Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e20323632353839.roa
File:                     323830313a31613a633830303a3a2f34382d3634203d3e20323632353839.roa (raw, json)
Hash identifier:          HLvoxG+rZkyhwghF6oo18uI9aNKfXbFp+gLhLk/JEKM=
Subject key identifier:   82:AF:CA:97:37:BC:9D:A3:FB:B2:0C:3E:40:81:15:91:BD:31:D0:31
Certificate issuer:       /CN=5B714168E3B78E8062470168D5A07ED860042126
Certificate serial:       2F391D0DA4665E120B728BAEAC7FE7AA8E58DE57
Authority key identifier: 5B:71:41:68:E3:B7:8E:80:62:47:01:68:D5:A0:7E:D8:60:04:21:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:44:05 +0000
ROA not before:           Tue 05 Mar 2024 17:39:05 +0000
ROA not after:            Tue 04 Mar 2025 17:44:05 +0000
asID:                     262589
IP address blocks:        2801:1a:c800::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:39:1d:0d:a4:66:5e:12:0b:72:8b:ae:ac:7f:e7:aa:8e:58:de:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B714168E3B78E8062470168D5A07ED860042126
        Validity
            Not Before: Mar  5 17:39:05 2024 GMT
            Not After : Mar  4 17:44:05 2025 GMT
        Subject: CN=82AFCA9737BC9DA3FBB20C3E40811591BD31D031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:a2:48:df:a8:52:72:b7:46:9b:08:f1:c0:
                    7f:1b:64:69:22:e2:51:e5:35:30:de:e7:23:a4:98:
                    e8:49:f5:05:ee:8f:e2:96:f0:a4:89:51:ff:44:8a:
                    f3:7d:e0:2c:80:5e:c9:d7:6f:fe:f0:cd:22:0b:fc:
                    14:2c:39:b0:d4:8a:1b:d4:61:de:c4:50:4e:e8:ec:
                    5f:a7:45:a3:d9:ab:9b:8b:ef:0c:f1:1c:b2:09:2a:
                    d1:82:88:5c:80:e5:e9:8c:de:99:af:53:da:d2:10:
                    d2:c9:3e:5f:15:8e:07:a8:24:cd:02:47:56:99:d9:
                    56:64:10:6c:e7:8f:c0:cd:a7:16:5f:f8:79:1c:d0:
                    19:85:68:e8:39:22:d3:58:ea:4d:ae:a5:f6:af:ed:
                    a6:76:6c:fa:d8:c2:7e:d1:9b:10:a6:68:67:b6:ec:
                    a6:4b:f3:9b:dd:d1:4a:dc:3d:c9:ee:51:4d:59:5c:
                    4d:39:15:12:78:ec:cc:a7:54:97:d1:ff:39:fe:14:
                    97:19:d6:70:fd:b2:7e:c2:fd:46:96:fc:79:9b:8b:
                    de:3c:e4:8c:39:9d:fd:4f:53:e4:fc:f7:46:b4:52:
                    9d:2c:39:bc:3b:64:7b:a1:f0:f2:06:4d:51:b5:83:
                    91:65:71:6a:33:c6:b9:57:06:1a:ae:38:b4:61:1b:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AF:CA:97:37:BC:9D:A3:FB:B2:0C:3E:40:81:15:91:BD:31:D0:31
            X509v3 Authority Key Identifier:
                keyid:5B:71:41:68:E3:B7:8E:80:62:47:01:68:D5:A0:7E:D8:60:04:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/5B714168E3B78E8062470168D5A07ED860042126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B714168E3B78E8062470168D5A07ED860042126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48F71750514BC3F6B61D219D1E7EE11FDA7794AD54A0F44F39900C1E2C8897BF/0/323830313a31613a633830303a3a2f34382d3634203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:b3:10:cb:6a:a4:d0:8f:03:b3:05:60:48:27:fc:d0:02:bc:
         1d:7d:c9:60:d2:4c:77:22:0c:9d:f4:7b:10:b2:6d:92:39:fe:
         47:30:fe:14:36:b3:72:b3:23:f5:3d:60:97:d5:28:a1:51:3a:
         f7:f4:fb:a2:bf:79:ef:f3:61:2b:8d:40:a3:24:b6:9a:fd:13:
         5c:e3:e8:36:f5:77:cb:6d:80:cb:5d:3a:a1:c3:50:ee:ed:47:
         8d:09:9e:ff:86:91:61:ab:ec:cc:4a:aa:e5:01:c6:00:3c:7f:
         96:28:9e:3b:86:dc:df:ce:45:5c:da:f8:24:b7:0f:a0:6b:fc:
         27:47:5c:73:d2:85:00:6c:59:8a:9a:b5:37:8e:7a:16:c2:df:
         5e:f4:15:ca:7b:e6:ae:38:97:1b:fa:73:6c:c6:45:98:9b:59:
         e7:25:4b:4f:41:2b:d1:0d:8c:f8:10:84:23:17:63:e9:96:22:
         f1:87:29:fe:a0:b5:81:12:cf:d9:f6:a5:b8:2e:15:9b:6b:91:
         4d:3b:3d:e2:0d:6b:9e:bd:0c:e2:e9:72:b0:61:42:ea:9c:cc:
         32:0c:c5:2a:95:23:73:6e:07:f3:7c:fc:81:17:77:60:aa:f0:
         a5:39:d1:2f:5b:6d:be:ca:aa:5a:8d:4c:4f:5b:8a:16:27:ca:
         30:06:22:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:50:54 2024 by rpki-client on console-ams.rpki-client.org