Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3634203d3e203631353533.roa
File:                     323830313a3136383a313a3a2f34382d3634203d3e203631353533.roa (raw, json)
Hash identifier:          5VmIWb2mF0yzIoF+KGvqmJb1oo/3mqMjsSWodtHN8z0=
Subject key identifier:   8F:58:4E:AB:F7:A8:94:D3:B2:54:B3:F4:BD:A8:00:82:32:E5:00:FF
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       16C60EB40999407EBC6CF64104839537519413EF
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3634203d3e203631353533.roa
Signing time:             Tue 14 May 2024 13:05:00 +0000
ROA not before:           Tue 14 May 2024 13:00:00 +0000
ROA not after:            Tue 13 May 2025 13:05:00 +0000
asID:                     61553
IP address blocks:        2801:168:1::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c6:0e:b4:09:99:40:7e:bc:6c:f6:41:04:83:95:37:51:94:13:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: May 14 13:00:00 2024 GMT
            Not After : May 13 13:05:00 2025 GMT
        Subject: CN=8F584EABF7A894D3B254B3F4BDA8008232E500FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2a:0f:cb:5a:95:1b:81:14:76:bb:fe:f0:33:
                    76:3a:22:75:48:9e:8c:d1:e6:4e:6d:89:6d:67:37:
                    ec:f2:60:c2:4a:12:50:0f:bd:75:ec:a2:f1:f7:0c:
                    8e:7c:1b:f6:13:9e:72:99:d0:e5:cf:c2:1b:90:80:
                    ab:4f:7a:4c:87:96:43:83:c7:b6:ce:85:de:46:26:
                    64:f5:80:43:93:e7:8c:c8:20:7b:6d:b9:56:42:e0:
                    1c:7c:94:dd:e6:4e:cc:62:bd:44:ac:d2:bd:94:18:
                    2c:6c:5d:16:05:cd:e7:63:51:9d:f9:16:f7:89:5c:
                    1c:2a:ae:77:e9:e3:7c:6f:d3:a8:f4:68:98:56:c4:
                    92:bc:e2:b8:c4:86:0a:b5:a3:f3:fb:6a:9d:61:5d:
                    21:00:7c:bb:27:21:5d:03:96:61:ab:70:5d:28:d5:
                    e0:89:62:ed:19:d9:ff:54:10:34:31:0d:16:e9:4a:
                    e4:12:d5:30:77:72:a7:db:d4:27:56:18:f6:5d:b2:
                    c1:12:ab:5c:74:57:02:ef:e5:ca:4f:aa:ff:8c:c5:
                    0e:54:93:25:8c:54:89:77:6b:04:3b:0c:bb:b3:c3:
                    df:c6:5a:7f:0d:a2:6f:28:75:ac:62:4b:5f:78:3f:
                    6a:21:4f:6e:5e:e8:27:78:8c:bd:75:b5:f2:fa:22:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:58:4E:AB:F7:A8:94:D3:B2:54:B3:F4:BD:A8:00:82:32:E5:00:FF
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a313a3a2f34382d3634203d3e203631353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:168:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:4f:c5:2a:91:bc:ac:1a:d2:44:65:c5:69:a6:4c:95:ca:33:
         10:c3:70:c8:76:4e:70:e6:eb:a4:71:6a:9d:d3:a4:4d:53:b4:
         61:67:f7:a7:57:75:e9:fe:64:33:87:ca:30:fc:39:f0:38:18:
         6f:7f:88:15:b3:aa:24:2b:72:b4:af:1a:f3:f5:5a:f3:8c:bd:
         09:4b:b5:09:64:61:03:e0:79:8d:fe:d1:c3:60:8b:c6:80:4a:
         b0:0a:1c:6f:c9:d3:95:1c:75:75:90:de:a9:30:6c:cb:3e:e8:
         4d:29:da:c4:30:1a:1a:78:15:b3:01:e8:aa:61:9d:0b:40:cb:
         e7:f9:b7:d2:42:c1:af:c6:df:92:6d:c3:ae:be:16:03:9e:78:
         20:ba:0f:fc:d6:a5:a2:4c:26:4d:eb:9b:81:dd:86:bc:2c:b0:
         c6:02:09:4b:c3:81:8a:a9:18:94:dc:fd:68:65:6b:4c:4b:1d:
         b1:14:ae:e2:0d:b3:e9:03:31:75:ef:cf:e9:57:e8:7c:5e:da:
         a8:1d:70:5c:c5:b9:35:de:af:df:db:97:60:f4:87:93:c3:97:
         5f:04:2e:b8:1a:76:36:4f:f3:ff:23:d6:37:4f:67:ef:6f:af:
         f8:d9:8f:e0:5e:ce:34:94:cb:cc:3d:e8:1c:0c:43:85:58:3d:
         23:80:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org