Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465363a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465363a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          H/63ismd1N/MAew2iqkH6ioPA4PjAuCpkhrH+/EqjU8=
Subject key identifier:   F4:AC:6B:47:33:40:F1:2F:D4:E6:CF:D7:D6:C4:D5:69:19:47:26:0F
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       24DC4D0977D493C244241150C23C14479BDE0CD1
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465363a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:20 +0000
ROA not before:           Tue 05 Mar 2024 17:59:20 +0000
ROA not after:            Tue 04 Mar 2025 18:04:20 +0000
asID:                     267848
IP address blocks:        2800:be0:4e6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dc:4d:09:77:d4:93:c2:44:24:11:50:c2:3c:14:47:9b:de:0c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:20 2024 GMT
            Not After : Mar  4 18:04:20 2025 GMT
        Subject: CN=F4AC6B473340F12FD4E6CFD7D6C4D5691947260F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:f0:89:a9:19:1f:ef:32:72:04:13:b7:e4:
                    55:68:d5:5a:0f:55:e8:6c:8a:62:88:0f:0a:cb:8b:
                    f6:0c:9c:40:8e:5b:3a:1b:5b:7d:b8:f9:21:13:0d:
                    d2:5d:25:5e:97:fe:f6:5e:b4:13:5a:dd:87:d8:a7:
                    ac:98:53:96:4f:be:b0:8a:b0:36:b1:81:51:b8:b9:
                    c2:a5:95:0a:53:9a:32:be:ba:0a:63:95:a7:07:1e:
                    ed:9e:83:8d:5c:6a:a9:5b:64:fa:eb:ec:fa:af:ef:
                    71:71:4c:56:9d:ce:1b:08:33:80:42:15:09:8a:73:
                    1b:92:43:7a:36:13:89:fe:52:31:38:7c:6f:d7:d7:
                    f4:94:ec:83:62:ff:1a:d4:d2:59:32:1e:6f:77:9f:
                    cd:4b:d0:af:6c:07:9d:50:17:55:5a:38:81:d5:c8:
                    98:3a:0a:0d:67:cd:85:1f:c9:a2:64:29:7b:18:e0:
                    28:75:89:56:bc:fb:fd:61:6f:c4:54:e0:ac:e6:9d:
                    a8:ac:12:b1:17:89:75:f6:34:d7:08:70:7d:2f:1d:
                    7a:3b:88:0b:58:cc:21:3b:49:1f:02:66:57:f9:88:
                    74:92:d5:13:55:8b:88:aa:47:de:6a:7d:4b:e4:17:
                    22:3f:4f:8c:a9:2a:74:51:71:17:80:84:a9:bd:df:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AC:6B:47:33:40:F1:2F:D4:E6:CF:D7:D6:C4:D5:69:19:47:26:0F
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465363a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:e9:a8:bf:73:da:1e:d6:77:6c:34:83:9c:3a:ce:52:d7:
         3a:25:13:37:f2:c1:a7:e7:79:37:65:93:36:d3:62:13:2b:94:
         9b:cd:01:1c:26:e8:10:62:a8:d0:af:d3:0a:c6:af:3c:85:1a:
         ed:aa:6b:51:cf:1d:ab:07:49:d1:31:e8:fb:ae:10:02:e8:59:
         b3:8d:68:36:93:89:15:88:78:8e:8e:c6:d4:36:a1:f4:ab:a3:
         ff:09:f9:89:06:35:a7:61:1c:00:c5:d7:f7:8e:1b:5e:52:ff:
         a6:05:e8:ff:c6:5c:91:61:6e:98:88:f7:a0:65:21:b3:3e:1c:
         df:a1:21:da:2c:8f:29:ae:17:5e:45:86:3c:75:80:2d:c4:fa:
         f9:92:81:f4:42:0c:2a:0a:d8:f4:a3:30:1f:3c:c7:67:38:b0:
         d0:18:66:f9:0d:0a:a8:42:02:2b:76:5a:6e:4b:6c:7e:d9:48:
         17:f3:3a:94:75:7c:4d:9f:0d:e9:fb:6a:21:5d:4d:03:4d:97:
         0d:e7:32:61:a5:79:cf:a9:64:98:43:c3:24:de:da:0a:b7:aa:
         69:48:22:9a:49:c3:28:83:07:22:b6:bc:02:d1:5c:df:04:d2:
         4f:03:71:56:26:9e:28:94:bc:32:44:ad:1f:e5:96:0b:df:3b:
         3a:12:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org