Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/323830313a31333a333030303a3a2f34382d3438203d3e20323635373739.roa
File:                     323830313a31333a333030303a3a2f34382d3438203d3e20323635373739.roa (raw, json)
Hash identifier:          BM7XgDgieZ/R1MEvtWIa/HC+K6B/eNKxdWwOZwq6YHw=
Subject key identifier:   B3:69:C1:61:A0:20:56:93:F7:A1:1A:9A:B2:9E:EA:C2:14:3B:25:CD
Certificate issuer:       /CN=E8554F873F7503B7C2C3FD59E7E595FBC9D62A38
Certificate serial:       7FD68E852AA048ED35056C54682DC088EEC1CF87
Authority key identifier: E8:55:4F:87:3F:75:03:B7:C2:C3:FD:59:E7:E5:95:FB:C9:D6:2A:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/323830313a31333a333030303a3a2f34382d3438203d3e20323635373739.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     265779
IP address blocks:        2801:13:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d6:8e:85:2a:a0:48:ed:35:05:6c:54:68:2d:c0:88:ee:c1:cf:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8554F873F7503B7C2C3FD59E7E595FBC9D62A38
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=B369C161A0205693F7A11A9AB29EEAC2143B25CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:aa:ea:ec:07:25:1e:87:f7:4e:8b:18:97:
                    4c:cf:38:ef:61:05:eb:7d:34:61:68:60:58:a0:24:
                    07:7a:32:e1:26:96:ca:14:30:3d:d9:21:c2:3d:b5:
                    fb:29:9f:da:50:88:54:3b:32:33:a8:ad:27:42:3c:
                    dd:81:84:f9:10:0c:a3:5a:ee:50:c4:30:f7:1c:9b:
                    22:98:da:4a:ff:31:f4:25:29:4e:30:85:14:cf:13:
                    50:82:a5:40:07:ac:73:1f:4c:a0:bf:7d:d8:6e:60:
                    a5:60:c6:fb:b3:69:d7:a5:0b:5f:e6:67:97:2d:ac:
                    32:a2:7e:94:7c:a2:c2:27:f9:c1:b8:e3:36:35:66:
                    83:b8:ba:22:c7:3f:76:05:fe:6b:6c:82:c9:59:91:
                    1e:72:7f:e0:29:13:d7:ab:00:a3:5e:c4:99:bc:07:
                    4d:1e:17:05:2e:25:c7:5b:5e:a7:95:dc:55:97:d1:
                    7a:9f:b0:02:88:c2:b1:15:68:b2:39:39:70:3b:de:
                    e9:43:e2:41:15:f1:bd:54:6d:92:88:2d:80:a8:40:
                    c8:1d:a0:95:d7:27:a1:3b:1a:0d:89:26:fa:ef:89:
                    4b:2a:88:03:38:14:23:c7:dc:30:66:a9:58:c3:b7:
                    f5:d7:9f:31:3d:af:ac:ea:88:10:08:f6:bc:54:4a:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:69:C1:61:A0:20:56:93:F7:A1:1A:9A:B2:9E:EA:C2:14:3B:25:CD
            X509v3 Authority Key Identifier:
                keyid:E8:55:4F:87:3F:75:03:B7:C2:C3:FD:59:E7:E5:95:FB:C9:D6:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/323830313a31333a333030303a3a2f34382d3438203d3e20323635373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:b5:28:5a:9d:e5:45:23:33:42:17:35:1b:be:bd:05:53:0e:
         a6:2d:9c:d0:39:c5:79:81:24:d3:b5:4c:4c:db:fe:dd:25:0b:
         e8:d2:03:9f:a2:f7:dc:13:78:37:8b:3d:5d:af:61:9f:05:d3:
         5f:0e:09:fb:be:46:53:b2:1e:c1:26:81:9b:c7:b2:e0:1c:8b:
         a4:88:45:45:34:0b:e6:5b:ff:49:3e:5e:b8:a3:9b:7b:1e:79:
         7a:05:6a:21:08:3a:3e:55:6a:d0:8b:ce:ce:03:3e:ed:5b:a1:
         0b:f1:d3:0c:66:5d:8a:e0:20:5c:2b:aa:fd:cb:a9:fb:8e:36:
         1c:37:0f:25:2f:32:7b:38:b5:3e:3a:05:30:be:b6:70:bf:7c:
         f1:2d:ca:f7:51:78:04:0b:ce:e0:6a:6d:2e:7c:0f:00:ca:61:
         39:e7:b9:ed:db:c4:cb:1a:84:59:bb:4f:0c:a5:a9:75:4d:22:
         1d:65:fb:3e:13:0b:d7:02:7f:6d:56:95:21:3c:d5:9f:2f:df:
         47:4f:af:ad:ae:3a:b1:33:a2:e9:97:01:7a:1f:ca:2b:d7:d4:
         13:55:fa:4d:57:53:5d:91:0b:41:be:e8:28:08:63:95:85:18:
         de:82:7d:d5:9c:26:54:36:8d:f0:52:4d:6b:fe:57:42:54:c9:
         d8:4f:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:32 2024 by rpki-client on console-fra.rpki-client.org