Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31643a383830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          8cBk58LeU75tzkcstbURY5KTOBvAEXTeaMvWYLXKlrw=
Subject key identifier:   4F:22:42:AC:B0:11:EC:04:18:74:89:C4:31:BB:EF:87:76:19:39:BC
Certificate issuer:       /CN=C79672A7C45117FFB4537D3CBC2D42BB79266BA6
Certificate serial:       22D8011A5CEDFF56027B9D344CFFC86EF0BCBD7A
Authority key identifier: C7:96:72:A7:C4:51:17:FF:B4:53:7D:3C:BC:2D:42:BB:79:26:6B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C79672A7C45117FFB4537D3CBC2D42BB79266BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:47:44 +0000
ROA not before:           Tue 05 Mar 2024 17:42:44 +0000
ROA not after:            Tue 04 Mar 2025 17:47:44 +0000
asID:                     19429
IP address blocks:        2801:1d:8800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/C79672A7C45117FFB4537D3CBC2D42BB79266BA6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/C79672A7C45117FFB4537D3CBC2D42BB79266BA6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C79672A7C45117FFB4537D3CBC2D42BB79266BA6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d8:01:1a:5c:ed:ff:56:02:7b:9d:34:4c:ff:c8:6e:f0:bc:bd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C79672A7C45117FFB4537D3CBC2D42BB79266BA6
        Validity
            Not Before: Mar  5 17:42:44 2024 GMT
            Not After : Mar  4 17:47:44 2025 GMT
        Subject: CN=4F2242ACB011EC04187489C431BBEF87761939BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:cf:49:41:94:9f:04:8e:4f:ef:d7:26:2c:
                    c9:5a:7a:57:72:4b:bf:5f:e4:3a:a8:74:c6:bc:7c:
                    d1:a2:43:01:3d:d4:40:c7:92:6f:19:f1:19:18:ff:
                    00:e5:d2:51:72:6d:a3:bd:44:71:5b:4c:a8:bd:15:
                    a2:e8:e2:9b:5f:85:10:e2:81:f6:f7:23:8f:c5:fa:
                    15:bc:e9:f4:72:66:e7:f4:e9:ba:67:1d:da:00:ab:
                    fa:79:de:da:16:c2:ed:00:51:ee:79:fc:36:31:e7:
                    d8:5a:94:f9:34:0c:86:03:1e:57:ae:24:49:68:91:
                    f8:61:3f:32:4a:b6:5f:cb:6c:45:45:4d:a3:ee:88:
                    15:94:3e:6c:76:7d:b4:da:40:32:5b:42:37:4d:45:
                    8a:e8:f1:5d:35:77:ea:09:e0:0b:d5:fd:ef:ad:d2:
                    e3:94:58:d5:f2:47:90:18:da:77:e2:17:f9:05:d1:
                    b2:bc:6c:76:81:73:de:c1:54:47:70:79:cb:a1:2d:
                    b0:69:12:e5:ea:dc:64:81:9f:14:10:65:28:c9:41:
                    a3:36:69:01:8c:d6:b4:b7:74:f3:7a:50:d1:6b:4c:
                    72:b1:10:bb:3a:7f:97:d3:da:31:38:65:6f:57:9d:
                    48:89:87:94:26:d9:06:6c:ed:0c:42:0d:9a:98:20:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:22:42:AC:B0:11:EC:04:18:74:89:C4:31:BB:EF:87:76:19:39:BC
            X509v3 Authority Key Identifier:
                keyid:C7:96:72:A7:C4:51:17:FF:B4:53:7D:3C:BC:2D:42:BB:79:26:6B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/C79672A7C45117FFB4537D3CBC2D42BB79266BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C79672A7C45117FFB4537D3CBC2D42BB79266BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:74:98:b3:65:08:eb:76:06:b7:82:4e:fc:f4:8a:c3:65:
         1d:34:51:af:0d:03:19:5d:78:f6:a8:75:66:f9:80:ba:9d:fb:
         82:3b:cb:4e:08:5f:a9:7f:ee:65:2f:d3:d5:8f:40:0a:54:2c:
         f6:5e:fa:33:7f:b9:9e:0e:80:a2:18:79:5a:47:35:43:81:b4:
         a7:80:8a:8a:ca:dd:27:87:c1:b5:75:cf:08:02:4e:94:20:50:
         19:fd:27:61:68:59:a7:07:1c:ec:dc:fd:1f:b1:cb:63:9b:ff:
         ad:96:76:27:ec:a1:03:fd:06:7a:09:55:b1:42:3c:e1:4d:d2:
         ea:0b:b3:e4:f4:4e:32:f6:13:1c:63:71:cc:9e:38:e2:c2:04:
         e8:50:fc:5b:4b:a9:d8:cb:f2:48:20:e2:e0:c7:aa:a9:20:ab:
         f3:e3:ee:92:79:93:f1:15:d3:00:dc:f3:19:07:1c:5d:b3:29:
         ba:8f:2a:93:0e:0e:9c:10:27:6a:5a:c5:b9:db:62:72:1d:6f:
         d8:16:0f:2b:78:a9:77:c1:9c:8a:19:e4:d4:8a:87:10:0a:ea:
         23:83:16:94:a1:76:ef:b7:08:e2:56:1a:20:9e:d6:96:6c:8b:
         13:82:72:c6:79:06:68:4b:60:4e:dc:a5:de:f1:ad:6b:9b:fb:
         b1:73:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org