Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/323830313a3132323a3a2f34302d3430203d3e2033383136.roa
File:                     323830313a3132323a3a2f34302d3430203d3e2033383136.roa (raw, json)
Hash identifier:          G30OLb8Y4kQSYnyhkph2s/S5AufA/I+cZZNKN/nDp1k=
Subject key identifier:   6B:F1:FF:17:D0:7D:BA:11:38:90:40:7A:F0:82:9B:65:DC:B6:06:6D
Certificate issuer:       /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5
Certificate serial:       4CD201B789D857656E345AE92130C34AF8C818A0
Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/323830313a3132323a3a2f34302d3430203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 17:56:07 +0000
ROA not before:           Tue 05 Mar 2024 17:51:07 +0000
ROA not after:            Tue 04 Mar 2025 17:56:07 +0000
asID:                     3816
IP address blocks:        2801:122::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d2:01:b7:89:d8:57:65:6e:34:5a:e9:21:30:c3:4a:f8:c8:18:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5
        Validity
            Not Before: Mar  5 17:51:07 2024 GMT
            Not After : Mar  4 17:56:07 2025 GMT
        Subject: CN=6BF1FF17D07DBA113890407AF0829B65DCB6066D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:4c:c8:ac:bd:3a:c2:27:db:93:a2:fa:74:
                    f4:1b:2a:b7:5c:03:02:e4:c4:06:48:5b:f5:79:cb:
                    fb:9a:09:38:c5:e8:76:6a:5e:b5:2f:a0:00:58:a7:
                    fd:8e:79:93:31:03:4c:94:20:74:26:90:20:87:8d:
                    55:93:a0:d5:00:9b:ae:c4:2d:ab:01:33:a8:86:44:
                    e8:e7:fa:a7:b9:48:e1:4f:32:84:59:7e:e3:2c:f2:
                    8c:e2:8c:0b:db:17:ce:c4:65:f0:d9:eb:09:01:38:
                    07:3f:b7:ba:8b:4f:77:99:87:47:38:e2:ee:9c:6c:
                    e6:74:a1:7b:e0:11:69:7d:95:1b:19:ba:57:12:3a:
                    b5:f9:ab:3b:aa:14:99:c9:02:d9:57:cd:3f:e3:4c:
                    71:51:7a:8c:42:04:c7:da:d7:4e:e5:b4:90:1c:90:
                    c8:6b:1f:55:90:78:43:e1:91:28:04:23:78:ef:9d:
                    e7:a0:a0:dc:11:db:62:4f:08:f8:05:a6:b4:26:38:
                    dc:f3:78:65:1e:e5:f5:92:2b:4c:60:c8:cb:28:f3:
                    c3:ab:3a:f0:c6:39:5f:f1:7d:5c:0b:d1:1b:39:2b:
                    0f:bf:40:57:bd:3a:f8:6e:37:43:a4:17:6c:29:8f:
                    89:e4:81:bb:14:50:d8:5d:af:90:f2:c7:8c:0a:f8:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F1:FF:17:D0:7D:BA:11:38:90:40:7A:F0:82:9B:65:DC:B6:06:6D
            X509v3 Authority Key Identifier:
                keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/323830313a3132323a3a2f34302d3430203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:122::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:41:e5:31:39:18:c7:55:33:32:34:02:9b:d8:ba:88:29:ab:
         69:5d:8c:4a:a0:88:72:4c:ff:cb:ad:72:1f:f0:5a:7e:3e:68:
         50:06:0d:b7:5b:f6:5b:ad:98:82:0e:a9:b7:4b:80:2b:ca:5b:
         a4:42:ba:f8:24:dc:cf:24:54:7c:c9:f9:b8:af:83:c0:7c:b5:
         5f:12:a6:51:ee:6d:d3:b8:a5:f5:48:1f:26:3e:6f:a6:4d:6d:
         ec:36:bf:89:ea:1b:45:16:9d:be:fe:e3:9f:ca:0b:41:6a:66:
         f9:99:2e:5b:bf:7c:a5:91:bd:e1:b0:df:7b:3c:81:de:55:e8:
         87:43:14:c8:f8:e5:dd:76:49:04:11:f5:27:5b:25:66:c7:35:
         00:8a:b4:37:39:f6:50:e4:91:a2:a2:3c:69:f1:12:45:45:0b:
         3c:98:bc:53:d6:49:63:4b:1b:a1:80:73:18:6c:7a:d1:bd:82:
         45:ae:54:ed:de:7c:12:56:22:01:cc:96:21:11:2e:04:eb:b5:
         74:67:ce:2f:b0:8b:35:30:04:e4:54:c0:77:f4:d1:5b:d9:2f:
         d0:f3:ad:8d:7e:cd:0e:06:da:76:4b:8c:18:03:22:cf:86:a7:
         d2:77:a4:58:31:a3:2c:90:fb:db:0a:d4:26:49:3f:4f:8e:10:
         b0:9e:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:18:40 2024 by rpki-client on console-ams.rpki-client.org