Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          d6Os7aw/I0j5b+UNi3D3/awq+LLMNJ4aHr9BouT0GL8=
Subject key identifier:   6F:8F:A0:55:B9:8D:4B:91:49:8D:82:D8:14:4C:81:8E:38:21:60:B6
Certificate issuer:       /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Certificate serial:       2470EE9707BD60422E46142C8295AF1802945D49
Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 17:49:00 +0000
ROA not before:           Tue 05 Mar 2024 17:44:00 +0000
ROA not after:            Tue 04 Mar 2025 17:49:00 +0000
asID:                     14080
IP address blocks:        2801:13:2800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:70:ee:97:07:bd:60:42:2e:46:14:2c:82:95:af:18:02:94:5d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
        Validity
            Not Before: Mar  5 17:44:00 2024 GMT
            Not After : Mar  4 17:49:00 2025 GMT
        Subject: CN=6F8FA055B98D4B91498D82D8144C818E382160B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:b1:5f:34:70:26:90:be:10:40:cf:16:cd:
                    c0:91:45:5e:1d:54:7e:a8:ce:bd:34:21:b7:ef:67:
                    47:d3:8d:ec:41:aa:22:90:a9:90:fe:64:ea:3a:da:
                    48:62:a3:ea:9d:60:11:3a:54:70:34:36:5a:0c:09:
                    e9:fb:76:5e:e5:2c:f4:e4:52:dc:12:5d:d3:b4:3f:
                    8c:e8:f2:59:4f:0a:79:58:b5:c4:70:89:a8:ab:ac:
                    a3:14:c4:fd:8e:e8:3f:83:92:dd:34:0f:80:39:6d:
                    b9:2f:3c:04:9c:45:dd:1b:49:68:d9:a2:31:2c:0b:
                    63:d4:b5:b3:0d:a0:72:14:cb:35:3a:ff:e9:12:79:
                    e7:01:19:4e:95:3e:f3:85:54:a8:d5:07:0d:4f:13:
                    e3:d6:70:98:a0:33:96:80:f8:dd:f9:dc:ef:4a:8b:
                    74:bd:d9:fd:7c:b9:c0:ba:01:c3:b7:26:24:64:3b:
                    c0:6d:93:62:88:ae:2b:0a:79:6a:de:c7:0b:02:b1:
                    43:0c:f1:c9:fb:2a:02:d7:75:63:b6:f3:ed:b4:c3:
                    45:be:71:bf:e5:19:5c:01:a2:6f:82:22:29:f4:00:
                    c4:ce:b4:4f:f4:45:01:96:21:d9:b7:1b:d1:22:4d:
                    41:57:de:df:26:fd:44:8a:ee:86:fa:15:00:f4:58:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8F:A0:55:B9:8D:4B:91:49:8D:82:D8:14:4C:81:8E:38:21:60:B6
            X509v3 Authority Key Identifier:
                keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:e9:1a:33:57:cb:74:3f:e7:73:0f:ef:ee:ab:29:1c:bf:68:
         00:3f:d9:92:01:53:01:9a:7c:b9:2f:da:a6:32:57:73:34:eb:
         37:fc:5b:34:de:a9:30:aa:90:2e:54:13:7a:93:65:e3:30:81:
         ce:c1:15:96:bc:39:74:32:e3:a2:09:10:8a:60:1a:82:8d:ae:
         8e:57:d1:2c:ca:21:3d:97:5f:27:e5:79:06:e9:c3:8c:fc:b8:
         b9:85:be:10:80:aa:5f:cd:36:58:70:f5:1a:1c:19:ac:c8:4e:
         d9:f3:86:73:94:53:29:03:33:06:cb:ee:8c:49:7c:43:a8:d3:
         3c:4d:45:63:70:ec:bc:7f:8e:f6:30:84:83:18:07:22:cb:26:
         55:e6:44:d9:3e:cb:c2:89:8f:65:bb:53:4b:0d:e6:fd:e3:41:
         2c:35:e7:01:7d:20:1e:93:e0:e4:c6:85:56:29:b3:fb:ab:bc:
         41:26:dc:03:44:77:5d:94:79:88:4d:48:a6:b1:aa:b0:72:f3:
         40:e8:87:1c:3e:7d:c9:6c:2d:8a:13:88:62:48:db:4d:eb:a9:
         1a:a0:33:f0:2b:ce:2a:57:a2:de:e2:00:a4:01:31:2c:d9:97:
         53:92:d2:7a:59:8e:84:d8:09:44:58:76:e5:07:28:ab:63:94:
         9c:90:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org