Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/323830313a31393a333030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31393a333030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          tptFqBvpYY2vXwmuBA0/iEovImiQiYN4g7Gollp5p1U=
Subject key identifier:   D8:B2:B1:20:B8:DE:3A:E1:6F:F5:57:CF:4B:0E:60:CD:F7:BD:16:87
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       25DF6DD630D2ED1EA3C71198C40414BB89916A67
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/323830313a31393a333030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 05 Mar 2024 17:40:25 +0000
ROA not before:           Tue 05 Mar 2024 17:35:25 +0000
ROA not after:            Tue 04 Mar 2025 17:40:25 +0000
asID:                     265696
IP address blocks:        2801:19:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:df:6d:d6:30:d2:ed:1e:a3:c7:11:98:c4:04:14:bb:89:91:6a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Mar  5 17:35:25 2024 GMT
            Not After : Mar  4 17:40:25 2025 GMT
        Subject: CN=D8B2B120B8DE3AE16FF557CF4B0E60CDF7BD1687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:e1:b5:c7:eb:aa:35:51:c7:38:ba:61:fd:
                    b4:ad:bb:7f:f6:82:26:4e:80:dd:bf:e7:dc:0d:7f:
                    73:a6:21:16:03:a3:4a:23:bb:d7:af:1c:8b:e6:71:
                    28:f4:a2:92:50:50:68:42:e5:96:3f:2e:2b:d4:0e:
                    1e:b3:e9:8b:0c:46:fb:8f:33:fd:8e:ae:e8:61:a0:
                    ef:de:d1:ff:8d:08:30:41:97:be:98:76:a9:58:88:
                    44:ad:b6:eb:54:0d:1e:35:39:b9:f7:8c:d6:cf:98:
                    8e:10:05:f1:b3:6b:9b:53:8c:cf:31:97:af:18:ee:
                    7f:6e:00:bc:22:0b:21:03:41:8d:ec:1c:d8:64:55:
                    79:13:27:7d:59:dd:c6:65:0c:47:38:cd:3c:16:22:
                    ca:b4:90:9c:45:a2:76:d8:3a:17:24:86:34:7d:e2:
                    18:42:65:b4:d1:3c:15:19:00:78:42:89:49:b8:c6:
                    75:d2:58:08:34:13:c1:24:50:a6:c7:02:9b:3a:24:
                    a7:6c:bb:45:eb:2e:ec:5e:17:8f:ee:bf:88:88:ff:
                    5d:ac:8a:b3:04:0a:62:65:28:79:fc:12:ef:1b:08:
                    cd:60:11:f3:59:ba:91:86:05:09:03:4f:56:5a:74:
                    30:db:8e:4c:52:8f:a5:40:74:ef:33:c1:ec:d0:f7:
                    68:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:B1:20:B8:DE:3A:E1:6F:F5:57:CF:4B:0E:60:CD:F7:BD:16:87
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/323830313a31393a333030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:b6:ce:5f:10:23:51:9a:b3:2b:d3:04:2a:33:c9:04:5e:
         79:67:4a:a3:75:12:95:3a:c3:17:5f:d3:f4:a0:56:89:04:48:
         d1:6a:88:05:de:81:39:0f:a2:ea:1f:e7:5e:d9:6a:fe:08:39:
         9f:72:b7:87:bb:03:c2:dd:4d:b9:6c:b4:79:77:fc:24:c7:2f:
         a0:5e:6d:ac:5f:14:ae:bd:57:f9:bb:e4:9a:fd:83:47:c8:ad:
         b9:d4:4a:60:5b:1d:05:16:3d:81:3a:78:d1:86:48:3f:c3:aa:
         64:bc:bc:e5:68:cc:b3:c3:4c:0c:a8:d5:04:e5:92:24:c7:78:
         76:6a:bd:96:0b:32:12:50:3e:56:05:fd:67:e5:4a:b4:72:b7:
         ba:c8:5b:9f:0f:86:25:4e:d5:1a:ad:6e:3a:45:7f:7c:83:16:
         c2:8a:0c:41:18:e4:a2:ce:15:17:9d:27:9c:e0:29:56:16:e3:
         e9:45:ac:a8:e4:ae:a2:15:43:ee:a2:80:25:f8:27:cd:05:a9:
         db:70:05:7f:d2:34:fc:44:ef:c1:fa:9b:dc:95:1c:08:3e:7f:
         7f:e0:d1:df:ea:48:86:ca:6f:67:06:56:67:ee:fd:fa:dd:cc:
         72:78:6a:fc:a2:e3:d0:a7:45:e5:5a:12:4d:3a:da:cc:06:b0:
         56:9d:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org