Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383430303a3a2f34302d3430203d3e203237393531.roa
File:                     323830303a3439303a383430303a3a2f34302d3430203d3e203237393531.roa (raw, json)
Hash identifier:          b0y6AcXpE/OWE+dMdpoqzIMBIXI9xQLxCrHeE2eipEg=
Subject key identifier:   95:10:83:87:13:85:90:96:77:44:13:B6:D1:25:02:10:B1:DD:3A:66
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       4F1BA2C56870E9B58D4C72A06C121E07B02AF15D
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383430303a3a2f34302d3430203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:02:43 +0000
ROA not before:           Tue 05 Mar 2024 17:57:43 +0000
ROA not after:            Tue 04 Mar 2025 18:02:43 +0000
asID:                     27951
IP address blocks:        2800:490:8400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1b:a2:c5:68:70:e9:b5:8d:4c:72:a0:6c:12:1e:07:b0:2a:f1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:43 2024 GMT
            Not After : Mar  4 18:02:43 2025 GMT
        Subject: CN=9510838713859096774413B6D1250210B1DD3A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c1:b6:7b:bf:cd:06:15:03:c0:e1:41:57:a1:
                    a7:7e:7a:0a:2a:59:25:d3:eb:56:ba:71:be:4f:85:
                    03:0a:56:f1:fa:fc:42:af:26:24:4a:04:54:8e:60:
                    82:2f:35:f7:de:5a:84:06:b7:65:7e:02:18:6f:36:
                    e7:e9:b0:55:4f:18:58:f4:e0:76:bd:9e:7a:5c:fe:
                    28:8b:72:ac:f0:c8:78:69:c1:98:12:ba:7b:dd:54:
                    13:db:b0:7f:c7:3b:36:22:49:c3:64:5a:fa:ef:69:
                    b5:43:04:60:13:52:78:5b:e6:93:f2:99:c1:a0:fc:
                    7e:b6:fb:86:31:21:54:af:85:dc:33:64:09:99:dc:
                    8d:a0:13:6f:cd:e5:40:f6:3a:ea:6e:0e:b0:d4:0b:
                    ef:47:fa:d0:d4:f9:a4:47:5b:67:10:a9:d7:57:5c:
                    c1:0c:ac:18:ff:92:c8:b6:87:15:3e:dd:78:36:63:
                    c1:cb:35:78:c9:0a:64:fa:5b:7e:d4:82:f3:06:7c:
                    2b:de:67:8d:1f:dd:b0:61:ac:ff:16:15:80:ff:32:
                    85:1b:bc:b7:fa:a5:43:9e:d4:00:45:89:f0:85:3d:
                    f3:60:3f:d3:84:d9:2e:09:70:26:ea:49:7e:c7:2b:
                    20:5d:7a:93:4d:64:75:70:54:d2:54:0d:21:de:02:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:10:83:87:13:85:90:96:77:44:13:B6:D1:25:02:10:B1:DD:3A:66
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a383430303a3a2f34302d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:4f:e1:34:84:91:3f:8e:b1:25:5d:89:b4:4c:a7:17:8c:f5:
         80:d0:b4:e7:48:70:b1:0f:87:a4:42:df:04:ea:c2:79:e8:5f:
         78:a9:3c:81:b4:37:7f:5a:f2:63:a0:9f:03:f1:8a:af:c3:7c:
         9a:fb:44:8d:ca:97:9d:cc:7c:93:10:f6:6c:37:fe:00:69:f2:
         10:90:8a:1a:b1:69:5e:c7:61:db:69:a1:60:2d:c9:f0:eb:dc:
         0d:97:a9:28:a4:0a:3d:7f:bf:9a:82:d4:7d:aa:7f:d7:63:01:
         bf:7b:da:67:db:e5:17:0a:b5:60:1f:d4:d2:ea:ad:25:e6:6c:
         1c:8c:b2:3e:61:6e:23:61:3c:b0:fd:c7:a8:e7:b1:67:49:95:
         76:d0:9f:a6:80:07:d4:cb:89:e4:50:1f:be:ba:03:81:34:48:
         f8:90:b6:52:bb:a9:0d:2e:01:b4:fd:8e:7e:60:5c:7b:ec:e1:
         ac:d1:63:0c:65:9e:97:bc:69:1a:ca:2d:57:2f:e7:83:e4:2b:
         51:92:c6:16:46:e1:6d:12:cd:27:58:52:5f:c3:8d:2c:08:1b:
         34:31:5a:a8:44:7b:99:80:c6:a1:6e:19:b4:f0:19:2d:eb:03:
         70:5f:d7:c1:c3:83:0a:e7:9a:8d:b0:aa:85:fc:48:66:e4:65:
         41:7f:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org