Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036633a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          CEcKcXLowgPY4boWxqBm7PNse+CPmpwS8YkYZYfI8ac=
Subject key identifier:   14:82:7C:F9:0E:54:E1:DD:CA:1C:77:15:3A:43:1C:82:70:11:35:28
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       02841976B723F98AB05A22DAB64F76BE0FC8D6E4
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34382d3438203d3e2033353733.roa
Signing time:             Mon 29 Apr 2024 07:05:00 +0000
ROA not before:           Mon 29 Apr 2024 07:00:00 +0000
ROA not after:            Mon 28 Apr 2025 07:05:00 +0000
asID:                     3573
IP address blocks:        2801:1f0:406c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:84:19:76:b7:23:f9:8a:b0:5a:22:da:b6:4f:76:be:0f:c8:d6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Apr 29 07:00:00 2024 GMT
            Not After : Apr 28 07:05:00 2025 GMT
        Subject: CN=14827CF90E54E1DDCA1C77153A431C8270113528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:a5:e8:56:23:c0:06:6b:67:cc:17:fb:41:
                    42:eb:f5:36:02:e6:5e:64:66:73:02:ad:58:5d:63:
                    ef:50:3f:b2:0b:d6:8d:a6:65:c3:9f:5b:3b:53:7b:
                    6c:85:e2:35:65:e5:38:5e:f1:b2:cd:fd:40:c8:02:
                    82:4a:73:a8:68:40:a8:16:85:f0:b8:68:e4:dc:53:
                    22:a6:da:c7:77:f6:f4:99:6d:21:25:5f:24:86:37:
                    77:1d:7f:7c:53:e0:fa:47:61:e7:0d:73:62:d3:0d:
                    23:4e:b7:f4:2e:6f:7d:58:1a:f1:6b:b8:70:37:d2:
                    b6:26:e3:d9:81:5e:1c:69:b8:00:73:14:34:e5:24:
                    96:63:f4:19:33:ed:46:25:89:9e:52:ac:ad:9e:f6:
                    0f:f6:d3:47:73:ba:3b:4b:ca:cb:91:9d:54:9c:b9:
                    3e:34:d5:65:6a:ac:9e:9f:0b:0c:35:d7:5c:ec:d8:
                    f2:34:a9:38:d5:9e:23:f8:cc:4b:72:f0:9c:dd:19:
                    1f:3c:c5:56:83:2b:97:ed:61:50:0b:b6:29:70:d3:
                    01:b3:83:3a:86:7e:67:4e:b7:06:78:bb:cf:c8:ec:
                    a7:75:e5:06:c6:a0:6a:36:2a:8b:bb:f7:14:55:4f:
                    b2:12:ff:66:37:b8:12:04:b8:66:6a:05:7c:6c:d2:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:82:7C:F9:0E:54:E1:DD:CA:1C:77:15:3A:43:1C:82:70:11:35:28
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036633a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406c::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:40:d7:36:be:e5:8a:7e:d3:29:3a:4b:76:b1:6a:e7:f7:f5:
         1e:4b:b1:74:06:5f:85:d7:de:c8:c6:e1:59:f4:49:6b:8e:d7:
         cc:7f:38:7e:c9:30:22:c2:82:9c:2f:d3:4d:48:0f:c5:53:09:
         00:00:c3:40:eb:19:ac:0b:94:73:94:67:5f:ea:17:e6:3b:18:
         9e:c8:6c:cf:5e:6b:08:29:81:7e:d1:58:e6:e6:48:3e:6a:fb:
         69:5b:4c:8f:5b:2e:69:c7:db:15:4c:93:77:90:5c:55:fe:33:
         13:86:d3:5b:0c:9e:b6:0f:92:df:5b:af:51:e4:35:cf:ab:02:
         2d:4c:a2:36:5d:83:b2:a3:63:75:a1:f0:65:28:7d:2e:68:93:
         47:23:4c:e0:d7:5e:45:68:30:48:58:a0:af:8d:52:0f:a1:24:
         2d:61:be:6b:94:a7:8f:d4:c8:46:26:04:3b:38:e8:21:ca:de:
         01:84:f4:cb:5d:2a:80:0c:2c:93:3c:51:82:fb:85:b0:f3:db:
         93:04:47:f0:98:32:da:cf:31:0e:85:e4:a3:e5:a7:c6:f1:ea:
         af:a8:e1:59:4f:9f:15:ee:e5:95:d2:53:33:c8:0f:93:14:c3:
         88:5f:9d:14:ff:20:c9:c3:8f:23:a1:a1:5e:97:cd:d5:ec:03:
         db:b5:fb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org