Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e20323733383932.roa
File:                     323830313a31373a373830303a3a2f34382d3438203d3e20323733383932.roa (raw, json)
Hash identifier:          0JcwiOURR0eWn0ErOobz3Ygka34L4N9eoNLb/ybEQDY=
Subject key identifier:   E5:3F:5A:03:5E:FD:11:C5:C9:28:66:80:A3:F7:7E:21:4D:F6:26:65
Certificate issuer:       /CN=DD284B15EC8E065D133B2F9315470527232784D4
Certificate serial:       3B1C903E76D224C327899003B62784F3C86844EA
Authority key identifier: DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e20323733383932.roa
Signing time:             Tue 10 Sep 2024 17:30:00 +0000
ROA not before:           Tue 10 Sep 2024 17:25:00 +0000
ROA not after:            Tue 09 Sep 2025 17:30:00 +0000
asID:                     273892
IP address blocks:        2801:17:7800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1c:90:3e:76:d2:24:c3:27:89:90:03:b6:27:84:f3:c8:68:44:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD284B15EC8E065D133B2F9315470527232784D4
        Validity
            Not Before: Sep 10 17:25:00 2024 GMT
            Not After : Sep  9 17:30:00 2025 GMT
        Subject: CN=E53F5A035EFD11C5C9286680A3F77E214DF62665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:75:8d:31:26:e3:27:5f:7a:82:3e:5b:74:
                    fd:0c:b6:53:52:37:5b:45:1b:95:7c:58:df:fb:25:
                    b8:30:72:de:f1:d9:00:78:4e:ad:58:68:bf:15:2f:
                    c5:70:62:b9:e1:31:be:3e:44:13:8d:e5:38:ad:ad:
                    83:a0:33:6c:f8:ae:43:82:8b:e1:cd:f9:4c:44:cd:
                    13:80:03:01:d7:f9:75:7a:9e:85:04:61:a6:7b:8a:
                    d3:d2:05:6c:04:50:b2:05:13:8f:ce:00:26:1a:10:
                    40:6b:8f:1c:4b:67:e4:0b:c3:44:cb:80:f1:09:81:
                    c1:03:6c:5e:be:86:dd:96:f1:7d:ee:66:1f:30:9b:
                    97:1a:81:e3:bf:59:b9:19:59:21:09:9f:41:7f:57:
                    08:57:f7:bd:2c:ca:ef:79:b3:cc:c4:86:98:90:78:
                    4b:8f:9e:61:0e:57:8c:cf:95:c1:74:e7:71:c4:78:
                    2c:6f:ed:c9:35:43:ba:e0:42:98:ad:c9:9e:03:c3:
                    38:7f:ea:42:5b:67:44:69:f0:d5:28:5d:fc:82:1c:
                    1b:9c:2b:be:c2:c6:ff:dc:93:ff:2f:98:36:29:de:
                    26:b5:de:d0:25:70:10:ca:eb:4f:9a:09:a6:2e:a3:
                    27:13:6f:d0:1b:d4:c6:87:d0:ae:2f:ff:91:56:9b:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3F:5A:03:5E:FD:11:C5:C9:28:66:80:A3:F7:7E:21:4D:F6:26:65
            X509v3 Authority Key Identifier:
                keyid:DD:28:4B:15:EC:8E:06:5D:13:3B:2F:93:15:47:05:27:23:27:84:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/DD284B15EC8E065D133B2F9315470527232784D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD284B15EC8E065D133B2F9315470527232784D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D496E4A8BEEAA21CB4421C89FE250F91B1743A09AE9C425DDFA579DFD21D8F42/0/323830313a31373a373830303a3a2f34382d3438203d3e20323733383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:d4:74:a1:97:b7:de:60:b4:45:06:27:3a:59:0b:07:0f:a0:
         b3:86:6e:ee:8f:e5:2d:e9:1f:28:c0:82:06:38:b3:26:19:d9:
         6a:53:24:c4:2e:85:e4:90:56:f1:aa:02:fd:ea:3f:03:51:a0:
         99:c6:3e:1f:49:ab:dc:fe:16:50:00:36:2e:69:01:e0:cf:b1:
         43:e0:e2:02:3a:d1:2f:b8:6a:1b:4a:c5:b0:6c:bb:53:5a:8f:
         4b:17:44:9b:a5:f5:63:91:4d:72:0d:6f:22:93:c8:c7:61:81:
         7e:89:ac:1c:f9:4f:88:8a:78:66:83:b1:b9:ff:ac:bc:40:bb:
         82:58:0c:49:fb:93:87:2f:51:37:9f:6c:e3:9c:84:e1:6d:c3:
         1b:47:c4:00:05:07:48:92:85:a3:dd:aa:49:5b:30:22:87:62:
         3c:5a:0e:e3:a8:f1:b8:41:a1:c2:41:e0:dd:44:82:75:39:7d:
         c7:31:7f:8a:b8:fe:e9:eb:6a:64:1d:fb:7e:60:8f:22:64:8a:
         04:95:8b:8d:d8:d8:e2:17:93:22:48:30:cb:a8:b4:d5:36:61:
         a1:a0:23:10:ab:15:77:60:5d:f0:e2:94:7d:36:52:ab:ec:a6:
         52:90:30:6a:d8:51:55:68:48:51:4f:fa:81:c0:73:0a:e1:8d:
         53:f3:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org