Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/323830313a303a3432303a3a2f34382d3438203d3e20323632313537.roa
File:                     323830313a303a3432303a3a2f34382d3438203d3e20323632313537.roa (raw, json)
Hash identifier:          hvb2He2YiwdXCuhFH9tKEiFmEkCzR8exfU+OUn5DebE=
Subject key identifier:   B3:38:77:42:A3:56:EB:0A:BA:92:C7:90:B7:45:1C:A5:B8:23:0F:52
Certificate issuer:       /CN=ABCA5BFE80371D74C85885F36AA97BA698DFAE02
Certificate serial:       02CC623E29A7A89F60F002A540A86D60710D7AD7
Authority key identifier: AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/323830313a303a3432303a3a2f34382d3438203d3e20323632313537.roa
Signing time:             Tue 05 Mar 2024 18:12:18 +0000
ROA not before:           Tue 05 Mar 2024 18:07:18 +0000
ROA not after:            Tue 04 Mar 2025 18:12:18 +0000
asID:                     262157
IP address blocks:        2801:0:420::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cc:62:3e:29:a7:a8:9f:60:f0:02:a5:40:a8:6d:60:71:0d:7a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABCA5BFE80371D74C85885F36AA97BA698DFAE02
        Validity
            Not Before: Mar  5 18:07:18 2024 GMT
            Not After : Mar  4 18:12:18 2025 GMT
        Subject: CN=B3387742A356EB0ABA92C790B7451CA5B8230F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:72:61:7a:ef:a8:58:08:e9:8b:c2:91:e8:
                    f4:ae:f9:e9:cf:5d:97:70:f1:57:6b:34:11:f7:b5:
                    fe:22:02:83:e9:f2:91:ed:37:e3:72:dd:e3:57:28:
                    e2:ba:70:88:48:f4:62:b9:5a:da:2f:94:58:fe:52:
                    37:1f:21:7a:61:8b:43:8b:41:fd:32:3b:81:9d:43:
                    73:6d:28:98:e7:79:66:ee:7a:22:0c:33:bc:c5:fe:
                    5f:7d:a1:70:2d:87:03:e8:84:4c:d6:7a:d5:43:da:
                    f3:5c:61:21:36:7d:e7:83:30:f1:d7:a7:70:53:fa:
                    b0:a7:54:dc:d7:68:04:69:71:af:54:74:5e:70:77:
                    b7:14:21:f6:13:40:78:38:69:d1:a3:40:83:1c:3a:
                    78:1a:dc:cf:48:8e:f5:92:7e:8f:f3:fa:3d:11:90:
                    ca:08:98:61:b0:33:8b:a8:3d:83:8f:27:6a:57:a1:
                    da:1b:40:8b:37:6f:a0:8b:4f:c2:c1:6a:c4:5f:a1:
                    6f:28:be:e7:c0:22:69:48:69:9d:ac:cc:4b:0c:78:
                    78:9e:85:d9:60:92:a5:f6:50:df:5c:bf:8f:bd:30:
                    67:62:e0:7a:4f:af:47:48:07:ed:6e:b6:5e:96:d0:
                    e8:c2:4e:c9:76:62:fc:5d:44:a4:a6:6f:5b:39:c5:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:38:77:42:A3:56:EB:0A:BA:92:C7:90:B7:45:1C:A5:B8:23:0F:52
            X509v3 Authority Key Identifier:
                keyid:AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/323830313a303a3432303a3a2f34382d3438203d3e20323632313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:420::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:09:f9:92:7b:77:5e:99:1f:3c:b0:74:9e:f3:ae:4e:ed:7e:
         eb:ad:48:5d:18:fb:17:e7:7c:2d:53:3e:d5:f6:32:8f:65:40:
         5b:ab:28:7a:28:0e:ef:92:e5:45:eb:c2:ec:d4:45:ed:aa:ae:
         a3:d1:5e:99:56:ea:27:fb:41:33:19:cc:31:3b:e5:0c:23:a7:
         8d:a2:60:c9:06:be:0d:92:51:ba:14:ff:48:98:d5:c2:65:f4:
         ef:69:40:fb:9c:3e:ff:29:5f:8a:82:d0:35:2c:3e:32:cb:15:
         af:95:fc:75:04:e4:62:43:5b:b2:e6:a1:ee:28:25:5d:03:ae:
         67:ef:9d:cb:00:9a:78:98:48:9f:23:66:53:c5:4a:2d:0e:f4:
         0d:e8:fc:62:bd:ca:21:ff:11:59:58:37:ca:fe:62:07:12:1a:
         a2:93:c4:7b:05:81:d1:85:6c:1c:27:d6:3e:7e:4d:4e:8e:26:
         6a:78:ad:2e:b2:0e:a5:a7:0b:19:2c:6e:dd:bf:c8:4e:86:33:
         8d:70:ca:71:0c:bb:eb:69:8c:14:8c:0b:94:b8:c2:64:2e:00:
         fe:0a:c3:ef:16:9c:3e:de:bc:1c:17:c6:dd:e9:45:a3:48:61:
         82:59:2d:96:2f:31:e3:35:98:5d:ac:01:c8:36:2d:0e:72:0a:
         6c:7c:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org