Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343036633a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          Z4UXMbJBA/w1xGYwkRPSUcFaQoM6AR1yYRSzlZ7Xdp0=
Subject key identifier:   1C:15:43:A7:35:B3:3E:10:90:01:26:43:3A:0A:F8:A2:94:14:40:08
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       57BEF1FE45FE7BAC1C52AC0BA3F536F00CAB5665
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34372d3437203d3e2033353733.roa
Signing time:             Mon 29 Apr 2024 07:05:00 +0000
ROA not before:           Mon 29 Apr 2024 07:00:00 +0000
ROA not after:            Mon 28 Apr 2025 07:05:00 +0000
asID:                     3573
IP address blocks:        2801:1f0:406c::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:be:f1:fe:45:fe:7b:ac:1c:52:ac:0b:a3:f5:36:f0:0c:ab:56:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Apr 29 07:00:00 2024 GMT
            Not After : Apr 28 07:05:00 2025 GMT
        Subject: CN=1C1543A735B33E10900126433A0AF8A294144008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:40:fa:f2:42:20:67:5e:ec:bc:bd:65:4e:
                    92:5d:3d:2b:ab:a3:90:1e:d0:27:6a:51:ba:6c:a5:
                    26:21:6f:f8:4c:1f:dc:49:cc:ca:d2:55:6f:fe:b7:
                    34:4b:df:bd:7b:9a:7b:20:c5:02:aa:75:f9:e1:1b:
                    dc:58:ce:59:4f:71:ef:33:d4:da:db:cf:cb:65:e8:
                    be:9c:96:15:75:7c:ef:0e:b2:1b:e7:20:6d:ef:68:
                    1c:b7:c7:c5:78:69:8c:e0:49:79:91:34:c4:98:b6:
                    d4:bb:c1:3a:64:2d:70:6b:2a:06:b2:32:5a:83:c3:
                    54:de:c1:50:6b:f7:b3:3d:33:1b:32:80:b1:a6:b8:
                    57:f5:0a:17:a8:4e:b2:4d:d9:fc:cf:18:59:9d:dc:
                    7f:ac:a5:4e:e5:3b:3c:bd:36:55:53:12:3f:db:10:
                    a9:e0:9c:d0:5a:b0:0c:dd:9c:42:3b:b9:0d:a2:e9:
                    11:3c:3e:b0:7f:50:c8:dd:f0:d3:51:31:38:fe:ea:
                    b2:6e:3f:05:1a:af:26:ff:45:0f:ec:7f:8a:7c:0e:
                    38:6c:ad:d5:be:a5:19:a0:03:02:5e:42:41:e8:23:
                    5f:ca:e0:64:d7:42:37:47:00:ee:b9:c2:15:a4:76:
                    5d:a4:d5:97:ea:cd:5c:29:ba:36:28:3e:4d:d1:74:
                    b3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:15:43:A7:35:B3:3E:10:90:01:26:43:3A:0A:F8:A2:94:14:40:08
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406c::/47

    Signature Algorithm: sha256WithRSAEncryption
         2c:46:6c:50:4e:36:b6:4b:74:b6:c0:28:46:6e:68:db:dd:6a:
         62:c6:02:80:4c:1d:74:72:5f:bf:61:b3:a6:ab:05:2e:5d:08:
         27:5a:14:10:b2:b3:12:2d:40:a2:5b:6f:75:3f:ca:c4:6e:f4:
         5f:9d:5f:4b:7e:ea:68:50:0c:43:f9:74:e1:d1:ed:61:cb:53:
         34:9f:78:96:a4:98:d8:ea:59:f7:ae:06:1e:be:7c:31:70:8e:
         c9:7c:65:c2:b6:29:c5:1f:a2:e1:d3:83:73:38:9c:69:74:d7:
         f6:08:8f:54:08:89:a8:e5:c4:b9:71:94:b0:e4:bf:1b:26:6d:
         13:11:4d:29:88:e5:f5:10:d5:12:28:ad:0d:38:ef:44:7f:e3:
         39:5e:d3:6e:86:ac:93:38:03:e8:7f:9e:fb:49:db:7a:2d:40:
         a1:23:da:12:d8:1a:9c:e8:d3:cc:20:65:04:ad:36:10:f1:da:
         17:de:77:dd:ce:4a:00:e3:56:6c:89:b1:7c:2a:01:62:f8:8b:
         cd:26:0a:66:0e:5c:e2:36:c4:33:f2:bf:e2:d2:d2:45:6b:b5:
         e1:73:05:d8:aa:c4:e7:ce:00:90:74:d4:1c:8c:55:7b:0f:6e:
         6c:59:b0:f4:53:32:96:da:e9:2c:76:06:00:8a:9a:d5:48:0b:
         78:ef:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org