Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/323830313a31393a623030303a3a2f34382d3438203d3e20323636363636.roa
File:                     323830313a31393a623030303a3a2f34382d3438203d3e20323636363636.roa (raw, json)
Hash identifier:          ULoxAZ6Zyt/Dg/nYamefG8Kf0Qi1jcqKyPKZcx7eO9Y=
Subject key identifier:   EA:48:2B:98:47:F6:19:90:D2:A6:67:3C:DF:E9:B9:D3:ED:4A:FB:7E
Certificate issuer:       /CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A
Certificate serial:       6FA3D27BEB79FD6A933A65B7E3A0678121D8C5B7
Authority key identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/323830313a31393a623030303a3a2f34382d3438203d3e20323636363636.roa
Signing time:             Tue 05 Mar 2024 18:04:29 +0000
ROA not before:           Tue 05 Mar 2024 17:59:29 +0000
ROA not after:            Tue 04 Mar 2025 18:04:29 +0000
asID:                     266666
IP address blocks:        2801:19:b000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a3:d2:7b:eb:79:fd:6a:93:3a:65:b7:e3:a0:67:81:21:d8:c5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A
        Validity
            Not Before: Mar  5 17:59:29 2024 GMT
            Not After : Mar  4 18:04:29 2025 GMT
        Subject: CN=EA482B9847F61990D2A6673CDFE9B9D3ED4AFB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:d7:33:43:d8:ab:84:e8:25:dd:93:a6:fd:
                    df:e9:ce:86:15:fa:fb:b4:dd:5e:56:f5:8d:f5:e5:
                    2c:08:f5:43:6f:d7:e7:42:66:d7:99:43:aa:59:f9:
                    b8:a1:73:59:17:1d:ae:9d:3d:b4:bf:99:e3:78:60:
                    52:97:fb:53:6b:f3:77:c4:87:15:a2:66:b9:48:69:
                    1d:fb:0a:a7:02:f6:fe:58:75:39:5b:49:78:33:80:
                    25:37:ab:21:e5:3c:df:3d:82:c0:a6:d2:bf:ba:61:
                    8a:fd:9a:9c:be:fa:cc:5d:ac:45:cc:e8:72:57:78:
                    d8:aa:1e:8c:52:3b:75:df:89:e0:70:93:d3:51:81:
                    1f:28:12:59:70:db:57:4f:11:b9:03:07:4b:49:23:
                    5b:20:32:a9:42:f1:78:4b:64:c9:c9:7b:6b:c9:41:
                    d9:9a:50:ad:d5:58:27:36:fa:3d:af:e3:81:e8:31:
                    60:90:66:54:0f:1b:02:67:b7:06:9d:84:fd:cb:6e:
                    1f:71:ec:08:a9:57:65:ad:dd:32:d9:ed:32:43:7e:
                    01:8a:9d:84:c2:03:a6:b8:38:db:fa:93:aa:53:fb:
                    f8:34:c7:0f:f6:a0:ed:ee:61:b6:06:4d:64:04:dd:
                    69:a4:3c:2a:7d:1c:d8:25:bd:34:60:0b:47:e9:46:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:48:2B:98:47:F6:19:90:D2:A6:67:3C:DF:E9:B9:D3:ED:4A:FB:7E
            X509v3 Authority Key Identifier:
                keyid:C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/323830313a31393a623030303a3a2f34382d3438203d3e20323636363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:a5:cb:af:14:8e:81:13:71:bd:e2:62:69:5a:b5:2f:5b:a3:
         e6:bf:cb:dc:3d:c7:86:21:cc:32:96:de:70:5c:6a:71:67:be:
         1b:2c:6d:70:89:79:99:5a:26:78:85:19:38:de:cc:33:a3:94:
         4b:4b:d9:3f:6c:dc:f3:b7:c3:a6:81:cb:cc:da:7b:34:48:73:
         ec:a3:fc:5b:a5:37:e0:c3:7c:b1:88:cd:61:ae:cf:87:c1:56:
         44:3b:51:ce:52:2e:f2:c3:e4:73:5a:87:96:c5:2b:2e:7c:84:
         b0:38:48:9b:81:a1:fe:1e:7d:5c:3f:6e:7f:15:8f:5a:54:29:
         16:8c:4e:a7:fd:f9:1a:60:3d:7d:68:72:26:cb:a6:d8:d8:b6:
         54:b4:21:26:8b:08:c8:7d:2f:a5:84:e0:b4:81:49:af:69:f5:
         11:15:5b:47:e4:17:5d:9e:53:7c:13:9c:27:d9:d2:8c:cc:06:
         a6:02:68:98:ff:89:4b:3c:5d:34:a6:46:3e:85:23:36:b9:4b:
         c4:91:4b:64:a2:cf:e5:65:0b:89:77:4e:7b:94:7d:f8:53:02:
         14:e2:2d:e6:48:ff:fb:20:33:db:23:70:53:d9:d8:d7:2b:a2:
         50:a4:34:b8:b0:58:42:20:9e:99:01:69:cb:4f:db:27:27:c3:
         0c:c3:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org