Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          ZukWfkOiJBrjj/a7LFNS0Jq32EyYlJOsfygz9HBiatI=
Subject key identifier:   05:56:49:F2:5E:66:03:1D:BD:B5:0A:C1:DB:BA:39:C5:9E:5F:CD:31
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       48D199778CF63F59133CF654875B68F1C0D716F0
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:08 +0000
ROA not before:           Tue 05 Mar 2024 18:11:08 +0000
ROA not after:            Tue 04 Mar 2025 18:16:08 +0000
asID:                     262191
IP address blocks:        2800:b70:15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d1:99:77:8c:f6:3f:59:13:3c:f6:54:87:5b:68:f1:c0:d7:16:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:08 2024 GMT
            Not After : Mar  4 18:16:08 2025 GMT
        Subject: CN=055649F25E66031DBDB50AC1DBBA39C59E5FCD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:a2:a1:10:81:5d:ae:ad:59:4f:9a:ba:4a:
                    43:9e:ac:76:e4:83:3c:07:13:b7:b9:f9:3f:af:d0:
                    98:88:75:97:f9:53:2e:28:fb:37:69:28:a9:35:94:
                    71:e4:df:4e:f9:ee:7b:59:3f:ed:95:59:2e:46:fe:
                    e6:db:05:7c:64:60:99:40:c8:07:0f:af:b0:72:a9:
                    88:71:ed:ce:81:e0:8e:fd:8b:84:2d:9b:4c:e0:59:
                    bf:aa:55:9a:7f:91:3d:6b:88:da:a2:4c:5d:d9:16:
                    df:b0:2e:16:4e:53:79:13:9e:cc:55:96:40:02:ba:
                    db:c2:20:14:02:58:d0:ce:1c:16:af:0b:84:4a:fd:
                    33:6d:b2:21:cf:fa:9e:91:63:32:ad:d9:27:bc:83:
                    51:74:82:7e:35:c8:54:a4:94:d0:eb:23:37:f7:09:
                    30:72:29:83:22:3f:e1:ee:2a:2d:48:8b:c4:01:24:
                    ca:16:6d:a9:01:7b:ac:22:aa:ca:28:5d:d4:57:41:
                    9c:4f:13:f1:9e:c1:59:f7:b7:43:71:05:73:7a:89:
                    82:c8:09:09:53:02:f7:cf:66:24:bd:be:f5:73:f4:
                    1f:11:16:a6:99:d6:a5:f8:45:e8:2f:8f:80:9d:e4:
                    b5:2c:43:85:2a:05:04:29:46:f6:1d:53:7c:1f:12:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:56:49:F2:5E:66:03:1D:BD:B5:0A:C1:DB:BA:39:C5:9E:5F:CD:31
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a31353a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:75:e6:1d:d1:a8:53:eb:01:a1:db:bd:78:52:04:5f:92:d9:
         d7:64:7e:52:10:25:4f:5d:ca:63:f2:11:1c:02:8b:aa:54:c0:
         9c:2a:e4:4c:9e:7b:10:e2:b2:38:e1:c6:12:81:27:c2:41:e0:
         17:e9:9a:1f:2d:2e:ad:2f:65:9e:68:de:ec:fa:51:a6:04:16:
         4a:f9:bd:95:e3:81:22:5e:85:57:ff:fd:0b:49:42:2d:15:e6:
         cf:c2:29:8c:7d:a5:9b:64:5b:a2:9e:2c:e8:d4:19:d0:ba:86:
         f5:de:70:09:58:49:25:92:94:b3:45:c6:ef:48:ae:4a:ca:ea:
         a7:99:03:34:52:24:f5:90:d9:65:d2:56:01:26:0b:8a:6d:08:
         e7:d0:23:3f:cd:2e:4c:a4:b1:66:6e:50:ee:d4:3e:43:64:40:
         28:99:4e:87:37:31:2b:62:90:18:3b:43:b1:a1:ac:e3:05:1b:
         b6:99:fb:72:12:46:43:cf:57:6a:8f:c7:1b:9b:51:d3:b9:54:
         51:83:b8:34:de:14:d3:50:de:35:b3:58:a3:2a:3c:49:5a:9e:
         8f:b5:43:ef:ac:95:ff:81:82:18:21:52:a3:c3:d7:44:13:9d:
         40:d8:82:77:c3:2e:6c:7a:f2:ed:9b:81:ea:9f:07:38:8d:82:
         c8:e2:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org