Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/323830313a31643a313830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31643a313830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          KLyFUm1RPqmQsyGYH29D+UTg3Ief8GlL6YNg2WG9AcI=
Subject key identifier:   13:93:3B:2F:47:A8:19:19:62:D7:D0:91:23:37:D9:DC:73:ED:EF:41
Certificate issuer:       /CN=A3533827D639847A1C29B774A395C0442B169432
Certificate serial:       05F0DCD35F8DE6049BAC7478DF16E5CB0E1E937E
Authority key identifier: A3:53:38:27:D6:39:84:7A:1C:29:B7:74:A3:95:C0:44:2B:16:94:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3533827D639847A1C29B774A395C0442B169432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/323830313a31643a313830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:05:28 +0000
ROA not before:           Tue 05 Mar 2024 18:00:28 +0000
ROA not after:            Tue 04 Mar 2025 18:05:28 +0000
asID:                     262589
IP address blocks:        2801:1d:1800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/A3533827D639847A1C29B774A395C0442B169432.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/A3533827D639847A1C29B774A395C0442B169432.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3533827D639847A1C29B774A395C0442B169432.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f0:dc:d3:5f:8d:e6:04:9b:ac:74:78:df:16:e5:cb:0e:1e:93:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3533827D639847A1C29B774A395C0442B169432
        Validity
            Not Before: Mar  5 18:00:28 2024 GMT
            Not After : Mar  4 18:05:28 2025 GMT
        Subject: CN=13933B2F47A8191962D7D0912337D9DC73EDEF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:98:86:34:63:af:a1:15:28:4f:bb:5a:d8:
                    eb:ca:67:98:50:d6:39:26:cc:0a:e2:89:a0:a2:80:
                    29:e4:47:c8:19:4a:5d:cd:67:ce:c9:b0:d3:36:f5:
                    c0:91:5f:97:50:74:39:32:08:c8:80:08:d1:dd:5a:
                    da:74:88:69:50:79:d2:fe:39:f7:a4:8d:4d:d0:75:
                    b4:1b:69:b9:c7:6a:0a:f3:bd:63:2e:3e:af:09:cd:
                    17:c3:5c:c1:7f:f1:77:22:11:46:6f:33:77:f8:e8:
                    8a:0b:03:08:f1:2f:d8:50:0f:20:6b:5a:23:1e:b5:
                    9d:03:d7:b4:f1:04:7e:bf:5e:03:87:2b:71:ef:be:
                    79:cb:76:d2:0e:0c:38:9a:61:97:38:8d:a5:8d:b8:
                    7a:15:6e:a8:ee:b9:e0:50:42:de:2f:97:16:c1:9a:
                    65:09:5c:0b:bd:a1:f6:15:12:8b:bb:47:3e:6c:02:
                    0a:ea:7f:8b:88:c2:5d:e6:82:d9:93:1a:10:3d:b1:
                    7c:65:10:75:69:0c:4c:7e:45:19:57:6e:10:60:49:
                    92:3b:54:d6:fc:fd:35:8d:ff:10:cf:b9:6f:35:a4:
                    cd:18:4c:0b:89:47:3b:14:ba:bf:44:59:21:09:f9:
                    5c:81:c7:d8:a4:4b:12:70:50:a9:5d:d6:7e:b6:23:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:3B:2F:47:A8:19:19:62:D7:D0:91:23:37:D9:DC:73:ED:EF:41
            X509v3 Authority Key Identifier:
                keyid:A3:53:38:27:D6:39:84:7A:1C:29:B7:74:A3:95:C0:44:2B:16:94:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/A3533827D639847A1C29B774A395C0442B169432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3533827D639847A1C29B774A395C0442B169432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8CE9B81B277DCAEF6DB625FB11B34E8AA0B3944C420EE3583291EFFA93FC084/0/323830313a31643a313830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:22:d6:a4:51:1d:60:c0:f0:c1:b4:b8:09:a4:66:95:21:94:
         2c:f5:80:28:4a:6f:d9:8e:15:00:86:73:79:10:e2:c2:6f:33:
         38:56:4c:24:2c:30:77:76:59:68:8b:31:4b:c3:69:28:ce:6f:
         47:c9:0c:0a:e4:3e:84:e8:b5:47:50:04:9b:a3:be:84:1f:e4:
         59:a6:13:7f:5b:47:3d:e0:4c:d2:e7:95:7a:6b:46:22:1b:71:
         cf:fa:39:83:4d:c4:f2:d1:05:d0:c3:ad:b0:49:9f:64:38:7b:
         28:b5:55:70:48:a0:24:cf:41:70:85:9b:fc:d9:69:84:3e:17:
         ad:61:68:87:5f:b6:f0:92:bf:8f:29:12:ea:6e:a0:51:63:7a:
         84:ee:42:ee:d0:12:e6:9e:c0:7d:36:b4:06:7b:7d:9c:7b:4b:
         04:5c:f0:23:32:5c:84:b8:e4:64:c6:77:f1:dd:44:ad:bb:01:
         8e:2f:cb:93:d5:53:ad:5e:4a:17:91:75:f8:25:51:ac:be:e1:
         82:84:de:60:8a:4b:7b:bf:ff:42:ca:6c:8e:e1:31:04:4b:e0:
         77:ec:32:88:3d:07:89:be:f5:b5:e0:c5:d9:89:f7:d7:c9:84:
         f3:1f:a6:84:14:95:55:5f:2c:5d:2d:c4:9c:18:3b:0b:aa:f9:
         5c:8e:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org