Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/323830303a3436303a3a2f33322d3438203d3e203136373432.roa
File:                     323830303a3436303a3a2f33322d3438203d3e203136373432.roa (raw, json)
Hash identifier:          aD4DhS4bpz5JpY/w7S3A3RR0wuaoSfW3aEbSNbzlUOE=
Subject key identifier:   24:23:21:86:62:FA:5D:2D:FC:CC:4A:E3:B6:F9:54:53:8E:5B:58:2B
Certificate issuer:       /CN=5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789
Certificate serial:       5966233FE3376DC2A4E86F4646DE901B2D577CD3
Authority key identifier: 5C:7C:6A:52:F2:0F:E7:8C:EA:EC:0A:41:78:09:AA:B6:D8:2B:77:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/323830303a3436303a3a2f33322d3438203d3e203136373432.roa
Signing time:             Tue 18 Jun 2024 15:45:01 +0000
ROA not before:           Tue 18 Jun 2024 15:40:01 +0000
ROA not after:            Tue 17 Jun 2025 15:45:01 +0000
asID:                     16742
IP address blocks:        2800:460::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:66:23:3f:e3:37:6d:c2:a4:e8:6f:46:46:de:90:1b:2d:57:7c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789
        Validity
            Not Before: Jun 18 15:40:01 2024 GMT
            Not After : Jun 17 15:45:01 2025 GMT
        Subject: CN=2423218662FA5D2DFCCC4AE3B6F954538E5B582B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:e4:0f:6a:ea:d8:34:1f:53:bf:48:25:7d:
                    20:0e:8f:80:fa:e8:d7:08:69:7d:56:92:8c:dc:54:
                    42:b6:2d:96:57:cb:40:45:c6:42:64:a6:16:da:62:
                    ec:23:35:e2:02:06:9c:14:79:12:04:11:73:71:9d:
                    9a:60:95:1b:a0:df:56:d2:0c:12:28:40:d4:23:2e:
                    69:49:3d:fa:78:6f:78:93:ae:c5:42:4f:79:dc:6c:
                    0b:8f:c3:54:e8:13:a1:0c:55:4a:c0:e4:92:74:08:
                    6f:f3:b1:81:85:1e:4d:bf:ad:9c:3a:78:07:8f:c0:
                    7a:9c:6a:74:54:a0:23:49:5a:2a:9e:06:73:94:30:
                    b4:2c:6e:80:c6:a3:69:c2:32:24:35:6b:57:cd:20:
                    2b:39:ed:da:58:5b:8e:3b:05:47:c6:f0:c4:69:ae:
                    72:48:9e:e3:5c:18:e5:3d:8c:6e:c1:8d:80:c9:1d:
                    4a:7b:fd:4f:b1:45:dc:eb:13:de:0d:ed:dc:10:db:
                    a9:31:4c:4d:01:eb:07:58:8e:72:b4:2f:4b:0c:1c:
                    3a:e4:83:2c:36:17:76:01:86:48:28:44:ca:ac:56:
                    55:2a:3e:d1:99:99:57:27:1e:8b:c0:c5:0c:2b:99:
                    97:7d:d8:d1:2e:61:23:8d:65:27:4d:eb:58:bc:a8:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:23:21:86:62:FA:5D:2D:FC:CC:4A:E3:B6:F9:54:53:8E:5B:58:2B
            X509v3 Authority Key Identifier:
                keyid:5C:7C:6A:52:F2:0F:E7:8C:EA:EC:0A:41:78:09:AA:B6:D8:2B:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/323830303a3436303a3a2f33322d3438203d3e203136373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:460::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:ee:3f:10:88:44:b9:f4:5f:c4:51:e0:e6:f5:00:7b:ec:
         6c:4c:5f:44:fb:c4:f6:dc:62:af:4a:fc:a1:ad:b9:98:ca:4b:
         8a:4a:05:14:72:e9:ab:60:ef:35:06:20:4f:8c:df:d6:3d:62:
         43:ba:6b:a1:9a:ff:be:d5:6b:3b:c1:79:40:93:b5:26:ff:11:
         26:47:7c:1a:87:6f:27:ea:54:f2:75:b4:4c:fe:6b:09:0f:79:
         33:d9:d9:89:53:79:ea:43:ad:ec:37:45:96:7c:12:aa:1f:d8:
         08:2c:c6:c3:06:b5:bb:58:f3:59:82:4b:31:d1:3d:ce:90:20:
         12:b3:5d:10:cd:e7:d1:f0:4a:6a:fd:34:0e:40:2f:8e:46:8c:
         fb:bb:f6:31:e5:f9:ff:23:98:7b:45:14:8f:aa:1b:87:06:ca:
         a2:34:64:d0:a3:f8:68:82:08:51:b5:71:b5:5a:49:1c:be:53:
         2d:a7:f7:8b:51:01:d3:2b:30:ac:fb:a9:7f:cc:87:7c:10:53:
         c5:d6:70:73:11:76:c3:c8:7a:9f:c6:f4:b9:83:11:14:22:d8:
         2d:f5:0f:22:d8:00:48:2e:07:e3:eb:8d:33:ed:af:4b:c7:8e:
         fc:f4:63:a4:fb:e4:51:cd:af:0a:69:35:6e:c5:af:81:aa:ef:
         68:df:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org