Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa
File:                     323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa (raw, json)
Hash identifier:          8qjj1sS4GnkRtQMniaUnpBvNK7gOB4DfQ/E5dUwQr3E=
Subject key identifier:   D5:80:0F:ED:4C:C0:1C:6A:98:3A:A4:8D:60:87:E9:35:AD:AC:C0:D6
Certificate issuer:       /CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
Certificate serial:       09965111092793F8B0B1E17546FA91E056060B42
Authority key identifier: 5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:08:13 +0000
ROA not before:           Tue 05 Mar 2024 18:03:13 +0000
ROA not after:            Tue 04 Mar 2025 18:08:13 +0000
asID:                     14754
IP address blocks:        2801:18:800::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:96:51:11:09:27:93:f8:b0:b1:e1:75:46:fa:91:e0:56:06:0b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
        Validity
            Not Before: Mar  5 18:03:13 2024 GMT
            Not After : Mar  4 18:08:13 2025 GMT
        Subject: CN=D5800FED4CC01C6A983AA48D6087E935ADACC0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:ce:f8:16:c2:65:c6:b6:28:19:2d:77:e8:
                    cd:f5:67:3a:08:81:da:d8:20:d3:53:15:09:e9:52:
                    61:7f:42:35:2a:3a:68:25:a2:61:55:fa:c5:47:56:
                    18:28:a7:e3:e4:30:38:21:9c:d1:e1:95:fa:bd:a8:
                    61:81:a3:cd:13:a8:ea:67:8f:a8:76:c1:71:2e:fa:
                    cc:f3:b4:1b:48:62:37:76:fe:f5:de:39:37:98:c0:
                    81:ba:c5:f2:bd:25:06:a3:a2:0b:23:7c:5c:54:3d:
                    80:71:46:99:1f:ea:b1:05:32:49:ee:14:63:d5:c4:
                    b1:44:94:af:8f:6b:8b:7b:68:35:3a:01:be:9e:8b:
                    ac:c2:21:1f:ad:ce:5f:b5:c5:32:1a:ab:37:ad:fe:
                    35:01:d2:3f:31:2d:07:f7:a4:0e:84:d5:db:20:1b:
                    c6:e3:74:a9:2b:e2:e0:9d:f9:d6:aa:e3:c5:80:d2:
                    11:6a:0d:3c:b4:98:8e:0a:c3:e1:0b:8b:02:97:1b:
                    20:cf:51:e4:b6:a4:81:09:73:29:37:7d:0b:8a:32:
                    b9:ce:bf:01:83:c1:a5:a8:4d:d0:6c:b2:4d:70:22:
                    86:62:4c:a4:2c:b9:4a:31:c4:7f:4d:7a:25:72:fc:
                    1e:66:a3:3d:e2:f8:42:56:b1:f0:da:0c:55:63:aa:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:80:0F:ED:4C:C0:1C:6A:98:3A:A4:8D:60:87:E9:35:AD:AC:C0:D6
            X509v3 Authority Key Identifier:
                keyid:5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:db:e4:6c:9e:13:ed:27:6c:5f:7b:99:c4:5d:f7:25:84:67:
         af:16:75:3a:0e:39:b7:3f:38:7c:77:3d:1f:23:c8:33:70:86:
         c3:cb:46:f5:7d:1d:e0:b6:79:85:4f:a8:23:5c:53:4c:bb:88:
         ea:7f:68:1b:3f:24:63:98:7d:8c:a4:75:af:96:6f:4d:98:83:
         b4:29:36:ad:fa:9e:d4:f4:44:9a:f1:23:e3:7e:6f:fc:fe:74:
         c3:fb:3c:4f:f5:cb:97:2e:cc:dd:ed:4d:68:38:a4:8e:38:3e:
         e5:7a:f4:e9:cf:0d:4c:54:a5:c1:18:f4:fa:41:2d:06:e7:7f:
         0f:95:92:16:33:eb:6c:cd:51:80:58:41:79:30:4e:32:95:39:
         a8:72:da:8d:d1:e1:4a:3e:70:1f:0c:e1:4a:c6:8e:7f:ef:74:
         59:8b:2d:c1:eb:1a:01:c2:6e:98:4f:43:b1:2a:95:54:b0:c1:
         d1:5c:77:c6:35:60:ef:df:7c:e1:e5:54:f6:a5:e1:61:21:aa:
         55:2a:98:ba:53:02:4a:96:e7:ae:2f:66:29:5c:5b:20:a2:a2:
         51:dd:da:f2:ca:d2:e6:66:14:64:ed:ce:77:ca:2c:59:c4:4f:
         14:89:ed:5b:df:f1:55:50:55:d9:77:cd:4e:ae:f8:d2:67:f0:
         03:d3:bc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org