Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa
File:                     323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa (raw, json)
Hash identifier:          KvT8Zh2gGBRRfHt3M7IW54Ec78HycA0I00MpixEhjHE=
Subject key identifier:   29:C7:5F:C3:1C:EC:AA:3B:A8:05:98:F1:02:9B:6C:D1:8E:97:A6:54
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       173C288B78539A69CA30E78875807FCA24F93C6A
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:02:49 +0000
ROA not before:           Tue 05 Mar 2024 17:57:49 +0000
ROA not after:            Tue 04 Mar 2025 18:02:49 +0000
asID:                     27951
IP address blocks:        2800:490:e800::/39 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3c:28:8b:78:53:9a:69:ca:30:e7:88:75:80:7f:ca:24:f9:3c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:49 2024 GMT
            Not After : Mar  4 18:02:49 2025 GMT
        Subject: CN=29C75FC31CECAA3BA80598F1029B6CD18E97A654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:76:67:b7:06:68:5a:56:7f:d3:c2:81:f3:
                    59:16:e6:b8:93:e2:8f:8f:12:3a:a3:77:e6:74:f8:
                    5e:dc:a9:1d:5e:3d:09:8a:aa:66:b9:2e:c1:e3:ef:
                    70:66:b6:37:3c:5d:02:02:aa:97:9a:ef:63:51:86:
                    d9:20:22:a4:9f:55:f5:bc:96:04:5a:d2:6c:d2:88:
                    2b:23:88:d9:d5:18:8e:68:b3:81:20:df:25:8d:92:
                    37:65:11:fc:ea:22:e6:be:ef:a7:68:57:86:35:9e:
                    c2:01:27:59:e1:c3:9d:a4:21:a8:f2:df:2c:a5:35:
                    30:68:03:4e:53:7d:ed:b6:3d:24:3a:80:ba:1c:42:
                    b1:f9:77:c3:d9:70:b7:3f:1e:ee:df:65:d5:58:ce:
                    aa:bb:a9:14:88:3f:e6:66:34:76:d9:52:64:47:6c:
                    6a:d7:eb:7d:9c:5e:66:25:be:68:e6:c6:4c:dd:73:
                    b7:66:50:4d:06:77:28:14:5a:83:8f:65:c9:5b:61:
                    a2:d3:6d:e5:0c:1e:55:36:f0:d8:68:ee:34:22:bf:
                    5d:0e:e6:ae:d4:c5:b2:d0:26:6c:27:d4:04:3a:e1:
                    01:c6:cf:6e:56:6c:c5:65:10:85:85:0d:9b:55:77:
                    85:67:09:73:6b:b3:74:e4:2b:35:33:d5:2c:94:bd:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C7:5F:C3:1C:EC:AA:3B:A8:05:98:F1:02:9B:6C:D1:8E:97:A6:54
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/323830303a3439303a653830303a3a2f33392d3430203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:e800::/39

    Signature Algorithm: sha256WithRSAEncryption
         97:e4:ca:0c:c7:02:c9:c7:19:ba:4a:4a:f2:fb:98:9e:74:27:
         ce:9b:a3:26:43:1a:11:32:21:03:bd:93:5b:e2:37:4f:e8:ef:
         1a:3a:82:16:9b:9f:cf:b7:cc:df:97:ce:60:cc:32:ef:45:52:
         4b:a4:08:57:76:b0:80:80:2f:02:2d:f4:3b:a2:91:ac:d4:38:
         89:04:77:bb:aa:1d:8f:ef:42:46:f7:72:70:32:0a:22:77:b2:
         91:b7:62:2f:e0:95:1f:8c:6d:0f:c4:de:9a:53:fe:eb:3a:c9:
         92:d6:42:da:23:e1:3a:3f:89:c3:67:97:6e:28:3a:72:2e:17:
         54:79:29:80:db:59:16:50:8e:73:f2:13:ad:b0:32:76:16:27:
         61:4f:42:9b:20:46:0a:36:83:a9:f5:6c:c3:dd:6b:63:a0:5a:
         65:1e:56:f0:4a:c2:e0:40:75:e3:c2:45:97:8f:c2:4c:1d:9d:
         5e:51:99:88:b5:cf:62:c9:55:e8:e1:9b:3e:c4:53:b2:23:7c:
         69:0c:f5:49:2b:c7:94:d1:24:46:8a:28:52:90:67:f7:14:5b:
         98:ee:b6:46:62:cd:2f:10:14:74:24:bd:57:62:27:a2:ac:1a:
         ed:8e:1d:3c:a4:28:5f:f2:9a:86:bf:71:3f:e3:73:a3:89:41:
         29:f4:5c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:41:08 2024 by rpki-client on console-fra.rpki-client.org