Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/323830303a3634303a3a2f33322d3438203d3e20323632313439.roa
File:                     323830303a3634303a3a2f33322d3438203d3e20323632313439.roa (raw, json)
Hash identifier:          EcpgTo+FLQqkvXy3EsFzGp6kr+Yioy3G88e3QKedCls=
Subject key identifier:   6A:0A:77:07:75:9D:68:E3:3C:75:8C:EC:6A:00:16:77:61:07:AA:C8
Certificate issuer:       /CN=CAD42EC49F09199180FE63CB2419E2592F8E606F
Certificate serial:       240F39A2F3C7BC7CEC6B5E981E352BEB82D3374B
Authority key identifier: CA:D4:2E:C4:9F:09:19:91:80:FE:63:CB:24:19:E2:59:2F:8E:60:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/323830303a3634303a3a2f33322d3438203d3e20323632313439.roa
Signing time:             Tue 05 Mar 2024 18:09:10 +0000
ROA not before:           Tue 05 Mar 2024 18:04:10 +0000
ROA not after:            Tue 04 Mar 2025 18:09:10 +0000
asID:                     262149
IP address blocks:        2800:640::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0f:39:a2:f3:c7:bc:7c:ec:6b:5e:98:1e:35:2b:eb:82:d3:37:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD42EC49F09199180FE63CB2419E2592F8E606F
        Validity
            Not Before: Mar  5 18:04:10 2024 GMT
            Not After : Mar  4 18:09:10 2025 GMT
        Subject: CN=6A0A7707759D68E33C758CEC6A0016776107AAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:d5:82:c9:c0:4a:bf:bf:3f:62:7a:0d:57:
                    a5:ee:03:bf:eb:62:27:b6:ba:5b:72:d7:9f:03:ce:
                    09:4b:db:f0:f4:65:cb:dc:95:e7:44:fc:86:c8:32:
                    bc:b8:c4:01:23:94:5e:ee:a6:2f:74:9a:11:70:f3:
                    a7:c6:1d:68:77:f6:08:9b:1a:1d:98:79:a1:e4:04:
                    d9:57:11:22:69:1c:7d:36:b4:ff:15:55:8b:ca:36:
                    47:54:9c:67:2c:74:81:a1:4b:c9:2d:bc:a2:05:a4:
                    f8:5b:40:84:b3:d7:8b:5a:06:e1:e8:ae:d5:28:a7:
                    2f:f4:04:d3:77:0a:e4:a3:50:ca:4d:9f:2c:c6:88:
                    12:73:72:ae:41:4f:37:c2:02:5b:b7:de:d4:05:49:
                    66:3a:3f:92:9a:63:1e:a9:bc:bd:b0:75:21:29:aa:
                    ee:d4:64:35:3f:78:47:50:ad:69:e0:1e:36:2a:dd:
                    96:cc:3b:f3:14:98:98:32:57:dd:46:81:e8:11:09:
                    d0:e4:28:d4:3e:5d:ea:d4:18:ff:dc:04:f3:04:1e:
                    da:d1:03:c8:5e:1e:a9:f9:0a:f3:b2:87:d0:1b:48:
                    77:a4:8d:5f:e7:16:51:78:be:a4:05:a1:75:5b:cf:
                    a6:bb:34:b4:c6:7a:b4:ec:10:a7:97:a7:5a:70:70:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:77:07:75:9D:68:E3:3C:75:8C:EC:6A:00:16:77:61:07:AA:C8
            X509v3 Authority Key Identifier:
                keyid:CA:D4:2E:C4:9F:09:19:91:80:FE:63:CB:24:19:E2:59:2F:8E:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/323830303a3634303a3a2f33322d3438203d3e20323632313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:640::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:50:b4:63:a3:76:9b:f8:80:b0:73:8f:a9:31:9e:27:d9:5f:
         a6:73:c5:b4:15:36:a1:0e:c5:29:04:6d:77:04:31:12:53:ca:
         c6:2f:9d:e8:69:f7:d6:f3:09:e6:9f:89:82:12:66:5f:bd:e2:
         8c:89:3d:99:43:61:fc:bc:1f:5c:27:46:6c:45:90:5a:7c:cb:
         46:a1:41:de:2c:d4:7d:df:46:5c:fd:33:5c:03:6c:9c:9f:d6:
         b3:69:05:85:ba:a1:77:46:41:ab:27:e0:97:b6:a8:7e:61:b1:
         54:cf:0f:b6:14:96:c6:70:21:a5:bc:1b:d8:fe:ce:28:3e:bd:
         40:7f:22:08:da:d4:59:a7:5c:26:67:bf:f0:62:f1:1f:dd:5e:
         0d:52:d0:9b:24:bd:8d:4b:2e:4e:75:46:94:66:b4:0c:ea:11:
         fd:29:04:4f:d0:a4:89:4a:f4:b9:57:bf:9b:b0:4c:9f:4d:82:
         2b:5f:d5:52:5c:7d:c2:cf:ae:52:3e:79:94:84:4d:2f:e9:c7:
         78:e5:47:63:bc:bd:fa:21:3a:48:a2:c7:a3:6b:e3:4c:17:77:
         58:4c:f3:ae:ca:99:a5:c4:84:c6:a1:0b:28:aa:cf:15:8d:3a:
         4c:23:e9:0b:1a:fd:60:5e:5d:99:8e:6f:e8:c9:88:12:50:1a:
         6b:5d:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org