Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632313937.roa
File:                     323830303a3836303a3a2f33322d3634203d3e20323632313937.roa (raw, json)
Hash identifier:          SqHUAd35rnqDsA/et9ibP8sLorFXZ+RiLx8dsOpEVqg=
Subject key identifier:   0C:32:C2:B9:39:E2:5E:27:65:01:CE:2D:B6:6C:A8:FC:F8:33:EC:EC
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       1D74C09B6428C35F405068391960846D646D4909
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:58 +0000
ROA not before:           Tue 05 Mar 2024 17:54:58 +0000
ROA not after:            Tue 04 Mar 2025 17:59:58 +0000
asID:                     262197
IP address blocks:        2800:860::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:74:c0:9b:64:28:c3:5f:40:50:68:39:19:60:84:6d:64:6d:49:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:58 2024 GMT
            Not After : Mar  4 17:59:58 2025 GMT
        Subject: CN=0C32C2B939E25E276501CE2DB66CA8FCF833ECEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:90:b0:a7:62:47:7a:0a:ac:8c:24:3a:6e:
                    f5:26:1c:59:d3:50:5b:b8:07:a4:c5:e6:e7:a7:19:
                    41:20:c0:51:00:3e:46:02:8f:2e:08:63:6a:1a:d3:
                    8c:98:fe:eb:93:76:98:a1:de:99:cf:e8:20:33:a3:
                    8a:ad:95:c5:7c:0d:58:c0:cc:f8:e0:a0:82:51:80:
                    a6:68:da:f6:f4:8d:b6:6c:3a:cd:d2:31:cf:9b:ea:
                    dc:69:1e:aa:ba:89:ed:f1:8e:e3:65:05:6c:4c:df:
                    88:2e:1b:25:d9:97:ef:b8:8c:d7:15:01:3b:ad:dd:
                    fa:4f:fc:5e:ab:53:46:a2:a7:a5:d4:b3:99:9c:30:
                    6e:6d:18:00:6a:c2:2d:fc:69:be:06:e3:15:ad:5a:
                    6d:cc:b6:b7:33:e6:dd:0c:e1:e9:76:67:a2:3b:3f:
                    3a:87:75:ee:b8:0c:9e:94:86:42:55:3d:f0:38:98:
                    b8:16:7e:db:a1:0b:c8:42:6a:6c:e8:1d:ac:e5:4c:
                    7c:e5:24:1c:c3:05:8f:80:47:d7:7e:0f:9d:30:f9:
                    01:bc:bb:d7:60:8d:b9:c8:d7:69:ef:cd:b3:94:c6:
                    99:36:3f:9b:70:7f:60:e3:53:19:ce:b0:42:96:14:
                    e3:3f:cf:fb:e3:3c:73:18:29:84:08:bf:03:64:85:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:32:C2:B9:39:E2:5E:27:65:01:CE:2D:B6:6C:A8:FC:F8:33:EC:EC
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:19:14:c7:4c:07:ed:2f:7a:b3:13:b0:8f:13:1e:b3:31:
         18:7f:75:06:96:84:d0:34:15:93:fc:ad:2f:56:88:61:64:14:
         2a:8a:c7:96:33:4a:b7:36:23:74:9c:75:ee:46:d7:34:53:75:
         5c:e7:c6:52:c0:07:03:0b:64:8f:f2:75:c0:ec:48:eb:e5:66:
         76:f5:70:81:b6:89:a5:30:7e:e4:73:34:cd:f4:1d:20:34:0e:
         9f:37:2e:10:0b:c8:b4:61:cb:75:42:02:bb:9e:f8:7e:b7:70:
         51:08:74:3b:f0:18:22:2d:bc:db:b2:9f:56:61:a8:19:0f:17:
         ac:0f:24:53:5e:19:59:7a:37:c0:4e:7f:ce:c9:52:bc:55:1a:
         5f:ef:66:46:80:42:69:e5:e2:e5:7e:9b:96:26:ab:52:ef:7f:
         8c:47:ff:32:c7:60:30:91:25:49:5c:06:e2:bb:c9:a6:4a:ca:
         6a:e2:1c:49:6c:87:58:68:71:9a:29:bf:5a:99:5c:c3:71:37:
         c9:56:bc:c1:a6:ea:13:d2:6a:eb:7b:f2:44:ab:7d:81:fd:74:
         e7:98:ff:5a:69:6d:52:f4:39:3e:59:af:2e:70:c9:15:7d:5e:
         87:bb:ec:dc:ed:d3:32:e1:71:f6:df:d8:9b:38:d8:41:ac:d4:
         89:e6:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org