Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/323830313a31313a313030303a3a2f34382d3438203d3e20323634363333.roa
File:                     323830313a31313a313030303a3a2f34382d3438203d3e20323634363333.roa (raw, json)
Hash identifier:          9MbHXLzDyVI0ze0kxwmOnDskos9k+HCSHNNMbfv5/Sk=
Subject key identifier:   56:02:83:39:D9:96:8B:75:4F:B9:EA:29:A0:35:BD:91:FF:56:9D:71
Certificate issuer:       /CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
Certificate serial:       13ED10A702A8C2DC71403B6BFF8F030EC03BE89B
Authority key identifier: 25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/323830313a31313a313030303a3a2f34382d3438203d3e20323634363333.roa
Signing time:             Tue 05 Mar 2024 17:56:51 +0000
ROA not before:           Tue 05 Mar 2024 17:51:51 +0000
ROA not after:            Tue 04 Mar 2025 17:56:51 +0000
asID:                     264633
IP address blocks:        2801:11:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ed:10:a7:02:a8:c2:dc:71:40:3b:6b:ff:8f:03:0e:c0:3b:e8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
        Validity
            Not Before: Mar  5 17:51:51 2024 GMT
            Not After : Mar  4 17:56:51 2025 GMT
        Subject: CN=56028339D9968B754FB9EA29A035BD91FF569D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:61:11:1f:d9:23:04:c4:04:38:5f:c6:79:
                    9c:a9:a2:0f:cd:d6:18:db:a7:b7:9e:0c:64:64:db:
                    73:08:67:99:b3:9a:76:ed:37:bb:b5:60:32:4e:43:
                    c1:81:cc:38:18:09:13:67:e1:1f:76:de:50:e0:94:
                    f6:47:90:28:5f:f8:18:39:ad:c5:b7:c2:cb:c0:b4:
                    90:18:b8:ff:22:92:8b:6d:e6:28:2f:42:08:72:3b:
                    e5:24:6f:08:00:75:a8:53:e9:03:26:64:ab:80:52:
                    51:72:bb:e9:be:e5:80:1e:6b:ef:77:fc:ad:ef:15:
                    52:c3:a2:83:79:e7:35:41:98:cc:e1:d7:31:26:bc:
                    8a:30:24:d9:4c:14:bd:a7:e5:77:97:03:bd:79:2e:
                    8d:f5:37:de:77:89:91:16:4e:6a:66:94:79:11:82:
                    a8:10:1c:18:36:c8:d1:ed:7c:7d:63:b1:f1:63:2b:
                    32:77:2f:c0:9b:2e:b3:d5:1f:c5:44:42:6a:02:eb:
                    5a:38:62:99:98:2a:72:fa:91:a4:a6:6e:2e:2c:a8:
                    2b:bb:31:52:83:3c:22:db:35:da:34:10:79:26:a1:
                    cc:b3:5a:1b:a8:6c:b2:af:32:a0:82:c7:d1:90:f8:
                    84:e2:7b:ca:b4:3b:24:de:2f:24:8e:ab:44:cc:f9:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:02:83:39:D9:96:8B:75:4F:B9:EA:29:A0:35:BD:91:FF:56:9D:71
            X509v3 Authority Key Identifier:
                keyid:25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/323830313a31313a313030303a3a2f34382d3438203d3e20323634363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:58:9c:8a:6b:38:ff:4d:ec:dd:94:01:3c:73:ad:73:b7:d2:
         10:39:10:e4:b9:96:1d:07:20:de:20:0f:b1:75:cd:b1:87:93:
         5d:82:d8:bb:51:79:26:97:3d:34:9d:07:ee:4b:f2:06:a7:a6:
         a7:66:15:47:a4:e7:56:e9:f3:98:6f:50:36:1f:fa:56:4f:ee:
         4b:f5:11:cd:7e:16:1b:f6:89:f0:1f:e3:68:f2:7a:51:a1:5c:
         fb:3b:95:e6:da:71:85:b4:a5:3d:af:6e:fc:23:d8:e4:2f:20:
         b0:e4:bf:3b:f3:25:f6:23:38:ce:07:0d:09:a5:01:e0:62:1d:
         83:10:9e:e0:d8:9c:33:01:bc:83:66:6e:56:ac:52:28:4a:bc:
         aa:18:2a:43:cd:2b:d2:0f:75:ed:7c:5a:b0:0d:a5:6d:fa:2e:
         49:50:2e:28:a6:51:aa:27:2c:69:45:5f:bd:ed:30:14:3b:39:
         f5:b6:17:35:7a:da:ba:80:fd:b2:37:33:82:8d:b8:e6:5a:c3:
         34:2a:17:7a:50:ba:0a:74:74:8d:0d:0e:61:a1:36:de:d1:c9:
         13:01:74:84:fb:52:3a:bf:42:87:55:e0:44:79:e4:ed:46:b8:
         12:1e:2e:e5:32:63:e5:37:3d:69:4b:37:3a:8b:83:07:d1:be:
         04:80:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:39:56 2024 by rpki-client on console-ams.rpki-client.org