Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/323830313a31653a653830303a3a2f34382d3438203d3e20323632313836.roa
File:                     323830313a31653a653830303a3a2f34382d3438203d3e20323632313836.roa (raw, json)
Hash identifier:          Ss5lejdWZ6ojodBD0pyMVC5wWYzfo7miFcvK6PyxdfQ=
Subject key identifier:   BE:FD:93:E3:2E:00:7D:F3:5C:82:BD:11:8A:8B:2F:CE:82:57:81:CA
Certificate issuer:       /CN=08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4
Certificate serial:       50EFEFEEB4024B6C6D0AF3701252DC311A52D231
Authority key identifier: 08:52:20:00:E6:80:B6:B5:BB:AE:CA:5C:D4:D9:E5:B0:AC:EA:5B:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/323830313a31653a653830303a3a2f34382d3438203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:19:32 +0000
ROA not before:           Tue 05 Mar 2024 18:14:32 +0000
ROA not after:            Tue 04 Mar 2025 18:19:32 +0000
asID:                     262186
IP address blocks:        2801:1e:e800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ef:ef:ee:b4:02:4b:6c:6d:0a:f3:70:12:52:dc:31:1a:52:d2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4
        Validity
            Not Before: Mar  5 18:14:32 2024 GMT
            Not After : Mar  4 18:19:32 2025 GMT
        Subject: CN=BEFD93E32E007DF35C82BD118A8B2FCE825781CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:f7:86:e4:32:cf:f5:13:51:4b:2d:5f:c0:
                    ca:b6:d4:5a:32:e5:7c:c1:e5:8a:19:68:1a:3e:3c:
                    14:9f:f9:ca:77:7a:71:aa:67:ff:0b:ad:f7:c1:0a:
                    f5:3f:ef:5a:4a:5c:39:44:6d:01:88:b2:46:48:30:
                    08:97:b2:e9:7b:c1:0e:40:ae:e8:8b:74:6b:d7:b2:
                    3c:6e:9f:60:97:0c:9c:f9:db:c9:0b:1f:04:43:5a:
                    1d:a0:3d:a6:3b:32:2b:a4:30:08:2a:be:1b:a8:f7:
                    b0:df:fc:44:50:84:82:c2:8f:79:38:75:fe:5b:d7:
                    c2:cb:1d:f9:cd:d4:26:a0:33:0d:01:37:a9:16:70:
                    f7:45:4b:dc:fc:b5:89:df:f6:9f:d3:08:02:c1:f3:
                    c5:b9:e0:3a:2f:8a:36:c0:dc:03:8f:76:47:0d:da:
                    70:0d:47:18:28:cf:e6:dd:63:71:89:b1:85:e7:4c:
                    2e:61:71:cc:12:5a:d8:3e:a0:36:3d:de:d0:89:78:
                    ff:62:fe:45:ed:20:f9:8b:5d:a3:14:fc:52:ea:ae:
                    f5:e6:6d:45:34:96:d2:e3:dc:8c:d6:5d:59:05:59:
                    0c:1b:1e:0a:c1:5d:70:16:1b:99:36:72:7c:47:54:
                    32:2e:69:d2:26:46:ad:9c:0b:11:62:d6:ed:a1:13:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FD:93:E3:2E:00:7D:F3:5C:82:BD:11:8A:8B:2F:CE:82:57:81:CA
            X509v3 Authority Key Identifier:
                keyid:08:52:20:00:E6:80:B6:B5:BB:AE:CA:5C:D4:D9:E5:B0:AC:EA:5B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/323830313a31653a653830303a3a2f34382d3438203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:ec:ad:b3:82:2d:2d:c8:12:55:b4:e8:e3:03:2b:ae:6c:
         0a:28:6f:a9:1f:36:0b:9a:b2:ad:7b:b4:3a:50:c1:97:93:40:
         75:d3:35:ac:f1:d3:38:36:0f:f2:ec:cf:9f:f8:6e:6b:8b:ae:
         a5:f4:a4:67:a1:8d:5e:9f:9e:a4:4f:6e:89:39:b8:69:a0:6b:
         24:1f:d9:b0:40:4e:39:94:08:10:62:2d:61:2a:5c:a6:6d:55:
         9e:f0:5e:4f:05:50:49:b2:1a:50:c2:22:61:08:7f:4f:c1:38:
         af:c5:84:1b:ee:4c:2a:cb:7d:b5:14:34:8f:14:0e:26:e6:8f:
         80:18:e9:02:0d:5a:9c:e2:c9:56:f8:de:6c:f6:c5:cd:0a:ca:
         d7:02:3f:6b:c8:19:8e:c7:36:eb:11:85:3a:b4:84:d5:1c:ec:
         ab:6c:bb:55:7b:99:ed:5e:e8:fa:ed:82:8a:7b:e3:45:6c:52:
         c3:49:01:98:2a:24:a7:46:8d:91:75:65:a9:0b:e5:75:61:ed:
         e3:7d:73:c0:bb:04:3f:56:9f:ba:a2:13:16:f5:a5:42:01:2e:
         62:aa:48:80:87:93:f8:2b:52:5d:98:a9:27:67:c0:37:bd:3c:
         8f:35:b1:ac:0a:c4:ca:9d:95:06:73:23:30:c8:80:6f:da:09:
         42:9f:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:09 2024 by rpki-client on console-ams.rpki-client.org