Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/323830313a31383a373830303a3a2f35322d3532203d3e203237393431.roa
File:                     323830313a31383a373830303a3a2f35322d3532203d3e203237393431.roa (raw, json)
Hash identifier:          DVyZVo+JQsVjNB0lrM37PJ+/USnwncdycfwFUL/82hA=
Subject key identifier:   9D:8F:B3:C6:C7:FA:19:A1:58:B9:EE:E5:D8:FC:BF:E4:8B:F0:41:5E
Certificate issuer:       /CN=5A51CDFCFC7F119BCD857EB25AB4AB52177BF284
Certificate serial:       1F6D51302674D2F0E06720B616347A9ADB3DEE75
Authority key identifier: 5A:51:CD:FC:FC:7F:11:9B:CD:85:7E:B2:5A:B4:AB:52:17:7B:F2:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/323830313a31383a373830303a3a2f35322d3532203d3e203237393431.roa
Signing time:             Tue 05 Mar 2024 18:14:39 +0000
ROA not before:           Tue 05 Mar 2024 18:09:39 +0000
ROA not after:            Tue 04 Mar 2025 18:14:39 +0000
asID:                     27941
IP address blocks:        2801:18:7800::/52 maxlen: 52

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6d:51:30:26:74:d2:f0:e0:67:20:b6:16:34:7a:9a:db:3d:ee:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A51CDFCFC7F119BCD857EB25AB4AB52177BF284
        Validity
            Not Before: Mar  5 18:09:39 2024 GMT
            Not After : Mar  4 18:14:39 2025 GMT
        Subject: CN=9D8FB3C6C7FA19A158B9EEE5D8FCBFE48BF0415E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:7f:2b:47:09:bd:03:23:2d:c8:9d:38:cc:
                    6f:2c:14:af:54:e1:e0:a9:84:0c:7c:f9:99:33:72:
                    2a:43:24:f7:70:bd:2a:e0:85:6a:fa:ab:fd:51:e7:
                    e4:c7:23:f6:d5:78:09:a4:09:9f:94:20:22:c6:87:
                    ef:e5:c6:75:a6:d4:0b:50:c1:0e:16:a9:89:12:dc:
                    ec:73:2c:ba:13:b1:e2:5c:bd:51:f9:0f:de:1f:f4:
                    90:8e:2a:c7:6f:4c:3d:24:21:37:e1:e2:3b:14:25:
                    83:08:fe:bb:17:15:44:e4:85:d8:bf:39:e8:88:eb:
                    5c:4e:fd:88:78:c9:fe:fa:ee:a8:03:b2:26:0f:3b:
                    f8:90:a8:26:4a:5c:0c:81:01:04:6f:df:45:1e:e3:
                    2a:29:b2:00:05:40:01:e4:9b:38:ba:90:8d:da:05:
                    8b:cc:6a:87:63:6d:11:1c:19:19:d9:7a:06:87:90:
                    bf:d4:91:6c:47:4c:05:a8:76:24:81:63:0e:de:d1:
                    91:b1:ca:18:14:ba:a3:8c:fb:66:cd:e1:8c:aa:2d:
                    89:e4:2d:ef:23:f7:67:df:10:a5:fb:d3:98:1f:7b:
                    8b:46:6c:3b:74:25:8b:7e:c7:d3:d8:fb:8c:0f:4d:
                    2d:c2:3d:cd:09:e2:c0:02:0f:df:03:bb:5f:40:7d:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8F:B3:C6:C7:FA:19:A1:58:B9:EE:E5:D8:FC:BF:E4:8B:F0:41:5E
            X509v3 Authority Key Identifier:
                keyid:5A:51:CD:FC:FC:7F:11:9B:CD:85:7E:B2:5A:B4:AB:52:17:7B:F2:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A51CDFCFC7F119BCD857EB25AB4AB52177BF284.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8291E563B9A70D81250DAC2519396B51E53731283B870ADDE9CCD94F2D41748F/0/323830313a31383a373830303a3a2f35322d3532203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:7800::/52

    Signature Algorithm: sha256WithRSAEncryption
         10:52:35:3b:bc:f1:90:57:f6:63:de:35:76:40:91:94:6d:35:
         f0:0b:67:bd:d6:b7:39:88:bb:56:f4:d7:79:63:c0:52:17:e4:
         73:29:a6:a7:e3:b6:0e:f4:e8:68:2c:e4:82:50:ac:32:a5:ef:
         a1:ab:89:e4:77:c1:6a:74:37:dc:7f:d6:92:4a:25:fd:10:1d:
         70:04:aa:66:bb:1f:f5:3e:4d:a4:2a:67:a8:95:80:ac:3c:9b:
         d0:3f:0c:7f:f8:4a:00:2b:4c:84:76:9b:18:90:b5:31:05:08:
         37:6b:d8:fe:e7:a1:c6:e2:12:3d:3c:25:61:ad:65:bd:7d:03:
         c7:24:ec:d1:98:ff:cc:ca:7e:a7:a9:32:e6:98:cf:be:e6:b4:
         22:23:ee:cd:bc:76:bf:5f:96:5b:72:f2:78:1a:0f:e3:09:86:
         dd:00:d6:9b:c2:73:74:49:e4:b3:50:2d:77:98:84:f3:d9:79:
         b0:39:65:e4:78:6b:41:d1:54:9c:ad:e0:e6:52:8f:d9:22:31:
         4d:03:b8:75:cf:fa:78:24:3b:94:fe:1a:63:03:d8:49:14:de:
         79:b7:e2:d8:e7:8c:6d:cc:bd:60:0f:3a:5a:59:1b:d1:78:75:
         42:03:c2:77:4c:0b:e7:2d:20:cf:8b:15:bd:08:45:2a:e4:0e:
         c7:83:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:07:34 2024 by rpki-client on console-ams.rpki-client.org