Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a3a2f33322d3438203d3e203232303437.roa
File:                     323830303a3135303a3a2f33322d3438203d3e203232303437.roa (raw, json)
Hash identifier:          r1rphLNreB643FDW6ukdwHB9G1TMuaBjzonVLwOhxiA=
Subject key identifier:   54:7A:D1:15:5F:61:A0:64:42:D2:44:2E:7D:DD:BE:7A:E5:4B:3D:77
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       0EF9C4EB6478299916FB00B6DC0668B6776CE91E
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a3a2f33322d3438203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:20 +0000
ROA not before:           Tue 05 Mar 2024 18:04:20 +0000
ROA not after:            Tue 04 Mar 2025 18:09:20 +0000
asID:                     22047
IP address blocks:        2800:150::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f9:c4:eb:64:78:29:99:16:fb:00:b6:dc:06:68:b6:77:6c:e9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:20 2024 GMT
            Not After : Mar  4 18:09:20 2025 GMT
        Subject: CN=547AD1155F61A06442D2442E7DDDBE7AE54B3D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:4d:9b:49:84:c0:18:62:e9:08:2d:af:57:
                    be:1e:ec:da:69:94:e1:33:06:80:77:54:81:e7:44:
                    0a:c6:7b:70:af:cf:e7:bf:7e:98:93:b7:f2:5c:fe:
                    14:5a:7f:1d:47:01:74:aa:88:26:72:0a:90:af:5b:
                    82:a6:0d:20:95:87:95:ea:6e:cd:2d:16:ee:43:9c:
                    12:6a:49:34:b9:0d:e3:bd:dc:0c:89:d3:6b:6a:8f:
                    19:d6:50:5e:d5:6d:0d:1c:ce:d2:cf:0e:70:d0:d6:
                    10:0f:b9:a1:0c:1a:00:37:18:48:91:f9:41:cd:66:
                    49:8d:e2:17:f8:4f:b7:86:17:fe:17:ad:93:7d:90:
                    2c:1f:95:33:ef:7c:e2:91:17:bc:9a:18:90:f2:eb:
                    81:12:f8:e5:75:76:89:36:bf:eb:c6:f5:69:70:ff:
                    cb:1d:8b:78:79:7f:06:cd:33:cf:47:c1:53:84:23:
                    ac:86:1c:06:cd:18:93:16:75:08:07:7b:69:8d:a3:
                    2c:be:27:6a:57:cd:fb:6e:45:56:df:b9:f4:ba:08:
                    0c:02:d2:f4:fa:ab:8f:f0:4e:68:9d:8e:0b:c4:e8:
                    e1:e1:49:48:02:66:c3:15:00:d5:59:73:9d:26:14:
                    08:dd:87:02:a2:9f:f9:88:3d:11:50:bc:04:ba:f0:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7A:D1:15:5F:61:A0:64:42:D2:44:2E:7D:DD:BE:7A:E5:4B:3D:77
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a3a2f33322d3438203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:150::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:7d:56:2c:98:e1:3d:9d:36:0b:d4:fc:dc:fc:b5:56:f5:
         42:22:6f:80:f9:11:5c:b1:59:d2:1b:b1:ee:dd:53:63:97:7b:
         c1:8e:f0:fb:04:af:4f:43:bb:ad:a5:b1:df:63:40:2a:2f:cb:
         88:78:50:87:9b:ea:15:e4:f4:6d:96:d9:1a:6f:8e:12:a5:e8:
         cc:5f:7b:94:55:65:fd:c5:c4:99:15:cc:87:d6:45:40:62:e9:
         08:7e:77:ea:41:ef:97:46:d5:21:25:d5:16:87:71:8f:01:35:
         8c:03:84:db:a5:3b:c2:55:3c:ca:06:d8:7d:9e:4e:b9:e7:b7:
         ad:3f:bb:60:7a:e4:d8:4d:11:61:fb:fc:ee:d7:8e:ab:88:73:
         f2:88:bc:60:8c:e5:af:71:b1:23:a8:63:64:d7:aa:d5:d2:59:
         b6:41:db:59:e0:23:95:0a:d1:b8:15:fe:fd:ad:2b:19:a4:d8:
         5e:b0:9c:13:c9:df:10:58:7f:75:29:ef:6d:cc:48:25:c9:d9:
         3c:04:c2:b4:b6:b7:00:83:e0:fc:d3:45:f8:43:c8:f3:54:39:
         98:78:7b:a3:18:cc:40:12:b6:1e:e1:21:cb:9f:74:37:a9:e8:
         6e:36:f4:d0:33:13:cc:f6:c1:b5:de:18:89:64:84:33:3a:14:
         3d:43:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org