Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/323830313a303a3134313a3a2f34382d3634203d3e20323634363833.roa
File:                     323830313a303a3134313a3a2f34382d3634203d3e20323634363833.roa (raw, json)
Hash identifier:          4PyJSK7NR0aTw+qv+h53fwCBLd+ar6F0sHcAgKapNEU=
Subject key identifier:   94:CF:E1:61:DA:C0:02:78:72:61:DD:DB:22:FB:68:EA:A7:7F:23:3F
Certificate issuer:       /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial:       747E99331E0F2E6842BEF3EDDDE413AB4CA1A366
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/323830313a303a3134313a3a2f34382d3634203d3e20323634363833.roa
Signing time:             Tue 05 Mar 2024 18:23:35 +0000
ROA not before:           Tue 05 Mar 2024 18:18:35 +0000
ROA not after:            Tue 04 Mar 2025 18:23:35 +0000
asID:                     264683
IP address blocks:        2801:0:141::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7e:99:33:1e:0f:2e:68:42:be:f3:ed:dd:e4:13:ab:4c:a1:a3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
        Validity
            Not Before: Mar  5 18:18:35 2024 GMT
            Not After : Mar  4 18:23:35 2025 GMT
        Subject: CN=94CFE161DAC002787261DDDB22FB68EAA77F233F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:80:a7:df:5d:9c:e9:2c:20:17:f2:b2:d4:e5:
                    c4:4c:98:a0:9e:c7:ff:83:a5:65:a5:4c:85:83:73:
                    03:24:50:02:7f:43:89:20:3e:46:7e:bc:16:ff:4d:
                    e7:43:e8:c0:e9:3b:fd:d3:75:b1:2b:51:d5:d6:37:
                    aa:ee:fb:48:46:55:90:58:56:fa:56:6b:77:39:8b:
                    5a:e4:07:c3:0b:5b:81:87:af:01:61:cb:e8:8f:e2:
                    bf:08:a3:03:56:45:a8:de:df:14:9f:f7:e6:33:c7:
                    38:7f:ec:62:ff:43:08:f9:46:14:de:bc:8b:df:a1:
                    2e:3b:30:48:0f:89:ba:d1:cf:f5:cd:1a:78:70:0d:
                    3c:65:82:09:ab:38:f0:a1:f2:6f:53:3a:75:fa:e9:
                    cb:0a:b4:b0:c3:8b:18:a0:96:d1:1f:04:55:3f:3c:
                    71:c7:6b:9e:ff:d7:0c:ae:60:1f:2c:18:69:36:4d:
                    78:8e:91:93:62:a8:04:11:ed:fc:f2:3f:ce:23:c1:
                    bd:dd:21:e7:d2:aa:0e:8f:8f:26:7d:21:42:62:0b:
                    97:7f:6d:c5:8c:01:e2:8b:0f:5f:92:15:dc:43:56:
                    fb:b0:ec:7d:e4:c2:8d:c4:df:6c:f3:83:0a:7b:cc:
                    b1:ae:31:fb:73:d6:e0:3d:1a:a5:bc:40:c0:a6:ce:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CF:E1:61:DA:C0:02:78:72:61:DD:DB:22:FB:68:EA:A7:7F:23:3F
            X509v3 Authority Key Identifier:
                keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/323830313a303a3134313a3a2f34382d3634203d3e20323634363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:141::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:76:63:98:31:c0:6d:03:18:d9:60:7d:02:e5:26:10:f4:
         b9:4c:6a:41:32:e8:e1:25:89:1e:6b:c9:3f:fb:04:9a:7c:ac:
         81:b8:1d:f1:df:6b:b9:19:0e:a9:b7:88:94:d8:6c:da:a7:4f:
         f1:2b:0a:29:54:1e:1e:3b:1e:b8:33:26:71:08:b7:10:05:dd:
         78:f9:5b:74:a4:db:42:33:9d:66:ce:b0:ad:1a:2c:7d:ef:67:
         5d:bb:e0:91:1e:06:f9:90:b2:09:85:3a:9e:aa:b6:38:0f:f8:
         b0:f8:a2:d4:97:1b:bc:c8:54:be:83:54:0d:c6:61:73:52:51:
         8e:6e:34:27:7c:2e:d1:d0:56:bd:9e:96:3c:24:df:0e:1c:1b:
         be:7e:fe:fa:72:68:41:58:91:5f:16:a8:d5:04:c3:66:29:a4:
         e6:09:88:6b:8d:fb:4f:9b:30:53:57:90:3b:27:b6:34:6a:e0:
         0a:0a:2a:07:40:78:80:db:dd:04:f4:93:43:df:6f:10:f6:56:
         88:fa:36:0f:89:2c:2f:8b:99:f5:de:c1:a4:a8:23:59:32:25:
         5d:f6:e6:b5:37:e3:ed:b7:a2:96:b5:6c:c6:f9:5d:6b:7f:62:
         30:ae:26:43:f8:55:39:66:b8:7e:91:dc:97:81:61:11:12:93:
         22:da:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org