Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343036343a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          jhnrNxHvniZ5knBZD8HsJ30Pcb4QnpdN0ywV6mD3IQQ=
Subject key identifier:   F8:90:D7:C2:C5:92:AC:C2:A2:31:43:88:70:94:2F:17:21:97:C5:E0
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       093DDF4543B50083B7F20B4533B6684D400C7EE9
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34372d3437203d3e2033353733.roa
Signing time:             Fri 19 Apr 2024 08:45:00 +0000
ROA not before:           Fri 19 Apr 2024 08:40:00 +0000
ROA not after:            Fri 18 Apr 2025 08:45:00 +0000
asID:                     3573
IP address blocks:        2801:1f0:4064::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3d:df:45:43:b5:00:83:b7:f2:0b:45:33:b6:68:4d:40:0c:7e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Apr 19 08:40:00 2024 GMT
            Not After : Apr 18 08:45:00 2025 GMT
        Subject: CN=F890D7C2C592ACC2A231438870942F172197C5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:82:f8:b7:28:9e:a5:15:26:a8:a9:48:da:
                    71:a8:8f:af:69:04:0e:d9:00:9a:30:37:0b:5f:1e:
                    31:35:7f:f1:16:58:22:ff:fb:46:89:37:47:0c:90:
                    6a:fb:f5:4c:99:59:15:e2:04:67:cc:b1:8f:e8:6a:
                    75:b2:d7:c5:8b:d0:f6:73:89:93:38:aa:5a:90:e4:
                    4a:ba:ab:6b:7a:52:10:31:6b:98:4d:1a:fe:9c:94:
                    b8:32:a1:e9:84:c1:7d:22:57:87:b5:f3:7b:a8:47:
                    32:bb:d2:76:0f:bb:a5:f9:af:2b:5a:b7:4a:db:7b:
                    60:26:23:e3:19:65:26:d3:94:7b:8c:8c:b0:8f:d7:
                    25:a8:00:2f:ca:4c:e5:9f:09:76:14:e4:69:e2:6a:
                    56:08:1b:32:1e:ba:dc:81:f3:e5:19:17:dd:a0:89:
                    6c:37:2e:02:6a:64:dc:2e:50:0c:b6:fd:2a:f3:1d:
                    53:6c:51:e4:6c:a0:0d:37:3b:d1:8c:9e:2d:50:43:
                    64:25:36:69:9f:0e:61:88:f3:3e:d7:60:62:95:db:
                    3a:6f:fb:24:18:85:2d:22:5a:62:dc:ca:25:05:a9:
                    fa:f1:20:65:15:27:a1:0a:4b:a4:0b:f0:98:d8:fd:
                    30:1e:48:c6:94:f4:14:26:83:05:f1:e1:03:62:f8:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:D7:C2:C5:92:AC:C2:A2:31:43:88:70:94:2F:17:21:97:C5:E0
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4064::/47

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:69:f4:9d:0b:b2:d0:d9:fa:ed:cc:28:6e:ff:de:e9:41:
         45:c0:3d:c4:20:31:ea:fd:fd:ee:d1:34:29:e6:ef:99:46:b5:
         27:b4:a1:eb:e3:52:a1:33:70:17:d9:90:0b:78:10:a8:7d:aa:
         0d:c9:0f:2a:3e:a4:86:71:e0:26:a8:64:ec:24:5c:53:7e:e4:
         c8:cc:f7:25:de:4b:05:38:44:6a:59:ae:e6:96:1f:38:ca:11:
         0a:ef:89:c5:f4:fb:3e:f2:a2:41:36:5d:3e:92:aa:2b:e1:79:
         8b:cf:23:4d:26:c2:f8:e3:83:86:9b:c6:15:73:30:8d:bb:8e:
         d7:a6:c5:86:04:f1:76:52:ac:0f:e9:54:c9:4f:f5:3b:86:f8:
         0f:e8:b1:52:3a:1b:3a:c9:36:2d:01:8f:a8:11:17:c1:95:2a:
         52:91:ea:f6:1e:8d:1f:a6:dc:64:c8:db:27:be:ef:3e:71:78:
         49:4c:4f:35:37:33:93:3a:67:e4:3c:26:1a:84:9a:63:f7:68:
         0f:8f:18:0e:ce:52:e7:0a:75:f5:e6:7c:d0:04:59:51:eb:f7:
         45:f6:78:a3:18:45:2b:66:8a:2e:a6:07:57:b2:7d:af:f5:d9:
         b4:e0:16:80:df:e7:9d:fe:b9:56:55:40:f8:e8:29:a7:be:f5:
         7c:62:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 08:34:09 2024 by rpki-client on console-fra.rpki-client.org