Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/323830313a31343a613030303a3a2f34372d3438203d3e203631343535.roa
File:                     323830313a31343a613030303a3a2f34372d3438203d3e203631343535.roa (raw, json)
Hash identifier:          2JX8AQG8VLhWXAiVYBqnixCWRtqajm6bLGA2J81t0Eo=
Subject key identifier:   5D:AE:CA:C3:A3:41:1B:55:61:E9:D3:66:B7:63:15:A8:09:5D:F5:6C
Certificate issuer:       /CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
Certificate serial:       4DD3E2941EBDF38B4C127E282840B71088BA84BE
Authority key identifier: 1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/323830313a31343a613030303a3a2f34372d3438203d3e203631343535.roa
Signing time:             Tue 05 Mar 2024 17:49:44 +0000
ROA not before:           Tue 05 Mar 2024 17:44:44 +0000
ROA not after:            Tue 04 Mar 2025 17:49:44 +0000
asID:                     61455
IP address blocks:        2801:14:a000::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d3:e2:94:1e:bd:f3:8b:4c:12:7e:28:28:40:b7:10:88:ba:84:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
        Validity
            Not Before: Mar  5 17:44:44 2024 GMT
            Not After : Mar  4 17:49:44 2025 GMT
        Subject: CN=5DAECAC3A3411B5561E9D366B76315A8095DF56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:53:29:fa:05:b3:2f:29:08:a9:23:19:c5:
                    67:6c:c6:5e:2a:ff:ae:2c:1b:3a:ce:6f:2f:3c:3f:
                    32:67:17:ab:f6:74:f9:77:21:61:5b:fc:c8:23:50:
                    b7:19:1c:4b:02:14:99:fa:18:62:a5:23:46:b4:98:
                    95:c7:81:41:f8:5a:6c:50:9f:03:db:ec:5e:f0:6a:
                    f0:cd:dc:c7:56:89:e3:a2:f4:94:5a:55:50:b5:7f:
                    d4:eb:e7:7c:cb:4e:c1:b9:90:90:0d:35:fa:2f:38:
                    70:4b:38:b1:74:23:a7:62:aa:7c:69:90:98:02:30:
                    8d:78:e7:33:1e:a8:0b:82:44:23:e9:07:94:d5:8d:
                    ec:72:c6:3c:fb:c9:96:21:3b:80:01:9a:85:cb:be:
                    45:e5:33:0e:d0:7d:74:62:b3:3f:a8:ba:bb:c2:18:
                    a9:e9:ee:f3:64:67:7a:26:67:41:f0:bf:2c:3e:ba:
                    a0:34:36:15:ea:a2:1d:82:ba:6f:e4:92:41:7a:51:
                    a5:fa:8a:98:2e:6e:2f:eb:28:e4:c6:73:85:fa:84:
                    92:a1:32:3d:ab:dc:80:3b:d0:e3:15:39:22:c6:fb:
                    fa:9d:16:cb:ab:f1:a0:f9:8f:a1:ab:23:a9:65:22:
                    a5:e6:a4:85:ac:d4:a8:af:09:b3:62:d2:cb:ee:39:
                    fd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AE:CA:C3:A3:41:1B:55:61:E9:D3:66:B7:63:15:A8:09:5D:F5:6C
            X509v3 Authority Key Identifier:
                keyid:1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/323830313a31343a613030303a3a2f34372d3438203d3e203631343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:a000::/47

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:71:34:2a:11:3b:91:3e:a0:cf:4d:01:45:c1:f0:b5:29:
         94:fa:ec:05:c1:06:d8:3b:ae:88:98:a0:f3:ec:3a:a2:0d:08:
         a8:f6:8f:91:49:0f:c0:cc:6b:f6:f4:05:42:7f:8f:51:0a:fa:
         23:ed:b2:63:30:67:00:19:f3:c3:41:9d:97:26:17:15:a9:18:
         60:03:83:67:a2:9b:86:9b:3a:25:73:05:ca:4d:44:fc:62:2c:
         b7:7b:74:ff:54:cd:5c:f9:65:08:70:61:7f:8c:44:ae:cf:31:
         7d:f5:aa:44:8f:3d:ea:8e:f1:6c:41:40:73:91:73:11:71:55:
         63:6a:32:05:c6:74:8c:20:b7:7f:49:e5:c1:fd:02:6b:d6:c3:
         ba:71:64:7a:7d:da:8c:c9:56:d7:23:35:b9:4b:f1:d6:28:ff:
         1b:f4:bc:89:a2:b3:3b:2e:ec:fc:f1:8d:cf:d4:21:71:0c:43:
         47:83:89:06:c6:f0:7c:5d:2b:d5:b1:b0:86:75:62:95:70:b9:
         52:16:47:6c:e9:b1:d0:f0:03:07:7c:e8:85:85:28:0a:1a:ad:
         49:e8:8b:9d:23:c6:ea:e8:16:20:3f:d3:36:1f:8a:2a:b4:99:
         13:47:d9:ec:d8:18:20:82:9d:d3:8b:59:39:32:c4:43:83:89:
         53:8c:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:36 2024 by rpki-client on console-ams.rpki-client.org