Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa
File:                     323830313a3a2f34382d3438203d3e203532323234.roa (raw, json)
Hash identifier:          OvZjNFEhCndM83M0iGiiv0E7uHmplNsdUs1/pnXTzCo=
Subject key identifier:   AE:D8:70:15:1B:13:0B:43:70:D8:F8:27:CF:4A:AE:AF:D9:E9:CD:4D
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       76408C362995C04D68DD91135ED6F8B0B17ECDFE
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa
Signing time:             Tue 05 Mar 2024 17:39:57 +0000
ROA not before:           Tue 05 Mar 2024 17:34:57 +0000
ROA not after:            Tue 04 Mar 2025 17:39:57 +0000
asID:                     52224
IP address blocks:        2801::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:40:8c:36:29:95:c0:4d:68:dd:91:13:5e:d6:f8:b0:b1:7e:cd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:57 2024 GMT
            Not After : Mar  4 17:39:57 2025 GMT
        Subject: CN=AED870151B130B4370D8F827CF4AAEAFD9E9CD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:a7:48:44:f6:f5:13:c4:aa:bc:52:4d:98:
                    68:82:e3:d5:fa:6e:8c:47:9f:75:2d:85:54:79:60:
                    f4:b1:13:19:7e:8f:01:87:5e:28:50:f8:39:17:4e:
                    aa:89:9b:bf:68:f7:00:2d:c2:77:5d:90:87:3a:fd:
                    f9:c1:10:40:77:d5:b9:aa:d3:c2:cd:b8:7f:54:68:
                    5f:d7:95:f7:19:3c:8f:5f:94:18:b5:a2:45:c8:d6:
                    82:84:b7:ed:10:38:79:8c:ad:1e:e6:d8:eb:e3:0a:
                    1e:52:21:32:fe:50:30:76:f6:89:73:fe:21:fa:a3:
                    c7:f7:50:1e:76:97:67:ee:f4:69:25:eb:20:db:c9:
                    93:48:b4:83:1a:f9:04:d8:3f:27:00:87:8b:de:4f:
                    89:80:6a:da:27:41:8c:cf:d4:75:99:c1:ed:a6:65:
                    0e:3a:2d:72:30:a4:59:fa:c0:61:06:4f:a4:b1:15:
                    1c:c6:7f:59:99:2d:e0:f5:1c:94:e6:33:9b:72:e9:
                    cd:e3:ff:a3:8b:80:b2:5f:68:43:96:2a:7e:1f:5c:
                    76:1f:7c:22:d5:1b:31:fd:90:84:33:f2:0e:52:df:
                    f8:01:8d:15:05:f8:37:88:95:e6:de:f8:d0:e8:1d:
                    cd:b7:0e:53:02:5a:08:c7:90:46:04:fe:d5:e4:bb:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D8:70:15:1B:13:0B:43:70:D8:F8:27:CF:4A:AE:AF:D9:E9:CD:4D
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3a2f34382d3438203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:4d:09:76:70:9e:0d:f6:f1:f6:3c:e4:7e:68:8d:42:31:b1:
         98:95:59:0d:d8:3a:5d:b3:46:48:99:e1:85:f2:42:80:11:18:
         dd:b9:8a:95:08:71:3b:88:d9:3b:39:5c:1a:6b:8d:bb:36:0e:
         09:ad:50:f0:57:eb:4c:b3:db:93:cd:2a:7d:61:dd:ee:16:ac:
         fc:58:3b:4a:c9:a5:d0:23:9b:d0:15:10:23:17:e0:cc:05:da:
         3b:8b:ba:59:e5:34:ba:5e:3d:12:82:ec:17:46:5c:e9:23:0d:
         cc:cb:d0:19:1e:77:9b:d3:dd:3c:73:e3:3f:96:46:ef:dd:4e:
         21:30:af:8b:58:4f:c9:da:47:0f:85:25:03:59:83:bb:33:8c:
         5b:f2:19:70:9b:28:f5:99:e3:99:f4:04:37:a2:b6:dd:29:80:
         e8:cb:51:26:d5:e9:6c:1a:cc:66:8d:81:0f:f7:6b:ec:5e:81:
         b6:dc:2a:08:8f:2d:12:3a:be:18:aa:64:3a:86:df:06:dc:26:
         ef:c8:ea:52:d0:9d:87:6c:be:dc:27:30:7b:eb:05:35:f8:6d:
         9d:41:75:03:63:8f:59:88:53:a2:65:2b:c9:6d:b2:4e:51:29:
         06:11:93:9c:11:f9:bd:bc:bf:c1:ff:2e:6e:cc:e5:2f:94:fe:
         4a:a0:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org