Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/323830303a6331303a3a2f33322d3332203d3e20323632313534.roa
File:                     323830303a6331303a3a2f33322d3332203d3e20323632313534.roa (raw, json)
Hash identifier:          txw2Tmb7lZRP9K5GRp4R8nYDrIDirVrrj8oBCBUSQLQ=
Subject key identifier:   92:C1:12:69:B5:39:8C:31:72:B9:40:98:1E:D1:14:0A:B1:BD:10:A9
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       2BB2D96EA14888F2248A3085D44F029D9E2D4E06
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/323830303a6331303a3a2f33322d3332203d3e20323632313534.roa
Signing time:             Tue 05 Mar 2024 18:11:43 +0000
ROA not before:           Tue 05 Mar 2024 18:06:43 +0000
ROA not after:            Tue 04 Mar 2025 18:11:43 +0000
asID:                     262154
IP address blocks:        2800:c10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b2:d9:6e:a1:48:88:f2:24:8a:30:85:d4:4f:02:9d:9e:2d:4e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Mar  5 18:06:43 2024 GMT
            Not After : Mar  4 18:11:43 2025 GMT
        Subject: CN=92C11269B5398C3172B940981ED1140AB1BD10A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:bf:7d:b1:59:83:37:f7:b4:a4:cd:85:f5:
                    02:75:6f:cf:5a:82:41:30:66:5e:1e:9c:12:1c:ca:
                    7a:2a:ef:a6:5d:32:9c:cd:48:57:5f:e3:6f:c8:3a:
                    8d:53:b8:8c:15:85:5d:c2:cc:1e:af:a5:df:c3:78:
                    23:14:0f:85:af:ce:6a:6a:fb:cc:2b:53:e9:6d:38:
                    31:d2:6f:a0:49:84:5e:f6:d0:23:55:f8:08:e6:cd:
                    33:09:1a:93:d4:3e:ff:8b:11:1d:89:63:ab:a7:40:
                    77:b7:e3:da:79:d1:c0:da:42:c6:96:78:f7:6b:6f:
                    eb:f9:c6:0a:75:f1:18:bc:e8:d8:b4:25:ce:13:45:
                    18:94:ae:05:8d:9b:87:ee:26:c2:f2:d9:b0:a0:a3:
                    46:0d:2d:e6:d7:88:2f:22:13:b0:75:65:b9:d1:fb:
                    d5:54:fa:94:8a:9a:8d:4e:12:88:f2:2c:14:c5:d7:
                    30:ee:0c:89:be:1f:f7:bd:be:ba:10:9a:b5:b9:87:
                    14:17:5e:b3:cf:d1:ab:71:3d:ac:85:7c:67:f8:11:
                    6e:68:0b:14:b8:6c:f9:b0:36:9c:07:b4:d5:9c:6b:
                    dc:10:1d:03:b5:d2:65:98:4c:ae:f5:be:43:d4:6b:
                    1f:f7:61:ed:e9:a7:f7:5f:84:14:a7:c4:0d:d8:65:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C1:12:69:B5:39:8C:31:72:B9:40:98:1E:D1:14:0A:B1:BD:10:A9
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/323830303a6331303a3a2f33322d3332203d3e20323632313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:79:2b:10:c2:a4:61:1b:8c:61:e4:13:15:3e:ae:25:43:f4:
         c6:55:b0:8c:26:ac:31:77:2e:eb:98:be:a6:63:c2:a5:a0:a3:
         db:07:85:b4:eb:cc:94:d6:61:00:d9:5c:4f:34:a7:6d:29:a1:
         aa:15:40:49:2a:2c:68:d9:a2:0a:38:bc:a2:79:08:f7:8e:84:
         77:43:07:d1:8a:39:4c:10:a9:ea:55:62:42:a6:c2:0b:4e:3c:
         c2:e7:f2:41:78:ca:18:11:8c:19:a7:fc:03:42:74:8e:dc:4c:
         f5:15:3c:ea:74:ba:4e:5c:c3:43:b1:41:14:b8:bb:a6:6c:45:
         36:34:fc:67:9d:77:2a:ce:f7:5b:bd:a2:ae:7a:4c:e9:79:e8:
         9b:72:90:01:8f:36:7e:09:6c:7c:80:89:af:bf:81:81:7a:32:
         d4:7d:36:6e:19:07:8e:ec:c3:a1:cd:82:09:a6:57:1b:d1:94:
         a2:ab:4d:a9:19:ee:3d:d1:81:30:ee:c6:49:f4:df:4d:bb:fe:
         84:b6:6c:2b:65:e9:20:77:ff:a5:6c:42:86:6e:2f:f0:35:6e:
         77:f5:c5:82:96:b1:c2:70:94:19:7b:5e:6a:52:fd:11:95:a3:
         d8:53:a1:45:a5:bf:1c:d8:be:2e:fa:f0:11:1a:6e:f3:64:d9:
         34:dc:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org