Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66383a3a2f34352d3438203d3e2033363430.roa
File:                     323830313a63343a66383a3a2f34352d3438203d3e2033363430.roa (raw, json)
Hash identifier:          5dlie8EXxhjlG+BQ7WMkyQZdZC0GV/jwEMg9N46cqE4=
Subject key identifier:   9A:A8:E0:E7:DF:6D:47:9F:0C:57:FE:F1:7A:3C:7C:47:AC:CB:C3:C8
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       74BEF1DE58FF4B957EEB0D42DB8A941C0BA9A928
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66383a3a2f34352d3438203d3e2033363430.roa
Signing time:             Tue 05 Mar 2024 18:23:28 +0000
ROA not before:           Tue 05 Mar 2024 18:18:28 +0000
ROA not after:            Tue 04 Mar 2025 18:23:28 +0000
asID:                     3640
IP address blocks:        2801:c4:f8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:be:f1:de:58:ff:4b:95:7e:eb:0d:42:db:8a:94:1c:0b:a9:a9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Mar  5 18:18:28 2024 GMT
            Not After : Mar  4 18:23:28 2025 GMT
        Subject: CN=9AA8E0E7DF6D479F0C57FEF17A3C7C47ACCBC3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:26:c0:7a:b6:96:41:e2:14:71:b9:4b:71:
                    42:64:5c:eb:91:8b:ef:12:61:c6:b0:d4:9a:65:9a:
                    b1:18:54:5d:51:e1:f3:b5:0a:42:84:8d:27:d0:30:
                    26:81:46:39:e6:b4:5c:6c:eb:c6:93:80:63:a8:1b:
                    4c:b6:05:87:0b:16:78:ef:ec:cb:b2:0e:63:db:c5:
                    cd:71:ca:e9:fb:40:bb:ef:f4:1c:ca:f3:f5:f8:71:
                    56:16:7f:37:2f:88:77:69:e1:7b:86:87:5c:43:61:
                    11:db:26:74:0b:2d:00:3c:b6:65:ef:dc:53:99:93:
                    ad:7e:ce:71:ac:42:cd:1f:ca:54:f7:cf:72:4e:c2:
                    e1:0d:8a:d1:e2:b5:90:e4:b6:9d:4d:aa:d6:fc:82:
                    ed:68:b3:83:59:6c:0c:5a:40:e7:10:2d:db:5e:3e:
                    3f:84:61:c4:b0:65:81:fd:b3:1d:28:d4:34:68:f8:
                    0a:e9:19:9e:56:f7:ca:15:f9:1f:51:9b:65:9c:de:
                    2b:9d:21:b9:d8:e7:6f:68:ff:4d:27:44:ae:ee:49:
                    ae:40:5e:41:20:92:8f:16:99:fd:7b:bc:55:9b:63:
                    ca:71:73:1c:61:24:21:31:ed:82:41:5f:00:92:c4:
                    b7:15:78:cb:b5:ea:6a:98:cd:dd:5f:98:f9:02:78:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A8:E0:E7:DF:6D:47:9F:0C:57:FE:F1:7A:3C:7C:47:AC:CB:C3:C8
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/323830313a63343a66383a3a2f34352d3438203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:da:5b:e4:28:40:26:06:9a:93:15:21:97:c7:2f:85:dc:
         b4:d6:1b:6d:bb:1a:8b:98:ee:25:59:ff:f1:d2:f4:26:75:e0:
         aa:e8:60:3f:99:42:d9:52:5d:bd:81:18:4d:e6:bf:39:e2:bd:
         ea:f0:98:72:e5:96:b9:39:63:88:72:fc:1b:01:ca:e2:0b:50:
         dc:f2:30:90:64:be:f3:d9:a8:e9:86:76:83:31:2c:7f:92:e4:
         98:37:1b:45:60:6d:47:86:8c:3c:4e:87:ae:5d:21:40:10:30:
         3e:e2:96:61:f1:88:cb:bf:77:fc:5f:7c:25:88:41:29:5d:37:
         a0:c4:61:20:c5:62:49:6e:e3:5b:42:53:cd:21:ea:23:01:7f:
         43:e9:01:21:f5:78:64:5c:86:2e:8d:e1:0e:a3:be:c5:79:4f:
         12:78:16:3d:06:b7:3d:b9:77:37:6f:1e:7d:ae:06:fb:c4:fa:
         1a:14:9b:e4:de:48:fa:b9:ac:7b:50:3e:5d:65:18:19:52:57:
         66:84:94:ca:73:a0:9c:3c:08:8e:a9:e5:9f:ed:80:5c:73:4a:
         c5:fc:66:9c:55:cb:0d:fb:1e:e9:56:55:aa:28:1b:de:ad:06:
         da:c6:a8:83:9c:f9:d6:de:14:2b:ea:ea:0b:6c:fc:39:41:13:
         8a:c0:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org