Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a633830303a313130303a3a2f35362d3536203d3e20323639383336.roa
File:                     323830303a3439303a633830303a313130303a3a2f35362d3536203d3e20323639383336.roa (raw, json)
Hash identifier:          8zpXBrbEeAckQcgSB5hBjBD+8IVdEQVx87M6idnVft8=
Subject key identifier:   0A:42:55:81:E1:16:93:3D:4D:0E:6E:EE:E9:76:6B:EF:35:C3:21:09
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       5375531CB34CE07BF3A70789895E1F9F93B8B141
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a633830303a313130303a3a2f35362d3536203d3e20323639383336.roa
Signing time:             Tue 05 Mar 2024 18:02:37 +0000
ROA not before:           Tue 05 Mar 2024 17:57:37 +0000
ROA not after:            Tue 04 Mar 2025 18:02:37 +0000
asID:                     269836
IP address blocks:        2800:490:c800:1100::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:75:53:1c:b3:4c:e0:7b:f3:a7:07:89:89:5e:1f:9f:93:b8:b1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:37 2024 GMT
            Not After : Mar  4 18:02:37 2025 GMT
        Subject: CN=0A425581E116933D4D0E6EEEE9766BEF35C32109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:17:70:83:58:fe:57:6d:9a:08:b7:39:1a:
                    f7:18:09:5f:87:fb:6c:bc:ef:f4:26:89:44:10:f3:
                    57:6a:62:4e:c1:e1:5f:db:c3:1e:e6:bc:a7:85:c2:
                    00:d5:6b:77:b8:c8:ee:04:a1:6b:97:02:4d:a6:e0:
                    7e:7e:3d:36:1d:be:05:40:9a:c2:4e:56:e8:c5:d1:
                    70:a1:8b:fd:ea:a9:85:6f:3d:b9:72:32:04:e3:b4:
                    61:8a:7f:e0:81:fa:04:20:78:bc:af:18:ee:6e:61:
                    68:4c:12:d7:30:0e:ab:a3:d6:70:94:db:cc:22:fd:
                    31:42:be:ac:f3:36:34:98:7d:e5:ca:19:73:ad:36:
                    51:ac:3e:83:4b:1d:01:53:44:f5:53:71:d5:66:cc:
                    e2:2c:e7:ac:a8:24:22:1c:3c:42:ff:f4:ad:e1:dc:
                    78:f4:ed:ad:16:61:8d:eb:8c:d7:7e:80:38:a2:c0:
                    ca:8e:81:6c:1c:c1:7c:c8:36:48:39:28:9f:4f:c4:
                    99:1f:f2:8d:56:b0:f0:55:78:67:66:f6:9e:a5:bd:
                    93:63:75:b3:57:9f:99:10:49:30:b3:30:55:cc:9d:
                    0b:35:96:4b:1e:5f:50:ea:ab:f4:d3:71:85:0d:fc:
                    aa:7e:b2:3e:48:2b:25:6d:c5:77:5e:9a:27:4a:19:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:42:55:81:E1:16:93:3D:4D:0E:6E:EE:E9:76:6B:EF:35:C3:21:09
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a633830303a313130303a3a2f35362d3536203d3e20323639383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:c800:1100::/56

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:24:1e:aa:c1:81:2d:73:e3:6a:d0:e1:7a:fe:0d:67:08:
         a0:ba:04:1e:ea:95:b1:4c:6b:df:21:eb:bc:9c:ca:54:ab:90:
         c8:32:b9:04:2d:a8:6f:5a:d7:05:00:0b:cb:e7:51:cb:e9:4c:
         e6:aa:76:9e:9e:a0:1b:63:a9:e8:d0:00:16:ba:64:88:73:18:
         a7:45:63:a7:83:20:d2:27:97:79:65:db:7d:5e:4e:ae:2d:1b:
         06:51:d6:bb:d7:06:b1:7a:b9:a0:49:76:a2:83:41:5d:e0:ac:
         2a:c3:2a:35:8b:0b:65:29:5f:bb:6f:bd:5f:b2:fb:ed:b0:c4:
         08:ea:eb:b4:32:5d:fa:83:42:43:e7:6e:fa:88:fa:be:cf:ad:
         65:65:f6:39:a3:f1:4f:02:20:70:0d:99:7a:f5:5a:69:79:84:
         4c:33:9b:f4:36:3b:24:da:e7:9a:fd:5d:1f:c3:2e:2a:d4:b9:
         e9:8e:15:c2:25:59:6b:75:11:bb:91:9e:6c:50:8f:1c:da:50:
         2b:5b:a8:25:94:0b:00:3d:3e:cf:e2:99:12:2e:2b:9d:15:a4:
         6f:69:49:8b:d3:19:a1:3c:73:7a:df:47:fd:ec:8b:96:72:16:
         bb:1d:c3:26:b7:05:ce:ce:65:0f:1e:d9:bf:2e:e6:eb:94:92:
         17:a2:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org