Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030303a3a2f34382d3438203d3e20323633373739.roa
File:                     323830313a31643a613030303a3a2f34382d3438203d3e20323633373739.roa (raw, json)
Hash identifier:          9Us0qF8TkJH2gbNur4XUurCkdS5gNTqcK2et/EeKJLw=
Subject key identifier:   D6:FC:AD:96:74:AF:97:05:B8:20:BA:06:F8:8E:59:CF:B6:6E:A8:0D
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       5E81090F088FFA3CEC8FEEF6AE181AEA7C02A960
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030303a3a2f34382d3438203d3e20323633373739.roa
Signing time:             Fri 17 May 2024 17:50:00 +0000
ROA not before:           Fri 17 May 2024 17:45:00 +0000
ROA not after:            Fri 16 May 2025 17:50:00 +0000
asID:                     263779
IP address blocks:        2801:1d:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:81:09:0f:08:8f:fa:3c:ec:8f:ee:f6:ae:18:1a:ea:7c:02:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: May 17 17:45:00 2024 GMT
            Not After : May 16 17:50:00 2025 GMT
        Subject: CN=D6FCAD9674AF9705B820BA06F88E59CFB66EA80D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:36:e7:6d:89:9b:95:b4:51:f2:e3:53:33:
                    ed:11:44:3f:fc:0a:46:f9:c5:5f:c8:89:2b:4b:eb:
                    18:4e:80:95:59:79:b7:76:30:93:41:b7:1d:bf:16:
                    a4:40:45:45:8b:4b:65:1d:58:4e:b0:7d:aa:fd:7c:
                    60:78:23:b9:ac:43:53:96:b4:ef:a5:ed:e0:0d:e6:
                    43:6a:06:ef:4b:13:58:24:7d:9f:de:7c:3b:08:c9:
                    cb:ca:7c:04:43:d8:1f:49:32:89:d2:ea:2b:c0:a3:
                    41:c5:48:88:83:32:66:c9:e2:62:6d:96:f1:03:1f:
                    e9:05:36:9d:dd:85:5d:a7:2d:fb:83:fd:7c:00:26:
                    de:93:d6:8b:54:3f:72:45:3f:92:0c:cd:3b:2b:78:
                    5a:7a:da:2d:2c:3f:5f:84:7a:07:69:34:8a:a3:73:
                    96:d0:98:14:2b:65:c2:fa:7b:b7:cd:34:5c:15:06:
                    7d:20:6d:12:47:31:26:fc:a7:20:2c:d2:63:50:37:
                    dc:5e:07:cc:6c:76:25:cf:af:57:b5:c2:39:76:53:
                    14:41:bb:86:56:53:cd:28:9f:1a:61:22:51:6d:6b:
                    02:b2:72:fd:01:a7:08:ab:6d:ff:7c:f0:52:e5:b7:
                    00:c4:49:b9:2b:c3:90:d6:e1:f5:63:d5:d1:07:4d:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FC:AD:96:74:AF:97:05:B8:20:BA:06:F8:8E:59:CF:B6:6E:A8:0D
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030303a3a2f34382d3438203d3e20323633373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:40:cb:11:3b:48:96:4b:21:b4:6b:04:ab:a5:33:aa:54:
         27:94:df:79:9b:0b:6c:a9:18:c5:eb:c7:f9:d1:ab:0c:c9:da:
         b6:45:b1:a6:7f:d3:79:e2:fd:f2:c5:13:fa:b5:be:58:d7:f2:
         9a:a6:36:74:d7:26:ef:18:ab:6d:0b:7f:22:d4:1d:6c:c7:67:
         da:88:8d:d5:52:4f:1d:50:4f:4f:c2:ae:f1:e6:35:04:31:42:
         d8:2e:b2:96:a6:90:ac:08:98:77:f0:e5:94:91:c0:8f:4b:fa:
         cd:68:bb:4e:dd:ad:d1:83:dc:4b:c6:8b:2c:84:39:58:43:f7:
         c4:5e:98:7f:86:79:d2:90:ad:e0:e9:bc:f6:f7:04:4d:15:05:
         60:de:f3:4a:24:3f:d1:14:b4:22:c5:e9:64:17:b4:55:25:ed:
         09:26:29:0f:2c:64:5f:1c:e7:f5:70:9c:73:27:4c:7e:2a:8d:
         7c:83:3a:4b:f3:a5:c8:f8:e6:62:4b:b3:b3:85:94:bf:44:8d:
         90:10:6a:c7:3f:aa:d8:70:03:58:0a:37:ad:d6:4f:c8:12:48:
         8e:d5:87:77:20:d7:85:c1:25:d9:5a:86:0b:e3:05:8e:25:7f:
         0b:63:4d:e8:20:83:78:f7:f5:ae:07:c3:b4:ee:51:0f:33:6b:
         c2:e2:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org