Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa
File:                     323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa (raw, json)
Hash identifier:          0VX0V8iZ/Y9eNRbGH7YAUaeep4LLjoElIHj2q5b5+oQ=
Subject key identifier:   44:7D:28:AB:BC:11:28:6F:9D:C9:53:6A:FB:90:CF:60:96:F9:98:5B
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       7170F3611133CB334BF145047ED1D357C911D4C4
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa
Signing time:             Tue 05 Mar 2024 18:22:51 +0000
ROA not before:           Tue 05 Mar 2024 18:17:51 +0000
ROA not after:            Tue 04 Mar 2025 18:22:51 +0000
asID:                     52442
IP address blocks:        2800:110:1018::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:70:f3:61:11:33:cb:33:4b:f1:45:04:7e:d1:d3:57:c9:11:d4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:51 2024 GMT
            Not After : Mar  4 18:22:51 2025 GMT
        Subject: CN=447D28ABBC11286F9DC9536AFB90CF6096F9985B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:d1:7a:75:4b:cd:49:4e:59:f9:f7:b3:e5:
                    dd:af:6e:3c:82:cc:cd:ab:aa:22:de:ea:af:58:39:
                    2a:d9:36:56:98:1d:3c:86:67:a7:15:d6:66:14:8c:
                    fb:03:bb:76:2c:ed:19:64:ea:b1:31:1f:72:8d:13:
                    e9:c1:9a:fe:cd:d1:dd:4c:c2:ee:d8:98:69:54:e8:
                    06:ce:33:a2:f6:1f:7f:5b:81:2f:b7:e1:a9:56:3b:
                    16:8e:af:f9:23:d2:7d:db:cd:2b:12:21:a5:b6:08:
                    75:08:40:35:07:ca:ce:0e:52:26:53:19:d2:5b:e9:
                    d1:f1:a0:a7:56:fc:07:34:84:14:68:6f:ef:74:8b:
                    76:1e:0f:79:68:e6:48:72:d0:8a:6a:48:f0:b5:47:
                    50:99:67:b4:96:ad:db:b0:54:1a:c7:9f:63:48:31:
                    56:34:8d:7e:4d:a2:bc:5b:ae:0d:c6:ea:cf:a7:68:
                    8d:c7:8e:29:47:7b:d0:dd:8d:e0:a6:45:60:b9:3e:
                    e4:6a:eb:3d:60:53:f5:5b:b5:4a:8f:e6:3c:57:80:
                    d4:65:17:06:19:50:b6:51:14:ac:b6:27:42:76:99:
                    01:05:68:74:a1:7c:d7:f2:cf:06:5a:cc:d6:a4:a8:
                    a6:aa:cb:a9:7d:42:7a:fe:69:a2:ce:50:22:0c:d2:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7D:28:AB:BC:11:28:6F:9D:C9:53:6A:FB:90:CF:60:96:F9:98:5B
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313031383a3a2f34382d3438203d3e203532343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110:1018::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:ac:33:14:7b:75:c9:af:18:4a:62:ba:23:e7:fb:31:f8:
         52:d4:d7:3a:e0:e0:7b:be:96:00:4f:a3:33:3c:6b:f9:87:77:
         4f:c1:a3:fb:cd:9a:dc:eb:6c:cb:71:5a:a9:f8:58:1d:bb:56:
         22:26:4a:86:e7:5d:14:bc:18:4c:01:4b:2f:7e:10:30:28:f3:
         43:b7:ba:5f:ea:8c:ac:5a:4b:d8:aa:81:95:e2:c0:6a:2c:ba:
         e2:eb:31:10:f9:eb:d9:17:fe:ac:ef:e2:7f:02:21:54:4e:2a:
         bb:60:a3:8c:29:fe:b1:67:57:0c:e3:aa:db:85:df:6a:d5:f3:
         55:2e:44:7e:88:a3:0a:36:c3:66:cc:cc:f0:42:74:48:d1:4d:
         21:aa:8a:ab:e2:52:49:f6:96:6b:ca:35:f9:b1:bd:3f:8f:c5:
         a8:eb:f9:fa:aa:8c:fe:1e:34:59:75:fc:05:fc:96:73:30:2d:
         f0:58:f7:10:12:87:2e:c2:bd:38:5d:bb:91:0f:6d:50:f8:c8:
         a2:76:18:23:f5:c0:49:f4:af:7c:c6:c7:5b:c2:1b:29:a7:90:
         cb:ce:ed:20:60:74:87:9c:08:70:e4:89:74:4d:3f:29:3e:63:
         c6:20:aa:89:b9:79:c4:c0:e5:31:84:2d:39:32:71:d7:f9:2a:
         00:44:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org