw, json)
Hash identifier:          qQ4qGgGfxj19Dkuo6N913eXO2wwwDGEKzwZSF1jlltc=
Subject key identifier:   EA:FE:D4:F0:3E:DF:44:11:D9:AF:EB:6D:0C:94:E8:0D:9C:A5:8E:77
Certificate issuer:       /CN=D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E
Certificate serial:       6955AB09AD5C10AE5BB93C71563D704400E2E48F
Authority key identifier: D0:ED:27:78:54:E0:C1:7B:A2:C4:78:7F:A7:6C:B7:B7:B8:75:CF:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/323830313a31363a623830303a3a2f34382d3438203d3e20323733303737.roa
Signing time:             Tue 05 Mar 2024 18:05:03 +0000
ROA not before:           Tue 05 Mar 2024 18:00:03 +0000
ROA not after:            Tue 04 Mar 2025 18:05:03 +0000
asID:                     273077
IP address blocks:        2801:16:b800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:55:ab:09:ad:5c:10:ae:5b:b9:3c:71:56:3d:70:44:00:e2:e4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E
        Validity
            Not Before: Mar  5 18:00:03 2024 GMT
            Not After : Mar  4 18:05:03 2025 GMT
        Subject: CN=EAFED4F03EDF4411D9AFEB6D0C94E80D9CA58E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:66:16:d2:4a:a7:a9:e2:d7:b2:28:8c:a0:
                    c9:60:53:4d:ab:03:bb:ee:a1:47:0a:d5:b1:a2:10:
                    e8:d4:66:04:ca:c8:1d:7d:ec:e9:86:f7:4b:49:36:
                    d0:39:c6:55:9e:a4:ef:0d:74:51:43:ba:19:ca:a5:
                    80:22:be:aa:07:72:72:b3:cf:44:43:0a:61:7e:95:
                    bc:f8:6e:04:0a:26:3a:cb:f8:e7:40:ca:71:70:eb:
                    09:21:91:c9:b5:91:6d:7f:0b:3a:00:0e:35:40:d1:
                    dd:a4:0e:3b:57:ec:38:4a:d7:53:66:59:f8:3b:86:
                    f2:0a:5c:89:97:77:03:54:87:d4:1c:32:7f:18:a0:
                    09:fe:9b:90:e9:e7:b7:8a:4c:25:34:ec:4d:b6:4f:
                    6a:13:ec:b5:22:04:71:bd:72:69:9d:4c:d8:ea:15:
                    39:99:aa:f5:76:0a:47:90:90:97:22:b7:36:35:28:
                    65:ce:fa:a6:a6:e2:3f:ef:4e:18:0c:1d:9e:e5:57:
                    b4:f6:04:bc:3b:0c:98:72:73:d9:5f:a2:9b:62:19:
                    ba:66:6c:13:14:80:d3:7e:46:15:e6:c6:8b:ef:7a:
                    6a:db:45:a9:0f:6e:ce:25:50:eb:21:3f:44:3a:7f:
                    0b:67:6b:45:e4:41:17:ae:63:1b:0e:19:35:4b:82:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FE:D4:F0:3E:DF:44:11:D9:AF:EB:6D:0C:94:E8:0D:9C:A5:8E:77
            X509v3 Authority Key Identifier:
                keyid:D0:ED:27:78:54:E0:C1:7B:A2:C4:78:7F:A7:6C:B7:B7:B8:75:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/323830313a31363a623830303a3a2f34382d3438203d3e20323733303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:d1:a1:01:7e:a3:97:2f:8a:99:42:43:d1:d1:fd:10:df:88:
         79:f0:e1:c3:98:19:5d:14:0e:8c:ed:f2:de:8d:90:ac:82:d7:
         11:e1:0a:5b:22:70:61:20:01:d2:9d:81:e5:3f:6a:42:c3:19:
         7a:b5:99:d7:69:94:6f:3f:e6:8c:0f:dc:dc:c9:1b:02:c4:64:
         01:21:45:43:ad:a3:f5:12:63:c1:67:76:ba:8f:9c:fb:6b:95:
         f7:a1:0c:92:0e:61:c7:2d:25:99:4b:ec:64:83:81:0b:6f:c9:
         71:63:15:95:57:ba:62:d3:8c:16:f7:13:e7:c1:8a:f1:bd:9c:
         ca:7e:55:70:9c:18:53:c9:9d:e2:87:da:16:09:9f:db:82:56:
         79:bf:e1:4e:04:e6:58:a8:de:02:58:5a:d1:20:76:e7:b2:ca:
         9e:2d:cd:71:43:d1:3f:f4:a1:94:f2:c8:2f:9f:81:af:ba:2f:
         34:ce:31:4a:c3:84:f4:31:98:88:ac:35:59:f4:db:d3:bf:eb:
         15:61:29:b0:69:8c:2a:2a:6a:08:7f:b8:c7:ee:85:64:d5:0d:
         49:45:e1:63:dd:3c:9f:97:41:3c:07:7a:70:c9:16:f1:a6:c8:
         ab:2c:86:94:69:7a:72:03:72:e8:db:cd:bb:6c:6b:d8:92:20:
         05:11:96:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org