Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/323830313a31653a653030303a3a2f34382d3438203d3e203631353032.roa
File:                     323830313a31653a653030303a3a2f34382d3438203d3e203631353032.roa (raw, json)
Hash identifier:          bJ553qQm6BebIs9prjaSvgcAgv+7Ym+MdkmxQqbVFj8=
Subject key identifier:   54:53:E2:A3:AA:73:6F:58:BD:23:C7:7F:16:09:1B:71:8F:D3:E0:9D
Certificate issuer:       /CN=5EEF34262E5F7F9A665A1C125355DD1CEA90CA62
Certificate serial:       421D6189A6288CDA50B6091FC53EC4B6F88CCF4B
Authority key identifier: 5E:EF:34:26:2E:5F:7F:9A:66:5A:1C:12:53:55:DD:1C:EA:90:CA:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/323830313a31653a653030303a3a2f34382d3438203d3e203631353032.roa
Signing time:             Tue 05 Mar 2024 18:21:03 +0000
ROA not before:           Tue 05 Mar 2024 18:16:03 +0000
ROA not after:            Tue 04 Mar 2025 18:21:03 +0000
asID:                     61502
IP address blocks:        2801:1e:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1d:61:89:a6:28:8c:da:50:b6:09:1f:c5:3e:c4:b6:f8:8c:cf:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF34262E5F7F9A665A1C125355DD1CEA90CA62
        Validity
            Not Before: Mar  5 18:16:03 2024 GMT
            Not After : Mar  4 18:21:03 2025 GMT
        Subject: CN=5453E2A3AA736F58BD23C77F16091B718FD3E09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:35:30:e5:4a:0f:66:84:3e:01:2b:5b:0b:
                    4d:55:ec:cf:6d:2e:c8:af:82:0e:02:49:ed:a8:36:
                    76:88:13:96:a0:78:3a:08:e1:fb:27:37:29:82:9c:
                    f3:52:39:c7:7f:ee:b2:95:b4:39:0e:db:02:12:19:
                    76:71:f2:90:1b:5d:a7:fd:32:ff:ca:89:cc:9e:fa:
                    aa:9d:2e:ce:74:0f:91:d5:98:6e:71:51:49:40:0f:
                    32:ed:39:4c:0b:e2:73:ac:8c:ce:ce:5b:10:08:29:
                    8e:05:c3:d1:11:b3:91:de:0c:4d:ea:36:f6:37:70:
                    f0:c1:cb:1f:ea:2e:70:d9:a3:51:21:69:f3:db:5a:
                    70:e8:ea:82:b9:93:d0:47:48:1f:b6:f1:a5:9a:91:
                    23:94:8c:93:21:e3:c6:0e:62:94:a0:6f:31:b2:cf:
                    93:1a:61:77:7a:61:92:ef:bc:85:74:6f:9e:07:72:
                    69:1a:75:40:76:ac:37:70:ca:1f:02:ab:3b:ff:0f:
                    cd:0e:5f:cc:99:a7:13:ae:36:ea:6f:24:51:bc:2a:
                    4e:3c:5e:dc:3d:e7:8c:6b:ae:28:5a:d4:75:ff:41:
                    87:f1:c2:3e:98:6c:0a:3c:9d:f9:b8:1d:9e:21:ba:
                    95:9a:9c:f4:a8:7f:2f:91:99:b0:96:2f:24:db:d6:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:53:E2:A3:AA:73:6F:58:BD:23:C7:7F:16:09:1B:71:8F:D3:E0:9D
            X509v3 Authority Key Identifier:
                keyid:5E:EF:34:26:2E:5F:7F:9A:66:5A:1C:12:53:55:DD:1C:EA:90:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/323830313a31653a653030303a3a2f34382d3438203d3e203631353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:d0:f4:86:8d:17:43:eb:21:ab:db:bb:94:54:a6:1c:c6:
         66:e2:e0:56:fd:32:6e:4c:ef:05:e2:08:6f:d8:40:e8:30:de:
         84:bd:35:3e:e8:fa:85:18:54:5f:ac:9b:13:a2:75:73:8e:d3:
         16:cf:f3:ea:04:b6:19:7a:8d:7e:da:99:1e:f3:85:47:b5:bb:
         e5:c3:de:cc:0c:d4:d0:e8:f2:62:89:ed:fb:5f:96:d4:3a:e3:
         fd:27:1a:0a:0b:e6:4c:73:a6:a2:77:80:bb:f7:4d:a5:52:ee:
         36:06:83:c7:f8:a7:22:6a:01:7d:27:74:d5:1a:2d:6e:dd:9d:
         3f:d5:90:6f:12:30:fb:da:29:65:02:1f:1b:41:41:5e:20:51:
         f2:26:0f:72:d7:31:64:0a:41:51:45:3e:f3:f0:a6:f9:08:8d:
         f0:28:c3:c1:08:01:a6:29:84:25:aa:02:b4:54:19:86:e2:f2:
         f2:ae:50:4d:43:64:25:46:53:11:1e:45:ca:10:6a:d8:6f:43:
         49:1d:65:32:1c:80:59:b7:76:cc:0d:e4:64:d3:80:1b:e3:c5:
         49:24:e3:f9:ef:12:7f:6f:c4:bb:f2:f8:ba:e1:0b:55:b7:cc:
         47:04:ae:f6:05:cd:3c:ff:c0:59:2a:1a:63:18:d8:25:e0:1f:
         53:c4:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:45 2024 by rpki-client on console-fra.rpki-client.org