Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/323830313a3165343a3a2f34322d3432203d3e203237393531.roa
File:                     323830313a3165343a3a2f34322d3432203d3e203237393531.roa (raw, json)
Hash identifier:          eHJfnTQI1w0D2YgAF4OjfjR+SxUuH60uHxUgYuwavMQ=
Subject key identifier:   DA:D1:FC:6A:86:58:BF:45:FB:E2:35:BE:BA:7B:16:27:26:66:3A:C1
Certificate issuer:       /CN=5506D181AACC9E9E3171B16979FFCAE289CE6507
Certificate serial:       7F3613E5B8B3C2429DDF41F0756E821596375ABF
Authority key identifier: 55:06:D1:81:AA:CC:9E:9E:31:71:B1:69:79:FF:CA:E2:89:CE:65:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/323830313a3165343a3a2f34322d3432203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:01:48 +0000
ROA not before:           Tue 05 Mar 2024 17:56:48 +0000
ROA not after:            Tue 04 Mar 2025 18:01:48 +0000
asID:                     27951
IP address blocks:        2801:1e4::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:36:13:e5:b8:b3:c2:42:9d:df:41:f0:75:6e:82:15:96:37:5a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5506D181AACC9E9E3171B16979FFCAE289CE6507
        Validity
            Not Before: Mar  5 17:56:48 2024 GMT
            Not After : Mar  4 18:01:48 2025 GMT
        Subject: CN=DAD1FC6A8658BF45FBE235BEBA7B162726663AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:13:5a:be:75:46:9d:b6:2b:d7:2e:2f:4f:
                    ad:b4:0c:aa:da:55:8f:bc:71:2a:54:63:b3:86:de:
                    0c:1d:0b:e7:ae:25:07:ab:69:24:5b:af:0c:c6:bc:
                    71:25:2c:82:55:15:3e:36:74:b5:42:d2:03:13:77:
                    ee:c1:d2:f2:1d:1c:bf:69:36:3b:f6:85:2f:64:07:
                    14:60:7d:03:a0:34:77:3e:23:55:f6:60:fd:88:08:
                    7a:28:aa:d6:36:cf:d0:81:a0:b1:cd:e6:6e:26:64:
                    af:60:04:fd:09:07:9c:e4:15:70:f3:8f:5d:f1:cc:
                    17:7e:10:f6:3f:22:85:20:f7:2c:6f:ed:cc:70:de:
                    04:dc:fc:cd:1f:0c:6c:b1:3a:80:1d:bc:47:4e:51:
                    05:23:ff:17:3f:c4:3b:df:66:24:7e:99:20:96:51:
                    96:ca:44:12:48:35:1a:cd:d4:9e:32:7e:92:1b:c3:
                    a2:95:2d:88:4f:3c:d4:02:d9:12:a5:f3:9d:fc:5e:
                    76:8f:c7:c6:cc:32:76:46:da:ef:91:44:9a:1e:ef:
                    1f:1e:89:f1:c1:9c:d4:71:2c:29:b3:af:63:97:ae:
                    c4:37:d1:32:fe:27:3e:02:e6:4f:35:8d:ee:cd:b8:
                    3f:c6:64:38:76:07:44:33:99:f1:a1:94:94:ad:fd:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D1:FC:6A:86:58:BF:45:FB:E2:35:BE:BA:7B:16:27:26:66:3A:C1
            X509v3 Authority Key Identifier:
                keyid:55:06:D1:81:AA:CC:9E:9E:31:71:B1:69:79:FF:CA:E2:89:CE:65:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/323830313a3165343a3a2f34322d3432203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e4::/42

    Signature Algorithm: sha256WithRSAEncryption
         1d:26:e1:a0:c2:df:06:06:99:21:63:0b:56:a2:0d:c6:4b:37:
         fa:5e:b0:07:4a:4b:a9:53:5b:57:90:7a:97:af:5f:46:5f:74:
         61:9c:ea:57:0c:46:d4:6c:b6:8f:c3:66:e6:cb:e1:87:d1:a8:
         58:5b:a3:fe:9d:39:29:93:4f:95:b8:ff:96:26:f4:b1:1b:04:
         eb:87:27:b5:30:6c:49:f6:44:97:6e:25:6a:53:54:d5:99:09:
         92:dc:ef:f5:16:16:d6:96:7e:37:2b:01:9e:56:fd:28:3f:fb:
         bd:46:8b:00:71:8f:12:d5:52:44:19:44:d7:37:a9:46:65:53:
         db:e3:ae:71:47:f3:94:12:28:83:ad:48:ae:c9:c1:eb:03:6b:
         43:8b:aa:6b:8e:0f:aa:39:d7:b3:fc:f2:6f:ae:3b:e3:02:aa:
         bf:3d:70:ee:f3:e4:61:f6:37:65:cc:09:0e:34:e2:94:88:23:
         fb:b1:42:9e:5f:3c:3a:a7:1d:23:ae:e6:eb:00:cf:5f:65:b3:
         4a:5e:c5:00:b0:cc:32:7b:2a:61:99:09:af:92:a9:a9:16:6e:
         5c:72:bf:ee:b6:84:4d:96:9b:f1:2a:cc:2f:e5:72:60:7b:76:
         5a:dd:8c:29:c0:38:4c:81:da:60:f0:04:20:6d:4d:10:42:11:
         07:bf:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:03 2024 by rpki-client on console-ams.rpki-client.org