Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465373a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465373a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          69CtIyKJHHLEm3OHet+wH5vNWa2643bRYhk4js71Yrw=
Subject key identifier:   87:0E:8C:D0:9B:34:33:EE:3B:B6:CE:89:D8:91:5B:5B:7A:B5:EB:20
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       2F57CB97E910AC7FD875D0F5EF04892AB9AB2536
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465373a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:23 +0000
ROA not before:           Tue 05 Mar 2024 17:59:23 +0000
ROA not after:            Tue 04 Mar 2025 18:04:23 +0000
asID:                     267848
IP address blocks:        2800:be0:4e7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:57:cb:97:e9:10:ac:7f:d8:75:d0:f5:ef:04:89:2a:b9:ab:25:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:23 2024 GMT
            Not After : Mar  4 18:04:23 2025 GMT
        Subject: CN=870E8CD09B3433EE3BB6CE89D8915B5B7AB5EB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:ad:67:36:00:d5:5e:91:cc:ed:3d:9c:20:
                    cb:2c:40:6d:b9:a4:1b:55:d2:f0:25:c3:03:60:58:
                    3b:6a:fc:07:3a:f8:9d:fa:3f:6f:3e:6d:c5:6c:98:
                    56:df:2b:30:cd:07:2c:c6:2d:fb:9b:d0:37:cc:07:
                    81:f6:b6:74:fc:03:84:82:d6:09:22:25:5e:6d:2c:
                    09:78:8b:8e:68:db:c2:0f:ca:17:f1:10:3b:01:de:
                    16:06:b2:21:40:d2:11:00:b2:81:92:24:1a:33:d5:
                    33:f6:9e:71:58:1e:c6:15:2a:d7:f1:ff:fa:04:a0:
                    69:8f:65:4a:54:5d:03:3b:99:ad:f4:fc:d4:ce:8a:
                    64:26:6b:33:df:ac:05:23:ea:a1:31:a2:53:5c:9e:
                    2e:ff:54:83:43:c7:b1:e5:7b:22:61:cf:e3:34:ea:
                    23:29:3a:1a:fc:da:74:bf:a9:35:f1:e2:19:f5:1c:
                    a7:4e:0f:3e:17:6a:80:ee:8c:5c:63:1e:b8:27:d0:
                    7f:a4:05:e4:bb:d9:4e:89:fa:c1:fb:69:9b:b3:07:
                    57:9a:77:b5:99:d5:12:ae:e2:77:93:ee:e7:63:ab:
                    79:b0:f7:66:5c:68:78:fd:fa:7e:8d:84:37:18:a2:
                    b9:d2:cc:63:ae:0e:18:1a:32:5e:63:07:f4:f1:80:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:8C:D0:9B:34:33:EE:3B:B6:CE:89:D8:91:5B:5B:7A:B5:EB:20
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465373a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:81:d8:5d:ee:15:72:08:78:5a:d5:69:62:9d:10:1e:b4:9a:
         98:6e:80:15:6b:3d:7c:77:0d:ed:20:ad:07:ee:4f:5f:48:3c:
         9a:f8:bf:b2:26:59:05:af:74:d2:ed:5e:01:a2:9e:4d:02:fd:
         5d:bb:a8:1f:b1:ed:c8:22:2f:3c:08:ad:e7:2c:ed:34:67:ad:
         be:44:b7:e0:64:64:6c:14:92:7a:29:84:c9:fc:30:6a:ec:7f:
         39:3a:a0:36:9a:2d:93:c2:3e:7a:37:01:e9:81:3d:b6:37:02:
         03:de:df:b6:fa:32:5a:09:ec:41:fb:71:b6:1c:c7:53:8e:38:
         14:1c:45:ee:d1:a9:19:3a:ba:08:57:05:75:02:c2:d2:86:5b:
         5a:14:7a:68:6c:1b:79:30:77:58:13:7c:0a:fd:82:31:7c:e3:
         a8:c3:42:9f:9f:56:d5:fb:db:1b:15:1d:b0:4b:79:ab:30:6c:
         c4:a3:c3:94:e2:e3:4a:16:5d:c8:75:42:cf:1e:90:d5:21:32:
         39:a7:3c:f1:e8:21:ea:b2:67:7d:c8:7d:c1:87:7f:98:5c:f4:
         97:9d:9a:81:6b:c6:30:db:e3:5e:92:97:14:eb:a4:52:8e:e8:
         02:39:e6:12:2d:ac:e8:54:74:4d:08:75:e8:3f:76:63:4a:4f:
         94:d4:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org