Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/323830313a3164613a3a2f34342d3438203d3e20323730303138.roa
File:                     323830313a3164613a3a2f34342d3438203d3e20323730303138.roa (raw, json)
Hash identifier:          4QH86UfmlKzhcn09N/xkwTRGdjo3MiRWemAQ0jNqi0k=
Subject key identifier:   26:D6:49:85:77:6D:45:84:DC:19:70:1A:9D:07:8A:40:A7:8F:FD:E4
Certificate issuer:       /CN=72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C
Certificate serial:       564D0517C3926FAAE1B7FD319CEAE785DE2EDA6E
Authority key identifier: 72:B6:7F:DA:04:24:6C:53:AE:1C:1A:7E:BE:6E:F5:7B:4E:9C:84:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/323830313a3164613a3a2f34342d3438203d3e20323730303138.roa
Signing time:             Tue 05 Mar 2024 17:41:54 +0000
ROA not before:           Tue 05 Mar 2024 17:36:54 +0000
ROA not after:            Tue 04 Mar 2025 17:41:54 +0000
asID:                     270018
IP address blocks:        2801:1da::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4d:05:17:c3:92:6f:aa:e1:b7:fd:31:9c:ea:e7:85:de:2e:da:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C
        Validity
            Not Before: Mar  5 17:36:54 2024 GMT
            Not After : Mar  4 17:41:54 2025 GMT
        Subject: CN=26D64985776D4584DC19701A9D078A40A78FFDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:2d:73:6b:14:f9:92:b3:0b:66:43:f5:71:
                    3e:54:d3:52:2a:0d:66:77:96:8b:de:a6:59:6d:9b:
                    45:7e:4e:64:1a:12:fa:b4:83:40:44:3a:c7:8b:76:
                    da:c6:f7:a0:99:ab:71:bc:ca:f8:61:6a:e3:fb:02:
                    a7:b4:ee:87:64:d0:27:e5:ad:df:09:f3:1f:ee:95:
                    14:5b:72:41:17:9d:82:8a:95:c9:85:88:d5:1f:ef:
                    fe:37:51:84:ae:01:63:87:6d:36:6e:7a:e6:2a:de:
                    f1:33:7e:86:42:43:52:94:fb:36:46:04:54:ae:9f:
                    ff:7a:6a:2a:28:6c:4b:9b:6b:ff:ef:b9:81:3f:f2:
                    c9:21:d6:5d:2d:c9:05:cb:79:5e:ed:81:0e:43:cd:
                    98:27:a2:8f:38:57:01:61:28:0b:b9:48:af:67:50:
                    39:62:85:24:9b:4a:a8:9e:b0:09:1a:f5:fe:82:f2:
                    76:8d:d5:56:6f:8e:17:aa:82:69:0c:f5:5b:c5:c0:
                    98:b0:00:18:64:ac:d8:71:f2:89:28:28:c0:17:46:
                    d9:48:e3:55:a1:d7:3f:47:22:65:2f:4d:5f:84:ba:
                    0f:cd:9e:94:f4:6e:ff:e9:06:e7:fa:99:ea:78:80:
                    9f:f9:78:3d:69:f7:a6:f8:dd:02:8e:aa:b3:df:52:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D6:49:85:77:6D:45:84:DC:19:70:1A:9D:07:8A:40:A7:8F:FD:E4
            X509v3 Authority Key Identifier:
                keyid:72:B6:7F:DA:04:24:6C:53:AE:1C:1A:7E:BE:6E:F5:7B:4E:9C:84:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/323830313a3164613a3a2f34342d3438203d3e20323730303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1da::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:5f:d1:dd:0a:26:97:12:e5:8c:ad:9d:50:0b:62:13:df:
         cd:c6:79:21:ee:c3:83:dc:3d:23:ae:15:9c:9c:3d:5b:e9:38:
         6d:07:e4:eb:b5:75:32:c0:58:79:98:8c:9f:ae:26:05:59:76:
         a6:7d:2e:4b:52:45:31:98:9e:3b:90:74:9a:b6:4d:c6:0c:3c:
         78:68:c2:14:49:57:a6:bc:22:83:01:ac:3e:03:4c:fd:9a:96:
         91:d8:fe:5a:f1:08:f2:61:7d:75:40:33:35:f4:15:80:ce:6a:
         e7:fa:7a:b8:e6:f0:86:bb:58:18:8a:e7:2c:89:82:33:9a:9e:
         3e:11:e1:d0:ef:dd:1a:c2:e4:e6:f3:cf:82:01:f7:89:f8:1b:
         98:f8:ed:8c:d2:4d:f1:c9:ba:a2:79:e7:c9:99:33:34:e3:09:
         d4:0c:f1:0e:88:ac:8d:84:40:39:9d:32:8e:b5:e6:1f:95:8d:
         25:9b:c7:ef:a7:21:74:bb:c9:e3:9e:d7:ac:fe:fb:02:54:fd:
         e0:97:92:dc:a6:f6:ad:99:67:f1:0b:12:9d:88:c5:4c:9d:86:
         a0:92:f2:25:11:fe:d7:75:44:d5:49:b9:29:7b:ee:a2:a4:c7:
         fb:22:5d:d6:3f:3f:1c:6a:d1:34:7f:87:89:b3:58:68:4c:08:
         a5:42:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 11:56:30 2024 by rpki-client on console-fra.rpki-client.org