Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa
File:                     323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa (raw, json)
Hash identifier:          1/d1QAUkmCIAuJqp7pK9pCIf/BGkUh8/Ffly9EM8VFg=
Subject key identifier:   02:6D:D3:0C:49:A6:74:B4:B0:D9:2C:99:51:CD:6C:E8:51:66:7B:E2
Certificate issuer:       /CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9
Certificate serial:       1F8621629D66D5CA8A45FFDC2CB1DC212FD003CD
Authority key identifier: 5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa
Signing time:             Tue 05 Mar 2024 17:45:37 +0000
ROA not before:           Tue 05 Mar 2024 17:40:37 +0000
ROA not after:            Tue 04 Mar 2025 17:45:37 +0000
asID:                     262174
IP address blocks:        2801:0:160::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:86:21:62:9d:66:d5:ca:8a:45:ff:dc:2c:b1:dc:21:2f:d0:03:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9
        Validity
            Not Before: Mar  5 17:40:37 2024 GMT
            Not After : Mar  4 17:45:37 2025 GMT
        Subject: CN=026DD30C49A674B4B0D92C9951CD6CE851667BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:ee:bc:67:84:4f:e4:9a:66:74:15:ec:d7:
                    fd:4b:6a:0b:9c:0f:99:ce:20:e1:12:4f:16:cd:4a:
                    66:5f:e1:c5:97:df:c8:99:6b:6e:10:bc:23:93:26:
                    b3:87:7f:b7:4c:f3:52:47:53:df:5d:74:f0:23:79:
                    12:e1:47:77:e2:57:27:fe:44:6c:cd:8c:32:87:bc:
                    9d:b1:81:e4:77:c4:c5:88:2e:b7:d2:53:e1:13:b3:
                    85:ee:43:df:1e:a9:2f:a0:9e:01:e7:01:b9:c3:13:
                    a2:9a:46:47:0d:c9:38:23:7c:ea:2d:f8:40:16:5c:
                    2e:ac:43:20:98:1e:84:e6:12:fb:ad:e2:e6:d6:e0:
                    8b:0a:ea:a3:38:eb:ee:79:d7:a2:bd:f1:e2:b5:31:
                    e9:d4:5a:7f:b0:dd:e5:a5:02:a2:08:c5:b5:c5:4a:
                    64:5c:b5:40:4b:d7:af:ac:ae:87:8f:8a:16:7f:81:
                    1f:91:8a:db:56:b6:b5:08:72:59:31:8e:ea:78:b3:
                    9e:3b:c4:00:6a:d4:08:61:40:fa:5d:db:c6:0f:13:
                    20:78:ec:25:da:0c:7c:ad:2f:02:9e:85:c8:d1:1b:
                    b1:30:5d:14:82:df:fd:67:35:98:73:ee:2e:b1:be:
                    92:67:3d:cc:b5:58:f7:91:bc:f6:54:8d:53:8d:c2:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6D:D3:0C:49:A6:74:B4:B0:D9:2C:99:51:CD:6C:E8:51:66:7B:E2
            X509v3 Authority Key Identifier:
                keyid:5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:24:73:16:21:cc:0f:43:ac:2c:f1:3d:45:80:52:a1:2e:
         a8:6a:07:d7:aa:ba:f3:7d:a9:44:1c:c9:b2:95:3e:a2:12:1f:
         03:c4:8d:67:7c:4b:ae:e0:4b:f7:e4:68:1d:a9:e4:0c:5f:b4:
         3c:bd:b7:96:a3:f6:fe:5d:79:80:6e:37:86:4e:f9:d9:73:59:
         c9:8e:58:01:e9:1e:10:56:03:cc:a3:97:d8:3c:98:e4:9c:a4:
         5a:80:9a:77:fa:7c:9f:55:4d:ef:79:4c:75:48:00:71:d6:13:
         82:8e:e0:01:51:cb:3e:63:6e:10:57:a4:7d:e8:51:91:18:58:
         08:d8:33:96:21:72:8a:a7:52:96:06:8c:16:09:90:5a:b4:8c:
         15:ce:0a:d4:d9:ae:75:e0:6c:ec:e5:38:3c:32:c6:98:95:4a:
         b5:78:82:ec:37:0f:63:0e:0b:ad:9d:47:e5:29:2e:34:da:76:
         03:c3:61:b4:d7:5b:e2:ab:79:81:61:11:9c:3e:b2:da:62:56:
         14:9c:e3:42:03:5c:fa:44:8c:88:ed:b3:03:4e:6f:6d:38:de:
         5c:28:cc:c6:87:8d:3c:6a:14:6c:bf:99:e5:37:d0:27:91:c0:
         e9:bc:14:17:c9:c3:0e:6c:4a:f4:84:5c:dd:89:63:63:3f:e3:
         92:40:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org