Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa
File:                     323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa (raw, json)
Hash identifier:          Pz9dsNHjZlKSNtvIdMp8eaOrTRiy8H5Pt4aOF07j/Rg=
Subject key identifier:   0C:18:61:4A:B5:C1:69:3E:E4:AC:E8:9C:C5:C6:29:49:66:5F:E4:AF
Certificate issuer:       /CN=3FA213F071F512993E71744BA485B170F0449C83
Certificate serial:       1E509E0940E3D58C329BB877881CEF1774076BB2
Authority key identifier: 3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa
Signing time:             Tue 05 Mar 2024 18:03:06 +0000
ROA not before:           Tue 05 Mar 2024 17:58:06 +0000
ROA not after:            Tue 04 Mar 2025 18:03:06 +0000
asID:                     267893
IP address blocks:        2801:1e:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:50:9e:09:40:e3:d5:8c:32:9b:b8:77:88:1c:ef:17:74:07:6b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA213F071F512993E71744BA485B170F0449C83
        Validity
            Not Before: Mar  5 17:58:06 2024 GMT
            Not After : Mar  4 18:03:06 2025 GMT
        Subject: CN=0C18614AB5C1693EE4ACE89CC5C62949665FE4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:77:ca:0d:19:8f:f0:80:a0:f9:3a:b5:6d:
                    4e:0c:4a:11:73:0c:03:57:52:13:e2:19:87:41:c2:
                    78:9f:e7:ac:40:80:69:22:db:54:b6:55:ac:5f:9f:
                    34:b6:cf:6a:06:b4:38:ad:75:a1:9a:67:25:6e:f6:
                    1f:e5:03:74:98:2d:5e:6a:f8:46:ee:54:2b:77:05:
                    43:41:2b:25:9f:0d:4b:4f:e9:29:37:d3:4c:34:1b:
                    84:31:05:1f:f1:47:2b:42:d3:0f:99:6f:74:27:a2:
                    a1:86:13:a7:9d:93:bf:31:0e:66:04:f9:48:25:34:
                    ab:81:93:a0:1e:06:53:c3:a0:08:a3:e3:7d:4b:ce:
                    e2:5d:a9:04:a4:75:f9:b5:50:34:74:55:ab:2c:ec:
                    22:96:c1:8d:3b:41:5d:7e:41:2a:4b:9b:94:ba:36:
                    b8:c3:0d:61:4d:c1:e4:cf:18:44:99:02:cd:99:0b:
                    7b:78:80:f9:ab:3e:d8:6d:63:f7:30:6b:fb:1e:9d:
                    e2:98:4d:c0:cd:18:40:2e:3f:8d:58:a6:77:53:2f:
                    57:5d:14:9a:0c:4c:3d:00:cd:c8:09:86:15:6f:7d:
                    3f:47:fd:2a:e4:7c:b2:40:1c:95:80:c0:9c:18:e5:
                    95:63:19:60:41:8e:14:99:e7:ed:0a:f2:1d:40:32:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:18:61:4A:B5:C1:69:3E:E4:AC:E8:9C:C5:C6:29:49:66:5F:E4:AF
            X509v3 Authority Key Identifier:
                keyid:3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:77:a4:90:ce:28:eb:09:e0:44:84:72:ea:79:a9:ae:f9:f0:
         05:bc:18:0e:f4:f3:f7:86:d5:38:fc:62:80:25:b0:8b:c8:57:
         60:1b:68:fb:80:f0:db:e9:c5:20:b3:84:76:60:aa:2a:6d:3f:
         92:68:be:00:9b:62:87:73:d6:08:39:c1:5a:4a:39:f0:54:d2:
         f9:b0:c6:a3:ac:f1:45:ab:17:c4:ba:b8:6b:7a:c7:64:f6:3c:
         94:a1:93:8f:f8:ac:35:47:b1:26:a5:d1:7e:2e:fd:ec:37:d6:
         6c:a1:a4:33:5c:b8:a8:97:a8:9a:46:72:c5:29:b5:83:41:66:
         3c:ae:71:3d:93:43:8c:ab:53:a0:9a:fe:4c:bd:64:0a:df:9c:
         d4:ca:bc:82:93:b4:4b:50:e9:a6:dd:81:0b:ef:47:da:f2:b8:
         90:da:e4:92:f7:bc:fb:e0:54:de:a4:8f:32:92:72:8f:ba:b7:
         71:2e:d5:0a:c4:08:d4:45:ed:0a:74:7f:ec:b8:34:97:66:27:
         52:80:be:ce:c5:3b:f0:58:8b:76:0f:44:bc:0b:79:3b:1f:ec:
         12:3e:37:4d:39:a9:28:07:a4:e2:c8:0e:ee:ea:74:1e:c3:6d:
         83:fb:b8:05:2b:42:fb:7e:68:49:40:f3:80:c7:80:bc:c5:d6:
         8e:cb:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:47:42 2024 by rpki-client on console-fra.rpki-client.org