Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa
File:                     323830313a3161303a3a2f34322d3432203d3e203532343637.roa (raw, json)
Hash identifier:          zRAvWV2ki5eF1Kj5Q7Tn6OTTcyV9M5pQwqJ71K+ptUI=
Subject key identifier:   2E:D4:86:CA:B4:34:41:F6:DF:7A:9B:61:26:FC:F7:97:61:B3:E5:5D
Certificate issuer:       /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial:       0C323253D15B120C499A58834DAAE12E3565FFBC
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa
Signing time:             Tue 05 Mar 2024 17:55:32 +0000
ROA not before:           Tue 05 Mar 2024 17:50:32 +0000
ROA not after:            Tue 04 Mar 2025 17:55:32 +0000
asID:                     52467
IP address blocks:        2801:1a0::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:32:32:53:d1:5b:12:0c:49:9a:58:83:4d:aa:e1:2e:35:65:ff:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
        Validity
            Not Before: Mar  5 17:50:32 2024 GMT
            Not After : Mar  4 17:55:32 2025 GMT
        Subject: CN=2ED486CAB43441F6DF7A9B6126FCF79761B3E55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:7b:83:8d:77:48:f4:fe:38:81:19:87:10:
                    c3:81:19:32:70:2b:94:2b:19:80:53:a1:02:b4:5f:
                    dc:5f:f9:09:45:6e:f5:8c:c7:71:67:00:75:c1:1d:
                    4b:0f:85:a4:8e:d3:d9:a5:0a:a5:df:0d:75:be:14:
                    6c:d9:da:30:5d:b9:65:e3:9a:50:ce:65:54:7b:f2:
                    85:c6:5f:a5:b9:35:53:72:35:d5:ce:91:6e:73:33:
                    5f:40:cb:1c:33:54:37:41:94:d8:8b:e8:2d:28:6e:
                    de:b2:83:d8:ab:2f:78:4d:ad:f4:b6:90:08:67:79:
                    70:e8:56:21:7c:08:63:30:f1:cc:c8:1c:c8:a1:b0:
                    f7:d1:12:ee:5b:cf:6d:17:35:08:b8:5a:58:7c:21:
                    b8:d9:27:91:b6:f7:d0:f1:b9:de:aa:10:b3:1b:d1:
                    5c:1c:d9:30:2c:40:61:c9:13:1b:b0:55:64:0d:3e:
                    50:f2:69:87:f3:aa:04:6a:8c:df:55:75:63:b4:71:
                    6c:ac:9b:54:a6:f4:65:b6:a5:ea:e1:47:c1:32:b8:
                    e4:00:ee:00:b5:6a:a2:a4:f1:17:22:28:df:e0:bb:
                    d7:97:d1:1b:c9:7d:64:a6:46:5e:11:5d:27:a1:92:
                    10:ec:13:90:10:cb:cf:9d:c6:de:7a:e1:0f:fc:f4:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:86:CA:B4:34:41:F6:DF:7A:9B:61:26:FC:F7:97:61:B3:E5:5D
            X509v3 Authority Key Identifier:
                keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a0::/42

    Signature Algorithm: sha256WithRSAEncryption
         8e:8b:97:e8:86:4d:00:8e:9a:e8:c3:d0:ce:e1:0c:06:09:b8:
         c0:3a:0a:75:51:ae:7f:25:ee:28:84:80:84:65:a8:30:d4:f1:
         7b:72:03:c5:2b:d6:c5:2a:cd:41:36:58:84:41:29:b5:e9:22:
         1b:a5:35:bd:c6:a7:02:7c:02:3b:da:80:4b:8f:21:d8:14:c2:
         15:0d:6b:de:10:32:5d:dc:93:97:3b:f9:38:93:33:24:6f:0d:
         29:3c:8c:b0:d4:59:e7:48:25:a5:db:e7:9c:c8:dd:b7:e7:91:
         fc:83:ad:c7:8b:87:f1:7b:97:35:df:05:d9:7b:28:47:aa:69:
         98:70:a6:34:83:45:a4:78:e0:7a:f0:84:92:ce:8b:a2:6e:25:
         9d:05:56:fd:b4:c6:b7:6e:6e:2f:16:86:6c:75:93:51:4b:9b:
         df:2b:f7:ac:0e:69:95:d5:45:a6:93:10:c9:69:45:8a:09:a0:
         23:c5:6f:00:e4:9c:e6:64:57:4d:12:8e:8a:e1:68:10:e6:00:
         d2:75:ea:0b:4b:24:19:9c:79:16:f5:e4:ba:f6:4d:32:3e:d3:
         96:d6:4f:95:95:84:b6:37:07:a3:f6:72:0f:6b:02:fc:a4:97:
         b8:78:79:89:9d:eb:7b:0f:63:f7:15:b0:d4:38:d2:a2:18:65:
         1d:83:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:04 2024 by rpki-client on console-fra.rpki-client.org