Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313032303a3a2f34382d3438203d3e203631343936.roa
File:                     323830303a3131303a313032303a3a2f34382d3438203d3e203631343936.roa (raw, json)
Hash identifier:          LkY8rDVmOodWiBAsy2BdQYLGOVMkcM02zvtAj2HE2lc=
Subject key identifier:   B2:5C:25:A4:E5:93:CA:77:D7:B2:67:EA:C4:EF:A0:99:AD:5E:9A:BA
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       09985C06676C5E2673321198367C543A0BB2C331
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313032303a3a2f34382d3438203d3e203631343936.roa
Signing time:             Tue 05 Mar 2024 18:22:50 +0000
ROA not before:           Tue 05 Mar 2024 18:17:50 +0000
ROA not after:            Tue 04 Mar 2025 18:22:50 +0000
asID:                     61496
IP address blocks:        2800:110:1020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:98:5c:06:67:6c:5e:26:73:32:11:98:36:7c:54:3a:0b:b2:c3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:50 2024 GMT
            Not After : Mar  4 18:22:50 2025 GMT
        Subject: CN=B25C25A4E593CA77D7B267EAC4EFA099AD5E9ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:69:06:0d:25:90:bd:20:50:2e:0e:1b:65:
                    e0:c3:6d:54:a0:c3:ba:9d:c0:e3:5b:2d:7d:ff:a8:
                    4f:c8:a1:29:6d:d8:2e:0d:21:0b:54:90:6b:ec:3d:
                    1d:ef:1c:68:eb:cb:3e:df:3f:c5:c9:91:60:b1:d5:
                    16:c6:d0:c5:ad:08:a9:00:52:4c:82:64:32:7f:a6:
                    a6:85:ee:12:b4:c4:c7:f8:cf:0f:29:58:9d:1a:af:
                    cc:5d:bb:07:34:e5:cb:f1:69:75:fb:a9:4e:d0:53:
                    98:47:77:63:3c:56:b8:22:c5:5a:6e:c2:46:3b:2b:
                    f6:05:cd:ab:e7:cd:31:01:15:a2:59:83:27:82:72:
                    68:fd:98:03:c2:c8:ae:6f:29:c8:bd:41:eb:fa:eb:
                    13:a7:7a:00:69:dc:90:07:a9:dd:a5:a9:fd:a8:cc:
                    ed:73:d0:b8:54:65:02:7c:4a:64:ce:bb:88:cd:37:
                    c7:f1:f8:b8:d9:f2:ef:9b:a7:92:fe:76:9e:23:00:
                    fb:88:83:8b:55:e6:7e:ef:5e:69:3f:f2:44:dc:72:
                    5b:48:ea:25:59:b0:6e:14:80:2d:2b:16:40:c9:44:
                    f9:36:35:51:15:62:56:24:08:e7:da:bc:50:e4:4e:
                    17:c2:7a:f1:d1:04:75:07:83:13:f6:64:a5:aa:4e:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:25:A4:E5:93:CA:77:D7:B2:67:EA:C4:EF:A0:99:AD:5E:9A:BA
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a313032303a3a2f34382d3438203d3e203631343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110:1020::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:f1:79:47:8d:fc:fc:2d:d0:17:9a:5e:35:80:21:e8:31:18:
         a3:a9:44:61:99:d6:95:15:d9:c9:15:a5:a4:c2:b4:d0:83:89:
         38:05:4b:db:97:31:cd:cb:18:82:d6:7b:94:62:04:80:c2:b5:
         92:77:e6:f1:70:32:13:fc:5b:a3:06:a7:e9:28:f0:59:39:0a:
         8e:e2:cd:88:78:3c:e0:8d:6f:4c:4b:6a:20:04:a5:ac:1e:58:
         f3:df:ca:65:f0:7f:ff:02:a5:14:14:fd:1c:50:82:45:de:0b:
         a7:3e:16:ff:2b:4d:81:de:9f:cb:1a:9d:ac:83:b9:7b:33:e3:
         65:ab:05:55:eb:b6:e3:2f:c0:08:8e:87:fc:33:f9:20:89:00:
         6d:1a:33:9a:ef:a0:46:11:e5:05:65:61:da:73:37:1f:fe:b0:
         f5:5e:3b:31:21:fd:a4:97:5b:7e:9d:9d:06:7b:e3:12:ca:54:
         13:ac:3c:3c:c1:ab:9e:e9:34:7a:62:23:eb:83:fa:70:8b:5c:
         d9:13:23:f4:d5:8a:76:69:15:6a:88:c9:a0:3c:57:5a:19:2e:
         3f:57:f6:e7:32:7b:fd:c2:89:c9:ed:57:79:f6:2c:77:98:b8:
         f8:fa:3c:f5:ef:f6:d6:a6:54:0e:27:bf:f1:3b:2d:b5:f7:7d:
         53:56:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:38:05 2024 by rpki-client on console-fra.rpki-client.org