Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66303a3a2f34342d3438203d3e2033363430.roa
File:                     323830313a63343a66303a3a2f34342d3438203d3e2033363430.roa (raw, json)
Hash identifier:          BnjL4finRBzUiYXaq23RYye4O2BUO8cE/sB9knm77T4=
Subject key identifier:   E8:6F:A9:F2:52:FE:C1:12:BF:AC:7D:C1:07:5E:57:0F:B7:13:17:6F
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       1060991960F0CB27165285C3FA11468F311A3E1D
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66303a3a2f34342d3438203d3e2033363430.roa
Signing time:             Tue 05 Mar 2024 18:23:28 +0000
ROA not before:           Tue 05 Mar 2024 18:18:28 +0000
ROA not after:            Tue 04 Mar 2025 18:23:28 +0000
asID:                     3640
IP address blocks:        2801:c4:f0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:99:19:60:f0:cb:27:16:52:85:c3:fa:11:46:8f:31:1a:3e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Mar  5 18:18:28 2024 GMT
            Not After : Mar  4 18:23:28 2025 GMT
        Subject: CN=E86FA9F252FEC112BFAC7DC1075E570FB713176F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d6:94:fd:99:4d:2d:a7:80:e2:d0:46:e0:28:
                    87:82:06:0a:be:97:c1:5c:39:71:3a:95:7f:53:b6:
                    b7:9a:be:64:a1:7f:a8:0a:65:2f:e7:4a:53:6a:98:
                    c8:1a:f9:56:4d:a2:11:bd:f2:f1:58:70:48:1a:56:
                    93:45:d8:f2:75:c9:26:35:6b:88:11:56:0b:49:02:
                    84:0d:cc:53:28:d2:c6:5a:b0:cf:c9:bd:77:21:b3:
                    a7:d7:d1:a2:32:fc:b3:dd:46:2a:0d:d5:11:c1:db:
                    57:5d:fa:f0:8b:0f:24:26:44:e1:d7:36:0e:9e:88:
                    e0:a1:f7:a6:b7:60:7f:eb:d1:19:d3:9e:bc:f9:5c:
                    72:83:71:10:29:0d:cc:8b:cb:40:01:03:22:99:54:
                    81:2c:92:de:8a:7d:ed:ac:9d:79:dc:36:de:5d:ab:
                    67:f8:cb:c5:ea:4e:88:ad:b2:93:d1:78:dd:5e:af:
                    f9:39:a0:a2:09:ab:76:26:90:66:34:06:5e:ca:84:
                    b3:c0:cf:16:62:32:1d:78:88:a7:07:fb:e5:eb:a6:
                    a3:66:78:25:e7:7d:99:31:d3:94:77:71:f8:45:55:
                    1b:45:f9:46:12:14:4a:fc:03:2f:7e:46:4a:4c:61:
                    c5:02:a5:05:d9:76:f4:d7:04:13:ed:dc:74:0d:e1:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:A9:F2:52:FE:C1:12:BF:AC:7D:C1:07:5E:57:0F:B7:13:17:6F
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66303a3a2f34342d3438203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         cb:98:d9:4b:72:48:e2:ec:e9:e5:8c:ba:7f:09:fc:d2:48:71:
         1f:0d:62:dc:c5:3e:f5:0d:a1:79:b1:70:3b:e0:a7:c7:5b:d8:
         19:47:f3:fa:70:c0:bd:2c:07:81:d5:e9:42:7b:15:7f:e7:d0:
         b2:c9:7a:a3:18:7c:8f:97:d4:10:a7:cf:5a:2e:4c:cd:34:49:
         b4:d6:7b:16:02:e5:4f:88:cf:a9:c4:29:43:69:f6:5d:ee:c5:
         f9:74:c2:e2:8d:56:aa:7a:d4:85:a1:ee:81:bb:df:3c:f8:33:
         6b:98:5e:bc:d6:9e:e9:a6:fa:0c:bd:72:f2:b0:00:36:88:aa:
         1c:63:57:76:0c:c4:0b:12:c1:e4:b6:d0:02:3f:60:72:09:32:
         b7:d8:c1:f2:7e:c4:57:b2:ff:57:7c:65:1e:87:8e:75:8f:0b:
         44:b7:e1:dc:4c:c9:03:f1:94:f2:e9:95:83:7c:81:6c:fd:c8:
         d9:47:d5:bd:6f:48:22:66:a1:6b:18:3f:49:93:65:7a:43:31:
         1a:c3:37:f8:a8:0f:16:e6:f4:9f:66:a2:11:00:91:2f:ed:78:
         69:e1:12:94:cb:e9:ad:15:e1:22:7c:81:49:fa:a7:da:27:cb:
         9d:ec:c6:5f:a7:1a:68:84:15:fd:86:cc:49:0c:81:94:77:d8:
         c0:cf:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org