Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a363a3a2f36342d3634203d3e203634313132.roa
File:                     323830313a31343a393030303a363a3a2f36342d3634203d3e203634313132.roa (raw, json)
Hash identifier:          DDdlvMMJ60GVG/EcSnfDVlTyVnFkEsnuQzLY18COqL0=
Subject key identifier:   42:91:AF:72:40:7E:59:1F:AF:F9:81:3F:47:F9:1B:01:D9:80:81:FC
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       1DB1CEDD522D8BF96B240A7A03F425DB81257A2B
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a363a3a2f36342d3634203d3e203634313132.roa
Signing time:             Tue 05 Mar 2024 18:15:18 +0000
ROA not before:           Tue 05 Mar 2024 18:10:18 +0000
ROA not after:            Tue 04 Mar 2025 18:15:18 +0000
asID:                     64112
IP address blocks:        2801:14:9000:6::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b1:ce:dd:52:2d:8b:f9:6b:24:0a:7a:03:f4:25:db:81:25:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Mar  5 18:10:18 2024 GMT
            Not After : Mar  4 18:15:18 2025 GMT
        Subject: CN=4291AF72407E591FAFF9813F47F91B01D98081FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:ba:a9:39:a6:e3:43:07:8a:5a:29:5f:48:
                    81:f2:65:8c:59:0b:1c:52:e3:f8:4d:df:3c:39:e6:
                    58:fd:bd:d5:94:fd:ab:6a:29:84:df:ba:5a:35:3a:
                    66:f5:a9:b5:ab:35:da:78:e1:2c:49:6f:6e:cc:3f:
                    59:f6:86:6c:32:37:36:25:2e:92:b7:8e:cb:50:bc:
                    4c:29:d2:56:d6:ac:ab:72:6a:8f:9c:0b:1c:f0:7d:
                    a3:81:30:fa:21:fc:6f:71:9c:55:8e:a4:af:f8:46:
                    03:f8:c9:73:6e:42:fb:67:fd:67:9a:80:2e:9c:be:
                    24:fe:46:ce:cf:12:85:09:5f:18:36:31:f8:66:49:
                    8a:8e:ce:4b:5d:34:42:41:8a:6d:a3:53:c7:a1:69:
                    2e:3a:c5:2b:2b:fc:5a:91:47:87:e7:0d:ed:31:c2:
                    05:2e:1a:0d:f4:dd:6e:49:d7:a9:84:5d:37:c8:26:
                    7e:f1:c1:6e:b2:e5:53:8a:71:ef:a1:88:a5:1c:b2:
                    c2:4f:8a:f6:02:14:61:5b:03:b9:9c:3d:8c:4c:02:
                    ad:6e:66:5e:36:a6:57:f7:49:c2:b8:da:9f:fe:41:
                    bf:20:0e:80:87:d6:12:e7:08:96:ad:f6:05:e1:91:
                    56:1a:90:47:e4:17:1a:d8:df:0b:81:6b:ba:f1:4a:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:AF:72:40:7E:59:1F:AF:F9:81:3F:47:F9:1B:01:D9:80:81:FC
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/323830313a31343a393030303a363a3a2f36342d3634203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:9000:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         b5:31:65:30:55:67:35:48:63:cf:51:b3:a3:92:a7:d4:c2:da:
         e3:18:49:0c:3b:03:ed:ef:fe:d6:3c:11:52:a4:a7:ed:a6:10:
         ca:bc:81:83:e7:9c:84:51:02:b0:3d:bc:bd:d6:23:5a:33:82:
         af:47:a9:77:72:53:fc:30:d6:0c:6a:96:6d:5b:e7:f6:a9:90:
         bb:4a:9a:9a:6e:8a:41:0f:82:af:fc:7b:ea:90:0c:98:46:e8:
         b1:bf:22:94:fe:ed:a8:76:16:8d:07:3b:34:55:76:62:6e:67:
         4d:21:a6:87:22:cc:1b:78:e1:67:9b:2c:e3:51:b4:c5:74:73:
         c9:80:d5:0f:2d:8e:72:20:83:d6:db:b2:40:a4:08:9a:8f:50:
         9f:8f:e2:92:7f:ba:80:7b:da:16:f1:86:a2:70:9c:63:af:0b:
         81:81:62:a9:7c:56:04:2a:a7:87:ea:99:96:2a:9a:13:36:1a:
         59:47:59:71:64:b6:08:c7:9b:82:d1:df:14:de:6e:49:86:a3:
         88:2c:41:17:d2:9d:66:a8:3a:96:40:98:ca:ab:c9:7b:fb:e2:
         65:8c:55:df:7a:15:ef:0b:63:6f:1b:02:8a:73:17:77:c2:0b:
         eb:19:59:5d:47:bc:7f:01:64:3c:c4:06:a4:b2:ac:fd:9b:39:
         86:4f:91:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org