Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a363a3a2f34382d3438203d3e20323730313035.roa
File:                     323830313a3137613a363a3a2f34382d3438203d3e20323730313035.roa (raw, json)
Hash identifier:          OkLpahAgPPQBRfPUSjtq0cDo8J3yxaDdUIIfJjxzIp0=
Subject key identifier:   3B:7E:F5:6B:01:47:AF:70:78:24:AB:4F:AD:2F:1D:5F:52:70:C9:B1
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       2E92E618B20CA8F576CC9AAC4F5F57E5BEA93A88
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a363a3a2f34382d3438203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:02 +0000
ROA not before:           Tue 05 Mar 2024 17:39:02 +0000
ROA not after:            Tue 04 Mar 2025 17:44:02 +0000
asID:                     270105
IP address blocks:        2801:17a:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:92:e6:18:b2:0c:a8:f5:76:cc:9a:ac:4f:5f:57:e5:be:a9:3a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:02 2024 GMT
            Not After : Mar  4 17:44:02 2025 GMT
        Subject: CN=3B7EF56B0147AF707824AB4FAD2F1D5F5270C9B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:2a:cf:92:bd:b2:b7:6b:f1:71:9b:27:f4:
                    be:95:03:3d:09:c7:d7:79:09:1a:2a:09:d4:7c:a4:
                    1b:1c:1b:e1:77:53:7f:16:bd:7d:ab:cb:f0:e0:ef:
                    41:4b:80:16:d0:9d:aa:c2:1f:dc:ce:78:a6:c8:19:
                    c8:79:75:70:6b:98:a3:36:0f:ad:29:7b:f4:d5:4e:
                    82:94:51:bc:8d:11:5a:f2:47:b6:63:37:4f:fc:eb:
                    33:11:19:c8:f5:9b:85:e3:44:21:05:e6:d2:eb:be:
                    2f:d3:3c:0d:c0:57:73:1b:2f:47:e8:84:68:c0:6d:
                    a4:96:85:32:d5:01:97:71:85:29:3f:ee:03:49:b7:
                    cc:83:16:b6:f9:f6:fb:bc:3c:e3:41:a2:4c:54:91:
                    3a:7a:5d:58:37:93:8e:26:74:6a:9c:0c:96:dd:b4:
                    89:bd:ea:82:0f:f1:7c:c2:21:10:5c:8d:19:8e:51:
                    2e:c8:b3:de:68:15:c4:05:c8:1b:40:bf:00:14:b9:
                    39:6d:16:be:07:9b:58:4e:9a:c6:f6:76:68:8d:6d:
                    2f:70:20:37:84:45:7d:0a:b0:d5:05:70:1c:12:19:
                    04:60:8b:90:ed:5e:bf:9d:b6:bf:f5:a9:ce:01:cd:
                    59:bd:b1:bc:4e:31:0f:a1:55:ee:68:14:06:f1:c4:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:F5:6B:01:47:AF:70:78:24:AB:4F:AD:2F:1D:5F:52:70:C9:B1
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a363a3a2f34382d3438203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17a:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:47:11:41:fe:6e:c4:17:b8:67:06:48:25:5e:60:cb:66:96:
         0b:4a:cd:97:01:8e:d1:c1:a1:67:d8:7b:e0:46:e1:5e:85:5c:
         3a:85:13:13:e2:bd:36:2c:34:00:67:3b:79:89:d8:35:97:6d:
         9f:87:fb:71:cb:59:44:3b:58:3d:22:45:07:55:31:82:7c:57:
         c6:10:71:73:be:65:b8:30:7f:aa:3b:41:78:90:84:9f:1d:da:
         06:52:3e:a5:d3:0a:45:58:d8:ea:53:bd:9e:01:d1:6f:e7:81:
         80:3f:05:dd:b8:19:2a:ab:53:e0:61:ac:95:7a:54:05:38:47:
         1b:f9:5b:46:9a:02:46:dd:fe:f8:6f:d2:89:4b:88:47:42:69:
         0d:8c:22:be:3a:d7:22:97:bd:7e:a7:7a:04:f7:3a:06:f1:ed:
         ee:a2:ae:f5:ed:70:93:1d:e5:b2:93:ea:0a:82:5c:45:ce:2e:
         40:39:00:47:2e:b7:e6:21:09:6c:28:91:d3:d8:b4:b1:c3:f4:
         6a:0c:5c:d6:80:24:c5:56:d2:aa:86:57:e7:90:59:cc:cf:c7:
         89:da:e0:a0:d2:a6:28:c5:e1:6c:48:9d:08:28:10:84:f4:2c:
         84:a7:50:3e:1c:ba:b3:ce:10:0e:fa:58:af:56:d4:8f:43:10:
         b7:60:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:46 2024 by rpki-client on console-fra.rpki-client.org