Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203138373437.roa
File:                     323830313a3163323a3a2f34342d3434203d3e203138373437.roa (raw, json)
Hash identifier:          2g+0Go+xUbS+UQSDn8okLF1HLE2UVOesbbroG7Pfzqs=
Subject key identifier:   83:73:BF:55:53:D9:CF:43:F1:97:3F:CE:90:82:A0:4B:AC:22:8B:03
Certificate issuer:       /CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF
Certificate serial:       0E74F77C9D62A73CADCAB79DBF7B5743CA6A938C
Authority key identifier: 1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:53:07 +0000
ROA not before:           Tue 05 Mar 2024 17:48:07 +0000
ROA not after:            Tue 04 Mar 2025 17:53:07 +0000
asID:                     18747
IP address blocks:        2801:1c2::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:74:f7:7c:9d:62:a7:3c:ad:ca:b7:9d:bf:7b:57:43:ca:6a:93:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF
        Validity
            Not Before: Mar  5 17:48:07 2024 GMT
            Not After : Mar  4 17:53:07 2025 GMT
        Subject: CN=8373BF5553D9CF43F1973FCE9082A04BAC228B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1e:1e:d2:1e:c9:70:ed:19:d2:03:3b:4c:3a:
                    3b:65:84:72:64:99:48:79:cf:cb:c3:ba:f1:af:68:
                    91:55:f1:2d:79:be:74:92:84:36:03:d8:e0:fd:ec:
                    01:de:ca:cb:6f:25:60:e0:da:1d:9a:8e:73:6f:28:
                    2e:8f:8a:76:92:e1:6e:7f:e9:ce:18:29:e4:8f:38:
                    8c:65:47:c9:76:3a:05:00:24:8b:eb:50:e6:54:88:
                    5b:f8:a5:a5:fa:23:c4:03:8b:82:73:8a:c0:7e:f9:
                    88:47:6e:9a:f1:a3:1b:bd:53:97:d1:2f:86:96:77:
                    e9:69:31:a6:f9:7f:26:2f:ed:64:37:a9:f7:4e:f3:
                    14:f2:cc:a1:48:e2:de:82:ec:7d:b4:9a:57:81:76:
                    85:dc:76:3f:93:bd:32:fe:12:3b:d1:a7:36:3c:ff:
                    26:0b:b6:b5:36:3b:36:b1:c6:9c:58:ab:e9:de:0f:
                    03:66:c5:63:89:22:aa:79:f8:59:44:85:ca:33:47:
                    65:82:e5:5f:a9:3b:c1:4b:3a:ff:da:af:e3:c5:07:
                    31:f0:e9:bd:6b:f5:a5:a9:70:a4:b2:f1:f9:53:a6:
                    bd:c2:d4:a1:e5:31:c8:f6:28:fe:15:d8:42:76:8e:
                    c8:e9:29:4f:95:00:8b:46:5e:a3:f2:1c:fb:be:6c:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:73:BF:55:53:D9:CF:43:F1:97:3F:CE:90:82:A0:4B:AC:22:8B:03
            X509v3 Authority Key Identifier:
                keyid:1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c2::/44

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:2f:ed:f9:47:d8:2d:d0:4e:9e:d4:07:c0:5c:88:7b:5a:
         b8:36:ce:08:e0:62:5e:95:cf:0f:4a:a3:f1:20:76:b3:d8:91:
         0c:da:b7:8d:72:af:3b:06:1b:f3:0a:72:40:c7:59:08:8e:f1:
         c0:1d:33:f8:74:64:a6:80:a4:c1:c2:00:73:ea:4f:1b:67:f3:
         87:ab:0e:3a:82:eb:ff:04:5a:23:f1:54:b7:0c:c8:61:0a:a4:
         ea:5c:aa:69:62:a0:ac:35:d0:bd:02:32:e0:df:b6:c2:7a:a8:
         0b:a7:83:4b:3f:14:31:ee:20:e4:1b:e1:a5:a1:64:37:62:f9:
         04:90:71:57:6f:87:c1:31:ac:17:11:2c:ea:1f:10:c7:11:90:
         c5:1c:77:59:9f:8c:ce:6d:a1:04:69:b6:c4:56:3d:8e:6e:78:
         9e:34:8f:d5:a9:e3:8e:32:da:11:45:e8:ef:9e:c0:8b:c7:f6:
         f4:18:12:44:fc:7d:a8:fa:b6:13:40:28:81:44:55:d0:f8:6c:
         df:9a:8b:e9:74:32:55:6d:ea:d1:82:a2:7a:c5:16:4c:d9:60:
         1b:31:da:44:73:01:6b:ce:c4:8f:08:0d:6b:55:69:c2:90:89:
         f0:df:c2:c3:c7:ae:76:a6:0e:be:a6:3f:10:d3:2d:56:2a:33:
         bf:e2:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org