Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a313a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3133323a313a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          NA2rvu3eFP6aKUkyrmFtJBa9tJKGFUzW7CtqD4+gBYo=
Subject key identifier:   F3:DE:F9:CF:DB:C8:31:21:9F:C9:7D:C3:F9:FB:A4:D5:26:7A:D0:15
Certificate issuer:       /CN=8418A0277DF0710EAC14EF1F1DB16B17D396B35C
Certificate serial:       5C6BD79269AD72878E96165F81A04181DC43AA59
Authority key identifier: 84:18:A0:27:7D:F0:71:0E:AC:14:EF:1F:1D:B1:6B:17:D3:96:B3:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a313a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:11:10 +0000
ROA not before:           Tue 05 Mar 2024 18:06:10 +0000
ROA not after:            Tue 04 Mar 2025 18:11:10 +0000
asID:                     18747
IP address blocks:        2801:132:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6b:d7:92:69:ad:72:87:8e:96:16:5f:81:a0:41:81:dc:43:aa:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8418A0277DF0710EAC14EF1F1DB16B17D396B35C
        Validity
            Not Before: Mar  5 18:06:10 2024 GMT
            Not After : Mar  4 18:11:10 2025 GMT
        Subject: CN=F3DEF9CFDBC831219FC97DC3F9FBA4D5267AD015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:80:36:5c:9e:0a:0b:d6:ea:e6:5d:b3:e8:
                    f0:3b:8c:9d:dc:6d:75:8e:c0:40:78:6e:49:85:24:
                    83:41:2c:81:be:64:03:11:13:27:71:cd:f7:f5:51:
                    63:56:13:37:da:71:b8:48:04:c3:d7:60:86:d7:86:
                    b1:fe:d2:ad:4f:8c:88:2c:08:78:d6:5b:9b:29:fa:
                    3d:f3:d2:7e:30:74:f5:72:95:89:f4:88:ae:cd:5f:
                    5c:ea:42:d1:06:08:6d:78:a7:d5:ad:3a:ae:31:58:
                    62:30:2d:14:41:3d:84:96:20:54:44:e9:44:fb:46:
                    ab:41:4c:49:8d:08:b2:ec:4d:0f:68:55:a9:7c:37:
                    59:7e:32:93:64:cd:c1:3e:2f:f3:46:94:b8:e2:52:
                    bf:06:9a:f9:ab:76:27:06:5b:c6:d5:b5:72:95:ab:
                    13:bc:63:f6:83:2c:46:7b:2e:32:92:ef:80:58:1d:
                    80:13:3d:14:33:f1:be:b4:32:28:8e:ca:00:b5:0e:
                    e1:b2:80:59:e3:bb:23:f4:6d:1e:6a:25:42:bf:95:
                    0e:05:54:08:03:92:55:c1:55:de:ba:a0:e0:5f:41:
                    ea:69:0a:53:4a:9c:8a:30:0a:42:25:3f:c4:c3:28:
                    62:17:6e:4c:9a:b4:d0:3b:92:76:77:f8:18:0f:20:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:F9:CF:DB:C8:31:21:9F:C9:7D:C3:F9:FB:A4:D5:26:7A:D0:15
            X509v3 Authority Key Identifier:
                keyid:84:18:A0:27:7D:F0:71:0E:AC:14:EF:1F:1D:B1:6B:17:D3:96:B3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8418A0277DF0710EAC14EF1F1DB16B17D396B35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CCE412AF1B3E11C6C2F5638359044529C2F2E0F66D29A79EFA5125169BCB1DA2/0/323830313a3133323a313a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:132:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:22:69:4c:df:02:18:c3:e8:fe:41:f5:7d:9e:4c:9a:43:53:
         70:f4:02:7c:92:a1:d2:29:96:6a:2f:2a:e3:36:19:68:7e:05:
         a8:e4:18:0a:54:96:7c:c1:d2:43:cc:f3:72:3d:62:d4:47:80:
         6f:13:b9:8f:1d:ae:7d:e6:26:cc:c2:2c:fe:6f:df:8e:3a:f1:
         cf:60:23:ac:c2:be:ef:57:38:b7:07:f4:3c:68:b5:86:64:bf:
         85:f9:72:88:95:9a:df:8e:5c:a4:28:1b:1b:e4:d6:c8:71:80:
         07:a5:5b:2d:2c:a7:e7:16:62:f7:f6:29:26:aa:12:3e:c9:83:
         4f:5b:be:5f:b8:c8:e1:74:41:8b:6b:56:42:1b:5d:d8:25:e2:
         4f:01:8f:ee:2e:bf:20:a9:ee:22:21:96:24:5f:fe:11:e6:09:
         e3:81:f2:1f:a7:df:cf:dc:63:b5:3a:53:56:8a:3b:aa:a1:01:
         65:d4:7f:92:1a:2a:98:87:c5:0d:10:8c:c9:7e:34:ff:3f:d2:
         a9:b4:12:fc:29:0d:89:12:05:62:f1:2d:f6:0d:c1:a7:f5:99:
         99:52:17:56:cc:32:0d:2b:ab:4b:19:51:fd:74:7a:78:1e:e3:
         27:f3:30:a5:bb:64:84:c3:80:af:4f:19:39:ba:01:66:af:f6:
         80:1f:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org