Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/323830313a3134343a3a2f34322d3432203d3e20323634383335.roa
File:                     323830313a3134343a3a2f34322d3432203d3e20323634383335.roa (raw, json)
Hash identifier:          /zwI8/HM8ABJsXTd7Vpn1tvQcP+zTIcB+q3NK+AuNKg=
Subject key identifier:   F2:F2:0B:9B:4B:77:C9:78:37:7B:A7:A0:66:C7:7D:DB:77:F9:37:18
Certificate issuer:       /CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3
Certificate serial:       475601DF554CE07DDC3606350E137B00D8A84425
Authority key identifier: 10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/323830313a3134343a3a2f34322d3432203d3e20323634383335.roa
Signing time:             Tue 05 Mar 2024 18:12:28 +0000
ROA not before:           Tue 05 Mar 2024 18:07:28 +0000
ROA not after:            Tue 04 Mar 2025 18:12:28 +0000
asID:                     264835
IP address blocks:        2801:144::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:56:01:df:55:4c:e0:7d:dc:36:06:35:0e:13:7b:00:d8:a8:44:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3
        Validity
            Not Before: Mar  5 18:07:28 2024 GMT
            Not After : Mar  4 18:12:28 2025 GMT
        Subject: CN=F2F20B9B4B77C978377BA7A066C77DDB77F93718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:8c:4e:a6:2f:3d:c6:0f:6b:38:a5:06:fc:
                    e4:f9:54:49:39:ab:5f:08:e4:fd:73:87:c9:53:1a:
                    02:63:c4:17:42:f1:11:be:ba:b5:57:b6:9d:60:28:
                    e5:09:81:f0:ed:c2:49:71:0d:f9:1f:f9:60:5b:81:
                    62:42:0d:07:22:ba:c6:cb:26:ef:63:77:37:58:15:
                    0f:09:02:18:70:8d:08:fd:4a:03:03:f6:44:3a:ac:
                    27:9c:b3:e0:3f:eb:ad:08:2e:b9:2e:20:79:f4:c4:
                    e5:26:c0:4d:78:9c:55:bc:c9:d8:50:45:97:de:78:
                    ea:c3:42:4f:8e:33:2d:51:3a:7e:2c:36:c2:f3:9f:
                    22:b6:ff:f4:24:12:ec:6b:65:4b:e9:80:9e:99:ac:
                    46:b2:25:71:b8:dd:1d:fb:42:78:a4:ae:ea:2a:44:
                    1c:51:85:b5:c9:0b:38:80:f3:78:e0:e7:39:2e:3a:
                    88:d3:98:9d:47:1e:ad:25:68:e1:4c:e4:bd:15:2d:
                    77:54:a6:3d:0a:69:86:bd:20:9f:c1:2e:e2:1b:f8:
                    5d:7f:ed:51:c1:0e:b0:7c:cf:9e:51:64:21:3a:42:
                    22:8b:fb:27:c0:3a:b3:f2:19:d5:89:46:08:e8:12:
                    78:f2:27:38:9c:db:44:22:a2:fd:ad:94:fd:0b:c1:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F2:0B:9B:4B:77:C9:78:37:7B:A7:A0:66:C7:7D:DB:77:F9:37:18
            X509v3 Authority Key Identifier:
                keyid:10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/323830313a3134343a3a2f34322d3432203d3e20323634383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:144::/42

    Signature Algorithm: sha256WithRSAEncryption
         ae:74:5b:f9:d5:bf:1b:2e:51:12:79:73:0b:5a:6c:af:49:e9:
         ea:4b:76:99:70:8f:0f:ef:c4:db:69:23:39:df:28:79:89:7b:
         00:d5:ba:34:6c:34:ab:1f:06:e1:a8:85:db:eb:1b:f7:a3:28:
         5b:ae:16:a7:6d:e0:1f:a0:99:2f:7c:a0:67:24:c5:2d:46:ef:
         a9:15:8c:23:07:b0:46:56:b0:91:b8:97:bd:7f:26:b5:a3:63:
         11:14:12:88:4f:58:61:4d:48:a1:86:04:a2:a2:1d:b1:8b:fd:
         70:39:09:a5:2a:40:de:03:79:9b:4e:21:88:19:94:ac:52:e9:
         93:79:df:b7:54:1b:96:7d:9c:81:cd:f9:22:7f:f1:44:c5:2a:
         a0:16:90:27:bb:a5:99:f5:73:1c:e4:63:da:20:7c:c1:dd:af:
         38:fe:53:c9:d1:27:b0:b0:06:72:30:33:37:23:c0:d7:65:bd:
         4a:fe:51:d3:5d:65:fa:9c:4b:fd:20:a5:8a:95:92:83:c8:00:
         53:37:64:55:3a:48:4b:35:7c:e0:e3:1b:f0:8a:26:fd:ba:f1:
         81:4e:3b:16:d2:7e:1e:1a:cd:93:38:33:2a:47:ce:ed:27:79:
         ee:7d:c5:e3:2d:03:8f:68:5b:26:48:10:4d:20:7e:e9:47:02:
         00:79:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org