Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a343830303a3a2f34302d3430203d3e203237393531.roa
File:                     323830303a3439303a343830303a3a2f34302d3430203d3e203237393531.roa (raw, json)
Hash identifier:          xZR22r90wdvGisq3H35njDKydZJIB7unXCOMiXO+W6U=
Subject key identifier:   81:5C:C4:0E:72:74:A8:0F:EF:3E:AE:E8:FC:4B:C1:6D:5D:D8:97:C8
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       1A28FC9D16835AF3EB65C658AFBEB828AF20CD43
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a343830303a3a2f34302d3430203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:02:40 +0000
ROA not before:           Tue 05 Mar 2024 17:57:40 +0000
ROA not after:            Tue 04 Mar 2025 18:02:40 +0000
asID:                     27951
IP address blocks:        2800:490:4800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:28:fc:9d:16:83:5a:f3:eb:65:c6:58:af:be:b8:28:af:20:cd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:40 2024 GMT
            Not After : Mar  4 18:02:40 2025 GMT
        Subject: CN=815CC40E7274A80FEF3EAEE8FC4BC16D5DD897C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:fc:d3:02:ab:be:81:8b:d1:fc:52:8d:ed:
                    4f:83:7a:97:75:70:06:5c:b2:f4:1b:d3:c3:a7:18:
                    c1:44:a3:99:26:71:5a:5c:a9:58:1d:2f:5d:7c:4f:
                    c9:07:71:da:93:59:49:6d:67:87:1f:d7:f8:ae:19:
                    16:69:79:79:9a:e7:ef:19:28:3e:bf:25:4a:83:94:
                    e7:3d:b0:cd:bf:76:17:34:3c:96:84:6f:29:78:2a:
                    db:7f:28:47:b6:09:d5:ef:d0:b0:23:74:6a:64:fa:
                    a1:d6:75:ab:74:22:f3:7f:46:2a:17:5e:7c:d9:35:
                    d4:03:eb:72:63:9f:f6:67:08:cc:b7:37:a4:27:a9:
                    62:cd:7d:19:1d:ab:85:09:5d:e2:5c:23:c6:6c:77:
                    b0:c1:fa:c4:75:de:04:71:3d:ec:2d:07:cc:c3:a3:
                    51:81:4d:2e:e7:c0:17:bd:8f:77:bb:06:db:4f:74:
                    a7:5f:34:e6:2d:cb:8c:66:d8:d4:8d:80:55:2c:16:
                    52:2d:4e:01:5d:23:30:9c:83:a3:d6:26:2b:42:6c:
                    a5:31:e7:53:c8:44:71:eb:ea:2f:9b:b9:35:66:a4:
                    b7:c1:f0:02:d1:28:85:1c:ef:f3:39:bc:c0:bd:bf:
                    c2:87:aa:03:36:10:ea:d9:f0:36:a5:50:25:a7:d2:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5C:C4:0E:72:74:A8:0F:EF:3E:AE:E8:FC:4B:C1:6D:5D:D8:97:C8
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a343830303a3a2f34302d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:76:34:13:9a:be:06:75:6e:c5:ae:5a:b6:95:ef:9b:4d:
         f6:54:94:f1:9a:8a:14:c6:2e:76:a7:bc:da:53:e5:da:c1:16:
         c2:00:7d:36:fa:99:57:11:82:bb:5a:a2:da:d6:0f:bf:cf:2d:
         a2:58:3a:a4:fe:79:30:f0:8f:b8:43:c2:65:b4:5b:65:1d:fb:
         03:b8:ad:cd:99:bc:e9:75:75:bc:fc:7c:a6:a4:74:b3:2d:ea:
         b0:04:82:02:5e:93:eb:a5:b1:f8:a2:06:1d:89:de:e0:fd:da:
         e0:c5:c0:cb:e0:7f:28:98:dd:c4:48:08:f6:ce:c5:15:2d:e0:
         21:d9:2a:99:13:88:e2:86:98:ca:73:61:cc:32:5f:81:c1:df:
         c4:54:f5:e7:10:31:5b:c5:cb:27:bb:30:e2:e4:e0:63:07:8b:
         38:61:64:9f:5f:88:1d:96:52:2b:ff:a7:aa:8e:7e:0e:07:ca:
         13:96:8f:4c:65:b4:68:a0:ae:52:82:17:fa:8c:c5:92:2c:64:
         00:74:6e:c7:35:9a:e7:b6:f8:65:b7:b1:b1:e3:37:f4:d8:77:
         f2:55:c7:30:55:e6:1d:f3:73:35:12:3b:67:93:e9:dd:2a:33:
         38:70:c0:53:7b:8c:c3:d4:9d:20:9d:ae:0f:6e:99:b3:d4:57:
         cc:ec:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:19:01 2024 by rpki-client on console-ams.rpki-client.org