Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/275131D75BC9A376FBF268E772B63AFE59E5840462274299D9B8EC0BDF4E2423/0/323830313a3135363a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a3135363a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          BeCv8kE8c97YkQLz1OJrSxwpCGhiyKA6A1z8puyU+Zs=
Subject key identifier:   06:BF:F4:DE:F6:DA:DB:54:DF:99:3F:F6:11:09:B9:30:11:9A:A1:DC
Certificate issuer:       /CN=5A22E8DFEB4EE951814038D09288B96F1FD446EB
Certificate serial:       0CE2DBD9A17376077A765FF5886FBB67BB23E062
Authority key identifier: 5A:22:E8:DF:EB:4E:E9:51:81:40:38:D0:92:88:B9:6F:1F:D4:46:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A22E8DFEB4EE951814038D09288B96F1FD446EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/275131D75BC9A376FBF268E772B63AFE59E5840462274299D9B8EC0BDF4E2423/0/323830313a3135363a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:03:31 +0000
ROA not before:           Tue 05 Mar 2024 17:58:31 +0000
ROA not after:            Tue 04 Mar 2025 18:03:31 +0000
asID:                     13489
IP address blocks:        2801:156::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/275131D75BC9A376FBF268E772B63AFE59E5840462274299D9B8EC0BDF4E2423/0/5A22E8DFEB4EE951814038D09288B96F1FD446EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/275131D75BC9A376FBF268E772B63AFE59E5840462274299D9B8EC0BDF4E2423/0/5A22E8DFEB4EE951814038D09288B96F1FD446EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A22E8DFEB4EE951814038D09288B96F1FD446EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e2:db:d9:a1:73:76:07:7a:76:5f:f5:88:6f:bb:67:bb:23:e0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A22E8DFEB4EE951814038D09288B96F1FD446EB
        Validity
            Not Before: Mar  5 17:58:31 2024 GMT
            Not After : Mar  4 18:03:31 2025 GMT
        Subject: CN=06BFF4DEF6DADB54DF993FF61109B930119AA1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:7b:5f:40:07:4e:98:95:47:28:95:ec:33:
                    70:e7:75:bf:77:80:3d:a5:30:79:a3:0a:58:86:bb:
                    6f:de:5e:dc:a7:04:90:3e:08:db:8d:af:e3:05:72:
                    64:bb:2b:11:15:90:c9:29:32:3f:46:e4:9a:0c:e4:
                    a5:1d:f9:a2:db:7e:38:81:30:d0:87:11:db:2f:e4:
                    61:2b:a5:7b:b3:5a:08:35:5e:b4:1e:54:9b:8e:69:
                    48:f5:47:43:2a:f1:27:f0:a0:66:f9:df:58:8f:62:
                    73:92:70:ec:a2:03:ec:86:f0:8d:2c:13:28:b7:6f:
                    13:52:f6:81:4d:a4:d1:9c:89:49:8f:77:8d:46:11:
                    15:01:b1:23:02:00:aa:11:23:88:31:2c:7b:95:0b:
                    bb:77:6c:5d:53:dd:34:b7:90:80:57:8e:5b:35:2c:
                    bd:ce:74:78:71:7c:d2:5e:87:e3:68:34:5f:cc:21:
                    81:92:6d:b9:3e:63:30:a2:cd:91:3a:45:14:7d:2d:
                    80:48:19:c9:4f:04:6c:5d:87:39:85:af:77:df:74:
                    e3:2b:67:0e:1c:cd:73:d6:58:99:ea:98:5b:85:a4:
                    e5:9c:47:cd:21:82:28:ad:64:d1:0e:ce:82:f4:e7:
                    9a:36:f4:46:02:57:4e:4d:f6:f6:fe:fc:a0:8c:70:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BF:F4:DE:F6:DA:DB:54:DF:99:3F:F6:11:09:B9:30:11:9A:A1:DC
            X509v3 Authority Key Identifier:
                keyid:5A:22:E8:DF:EB:4E:E9:51:81:40:38:D0:92:88:B9:6F:1F:D4:46:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/275131D75BC9A376FBF268E772B63AFE59E5840462274299D9B8EC0BDF4E2423/0/5A22E8DFEB4EE951814038D09288B96F1FD446EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A22E8DFEB4EE951814038D09288B96F1FD446EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/275131D75BC9A376FBF268E772B63AFE59E5840462274299D9B8EC0BDF4E2423/0/323830313a3135363a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:156::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:42:eb:c2:e9:c8:20:01:af:cb:b9:29:55:e9:ec:5e:95:93:
         cb:9e:3e:6b:08:81:a9:35:64:9e:d0:08:cb:48:71:1c:be:d8:
         be:2e:0d:46:92:5d:38:5e:bb:9f:02:41:37:78:7c:63:1f:35:
         71:c0:2c:f4:c8:4f:39:bc:78:f1:5a:bf:ff:3c:82:45:78:07:
         05:ed:68:49:7e:0b:2a:4b:26:fe:5c:25:7e:f6:69:8f:d0:2d:
         05:4d:2d:d2:73:e6:7c:05:58:4c:b5:0e:a6:74:39:70:d1:1f:
         08:46:f0:33:04:95:fd:8a:b1:f8:6f:c3:7d:92:29:53:d5:17:
         28:1f:7c:e3:cd:08:af:5a:b2:c2:90:e6:dd:d0:03:95:e6:d4:
         b1:37:84:7b:57:42:ae:dc:98:f0:9d:4e:78:1d:cf:cd:10:bb:
         8e:11:ae:4f:5a:13:e4:32:cc:80:53:54:7f:64:c9:8b:bc:7f:
         01:e5:d8:60:b6:4e:83:ae:0b:f8:72:d0:62:de:c9:a2:4f:68:
         12:7a:27:04:ab:39:83:1a:38:3b:14:67:f2:81:90:48:ec:b6:
         ac:7a:cd:e7:3b:11:b1:b4:0b:7f:5c:76:9b:bb:3e:01:bf:6a:
         b9:65:c4:3b:22:ba:a9:ec:f5:68:2b:64:26:7f:c3:a1:74:7a:
         ba:6e:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org