Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa
File:                     323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa (raw, json)
Hash identifier:          Aq0Epf1L8Udbv/NzWmoVOsapEqGRiZYG3ffraLoPvtI=
Subject key identifier:   C4:85:DA:A5:45:0A:5E:81:F7:6F:41:77:CB:CA:C5:31:00:40:88:17
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       52CF8F1AF762B8CF941C304F1142AD288895A4D2
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa
Signing time:             Tue 05 Mar 2024 18:02:50 +0000
ROA not before:           Tue 05 Mar 2024 17:57:50 +0000
ROA not after:            Tue 04 Mar 2025 18:02:50 +0000
asID:                     269836
IP address blocks:        2800:490:e000:f200::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cf:8f:1a:f7:62:b8:cf:94:1c:30:4f:11:42:ad:28:88:95:a4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:50 2024 GMT
            Not After : Mar  4 18:02:50 2025 GMT
        Subject: CN=C485DAA5450A5E81F76F4177CBCAC53100408817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:24:44:50:4a:08:61:f3:a2:58:1e:62:0a:
                    cd:d2:16:da:7e:63:4f:d5:ee:8b:02:2d:3b:4b:36:
                    13:36:74:62:c1:80:97:c0:4d:51:1d:f6:8e:74:b7:
                    f9:7e:5c:29:47:5f:10:61:48:d2:7d:02:0d:80:a9:
                    c3:88:ee:24:e9:7e:0a:bf:af:50:53:02:e5:2b:30:
                    2d:d4:09:16:a8:78:6c:b1:34:91:f1:63:88:48:01:
                    0f:c7:40:96:00:ff:3d:eb:ea:73:3f:aa:f5:1b:c5:
                    f5:71:bd:a9:af:f6:11:5c:b5:39:89:38:9d:68:c6:
                    66:e4:0e:4e:7d:db:58:80:54:13:94:e6:0b:a6:df:
                    c4:3e:70:f2:0e:5d:a0:b1:6b:79:34:de:46:3d:ff:
                    9d:fd:05:f3:f8:a2:09:06:59:e8:3d:c6:b7:fb:9a:
                    4d:9b:21:95:37:6a:3b:1f:1a:4b:7c:4e:6f:41:3e:
                    62:f7:b6:fc:94:8a:56:e6:ef:cd:31:38:c0:77:79:
                    cd:61:8a:e8:ca:a0:84:94:a2:cc:89:75:9e:d5:a1:
                    c6:ff:3e:d3:13:a7:d2:93:08:1c:4b:1a:5d:6f:ab:
                    22:53:37:19:4c:8d:0a:62:24:e0:cd:f8:5f:84:57:
                    ad:d0:de:7c:92:8c:af:a0:2c:8e:e1:4d:80:6a:fb:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:85:DA:A5:45:0A:5E:81:F7:6F:41:77:CB:CA:C5:31:00:40:88:17
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653030303a663230303a3a2f35362d3536203d3e20323639383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:e000:f200::/56

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:11:63:49:c9:8b:80:91:8f:90:a7:ad:2f:b1:e9:64:66:
         b3:46:2e:5f:e2:d3:8f:68:ce:55:45:8f:91:d2:5d:61:40:ff:
         aa:0b:86:d1:a9:ed:af:f9:bc:29:c8:f9:fe:96:c5:23:c9:41:
         97:0f:bc:58:a3:c9:e9:86:de:f5:53:c5:40:2e:ea:d8:ae:e4:
         a9:90:84:4c:36:1a:8a:eb:7b:0f:dc:c0:b0:de:91:87:0c:29:
         64:a0:fa:30:01:6a:1e:34:f0:a0:0b:d8:73:2b:34:78:14:be:
         e9:87:7f:56:13:ab:bf:a4:12:ab:45:cc:d6:9a:f5:a5:61:fc:
         d5:30:6f:29:f5:47:2a:9e:6d:75:d9:09:a7:ad:1c:bc:63:5c:
         56:f7:39:91:67:66:21:2b:7b:f5:ef:c3:5d:e6:4f:71:f4:03:
         d6:3e:7d:cc:e4:6b:49:1b:3a:17:80:52:7b:fb:33:53:9a:3e:
         94:30:68:b7:2a:9e:dc:f3:f1:06:64:75:11:7d:f1:f3:33:01:
         14:4d:01:65:96:b6:90:83:c1:17:8f:ca:91:fd:4d:3a:f3:c4:
         a8:f6:32:12:eb:73:30:80:2f:7f:83:f8:20:6a:80:69:9a:02:
         1f:45:cf:92:f4:fa:5d:3b:02:fc:91:a6:24:fc:47:17:11:a1:
         ce:88:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org