Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/323830313a31633a333030323a3a2f34382d3438203d3e20323635383430.roa
File:                     323830313a31633a333030323a3a2f34382d3438203d3e20323635383430.roa (raw, json)
Hash identifier:          2msjSbRal9VbqWwfEwhVkHfo/+raUthXTfkAsgDfdEw=
Subject key identifier:   3E:A5:A5:E0:31:B2:A2:B8:3A:56:A6:EA:B9:02:DE:4C:AB:83:82:FF
Certificate issuer:       /CN=D5752923966F847D0B5CFFF17C8C51A4E595421C
Certificate serial:       0FC2B37230845ABB254E24E64143E1B5E6142404
Authority key identifier: D5:75:29:23:96:6F:84:7D:0B:5C:FF:F1:7C:8C:51:A4:E5:95:42:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/323830313a31633a333030323a3a2f34382d3438203d3e20323635383430.roa
Signing time:             Tue 05 Mar 2024 18:10:10 +0000
ROA not before:           Tue 05 Mar 2024 18:05:10 +0000
ROA not after:            Tue 04 Mar 2025 18:10:10 +0000
asID:                     265840
IP address blocks:        2801:1c:3002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c2:b3:72:30:84:5a:bb:25:4e:24:e6:41:43:e1:b5:e6:14:24:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5752923966F847D0B5CFFF17C8C51A4E595421C
        Validity
            Not Before: Mar  5 18:05:10 2024 GMT
            Not After : Mar  4 18:10:10 2025 GMT
        Subject: CN=3EA5A5E031B2A2B83A56A6EAB902DE4CAB8382FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:b0:db:4f:24:13:b9:4d:61:e0:26:fb:d5:
                    8c:4c:68:2f:f9:2b:d0:03:d3:1f:d4:aa:5f:16:b5:
                    c1:73:03:a8:97:72:9c:da:32:06:18:5c:aa:0a:c8:
                    75:c9:ee:18:9b:5b:43:c8:2b:cb:d3:03:cd:17:fe:
                    21:37:42:ee:39:b0:92:f9:04:23:fa:81:a4:52:cc:
                    90:b3:1b:6c:c9:da:27:be:e7:44:8f:71:6d:c9:df:
                    40:c1:b6:bc:66:c8:a7:f4:6a:69:f6:6f:c2:dc:75:
                    dd:8d:fe:6f:d7:3f:c3:b6:5c:c7:f4:eb:9d:9e:06:
                    ef:b9:76:e8:63:b4:29:28:76:75:a6:a0:b6:be:0b:
                    86:e0:24:e2:0c:de:b9:da:6d:af:50:51:20:11:fc:
                    f4:21:34:9e:83:47:73:1b:8a:be:af:eb:c4:c8:ac:
                    33:ef:8e:1d:99:56:bc:bf:73:3d:54:db:8e:49:0d:
                    9f:9f:48:56:a9:d7:1b:13:af:70:55:62:00:6b:82:
                    66:59:4e:8c:1b:5c:00:d1:e5:4d:74:96:bd:27:0e:
                    e6:7d:3c:09:bc:5f:5b:29:36:47:cf:af:92:8c:99:
                    54:16:99:6b:6e:d4:d5:5c:e3:6a:40:04:f3:17:a4:
                    53:e1:d9:e3:01:c8:da:5d:3f:08:de:42:64:f7:ea:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A5:A5:E0:31:B2:A2:B8:3A:56:A6:EA:B9:02:DE:4C:AB:83:82:FF
            X509v3 Authority Key Identifier:
                keyid:D5:75:29:23:96:6F:84:7D:0B:5C:FF:F1:7C:8C:51:A4:E5:95:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/323830313a31633a333030323a3a2f34382d3438203d3e20323635383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:3002::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:2f:bf:e6:b5:c5:c7:c8:bf:8f:e4:6d:e8:d1:0f:d4:5f:
         52:f0:e8:5e:f8:47:83:c2:65:80:75:c2:91:6d:fe:de:5c:5e:
         a8:66:f7:8d:58:38:5c:4d:89:e0:a8:06:69:97:82:93:da:aa:
         f8:f3:40:ef:6f:4f:82:d3:0e:56:42:03:99:9f:fb:f0:e0:60:
         ca:43:5e:28:28:81:dc:03:45:09:a5:a4:4b:b7:8c:a3:1d:89:
         86:d3:6b:31:16:34:14:51:bb:ec:cd:3b:87:8a:6b:07:48:29:
         f9:f3:06:83:be:68:57:e5:ad:96:03:3e:2f:5a:dd:37:e1:6c:
         07:80:37:e3:c9:56:86:1e:ae:3b:a1:94:bf:15:a5:4e:63:71:
         f7:79:7a:8d:69:85:fb:e0:0b:30:13:b5:2c:95:f8:92:d5:f7:
         de:a9:c1:ce:6d:df:30:f9:b1:56:10:7b:e0:5e:00:0c:ab:41:
         64:29:eb:e9:24:56:15:2e:9b:94:7a:b1:23:77:08:23:1a:25:
         73:3d:31:0e:e8:44:65:5b:53:83:cd:d3:77:57:63:64:a9:80:
         a6:89:91:91:1c:b6:5a:f0:59:ff:a0:75:7f:81:d9:84:23:5a:
         14:ed:5e:3a:62:44:01:92:25:5b:67:10:f8:2f:2d:93:45:30:
         00:07:09:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org