Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830303a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a31623a383830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          urr4CFBRWX6bM+swwXttv+7yfMKG2fLuKK9Lqf/uleU=
Subject key identifier:   88:D2:C1:3A:79:BB:22:7F:50:13:0E:FE:F7:12:40:5D:D4:CC:58:C3
Certificate issuer:       /CN=BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C
Certificate serial:       0C620A6E880982EB559C2055783A680B77EF7F75
Authority key identifier: BA:DC:ED:F8:ED:0B:8C:D6:9B:E9:EA:77:9E:6E:DC:95:70:E7:95:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830303a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:55:23 +0000
ROA not before:           Tue 05 Mar 2024 17:50:23 +0000
ROA not after:            Tue 04 Mar 2025 17:55:23 +0000
asID:                     19429
IP address blocks:        2801:1b:8800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:62:0a:6e:88:09:82:eb:55:9c:20:55:78:3a:68:0b:77:ef:7f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C
        Validity
            Not Before: Mar  5 17:50:23 2024 GMT
            Not After : Mar  4 17:55:23 2025 GMT
        Subject: CN=88D2C13A79BB227F50130EFEF712405DD4CC58C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:dc:34:88:9e:5c:bf:9e:6f:89:e8:54:63:
                    67:54:fc:c4:e3:6b:14:9d:75:26:9e:b2:c4:7d:22:
                    d7:d5:58:c0:c4:5f:08:d8:9a:eb:d7:7f:96:f9:a5:
                    a4:2d:95:c2:33:de:10:e0:14:49:2f:f4:24:92:a2:
                    de:2a:bb:cf:88:e7:b3:3a:f4:b4:32:bf:d3:a7:be:
                    d7:75:dc:1b:b6:6a:91:ab:8c:ca:b3:90:cf:ee:89:
                    b4:8d:5c:fa:32:45:ec:d8:79:2a:a3:fe:69:cd:96:
                    d1:fa:cc:1d:e3:a5:c5:13:bd:7b:9f:c9:d3:07:69:
                    1f:9c:95:da:52:79:8c:9c:83:44:54:ab:1f:cf:15:
                    27:a6:cb:8e:f6:3b:89:58:86:96:3a:37:d2:b6:82:
                    98:f3:46:78:1d:96:b8:e6:33:5d:57:a7:31:d1:53:
                    e6:34:94:70:8c:85:36:53:38:ff:88:4f:b4:d8:ac:
                    38:15:d4:df:b4:74:c2:f9:00:b0:c7:e9:c1:4d:9e:
                    24:96:6f:8f:33:13:4c:fb:1f:c2:8e:48:d8:d5:a2:
                    c5:09:9d:0b:c6:bc:4f:4f:fd:22:18:9c:48:a1:3d:
                    48:2a:4e:14:2c:af:f0:86:d6:90:01:43:3f:70:b4:
                    b2:17:a6:e2:1a:7b:83:2f:a8:46:d8:09:39:a8:c9:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D2:C1:3A:79:BB:22:7F:50:13:0E:FE:F7:12:40:5D:D4:CC:58:C3
            X509v3 Authority Key Identifier:
                keyid:BA:DC:ED:F8:ED:0B:8C:D6:9B:E9:EA:77:9E:6E:DC:95:70:E7:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADCEDF8ED0B8CD69BE9EA779E6EDC9570E7959C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F30A48C56AA62874863852B6922DD67019C81AAF14AA58DBB95B9A4762F3FDDD/0/323830313a31623a383830303a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:62:c8:06:40:de:64:7c:4c:1b:9d:7e:33:b0:f7:9f:dc:4a:
         12:d3:04:c5:f2:18:16:e3:3a:03:5a:51:3d:eb:5b:94:ed:cd:
         f8:3f:a8:60:7e:39:5b:29:ec:61:d1:08:f9:ef:1e:88:76:80:
         fd:71:c9:0d:0d:70:07:41:4b:3c:14:08:4a:cb:60:25:1d:89:
         89:22:f6:f1:39:fa:36:de:32:be:b4:fe:68:fd:d5:11:b2:2f:
         9e:2e:6e:62:64:32:bf:49:67:11:db:42:3d:3f:82:9b:f1:ab:
         46:c6:62:6a:41:10:ef:bc:aa:12:02:20:d5:9d:ee:3f:be:33:
         e8:20:85:d4:5e:ee:6f:4d:9d:41:48:26:07:39:bb:40:5c:08:
         1a:7a:70:9b:c8:50:b1:10:8a:6c:84:7e:f9:22:0b:2e:97:01:
         61:cb:58:ec:6d:bb:23:39:1b:fe:6a:b4:47:ea:b9:6d:9c:89:
         cc:65:a4:e4:9c:00:46:94:ab:c6:a2:59:59:4b:44:8d:46:57:
         86:06:74:c3:b5:44:40:f4:67:26:0f:9c:3e:86:de:2a:59:e8:
         ad:5c:d9:ff:62:15:c3:59:cf:7e:81:d2:a7:36:73:91:c7:8c:
         7e:2c:2f:3b:52:7d:f4:65:75:8d:5c:d5:ec:65:71:4e:be:23:
         ef:37:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org