Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/323830313a31393a653030303a3a2f34382d3438203d3e203631343939.roa
File:                     323830313a31393a653030303a3a2f34382d3438203d3e203631343939.roa (raw, json)
Hash identifier:          phTTPsTogllXq4nPF7plwrl6lXwdkQuP1MqfbZbVRlA=
Subject key identifier:   DB:21:74:86:96:D3:84:EF:6C:BB:54:2E:76:F9:F3:0F:BB:2F:58:BF
Certificate issuer:       /CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
Certificate serial:       340C1676DBF645F9590545247C6DD12A009C2760
Authority key identifier: 0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/323830313a31393a653030303a3a2f34382d3438203d3e203631343939.roa
Signing time:             Tue 05 Mar 2024 17:42:14 +0000
ROA not before:           Tue 05 Mar 2024 17:37:14 +0000
ROA not after:            Tue 04 Mar 2025 17:42:14 +0000
asID:                     61499
IP address blocks:        2801:19:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0c:16:76:db:f6:45:f9:59:05:45:24:7c:6d:d1:2a:00:9c:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
        Validity
            Not Before: Mar  5 17:37:14 2024 GMT
            Not After : Mar  4 17:42:14 2025 GMT
        Subject: CN=DB21748696D384EF6CBB542E76F9F30FBB2F58BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:9e:63:29:99:93:d7:bc:2e:95:48:1c:48:
                    ea:c8:b5:70:ba:85:0c:1e:5a:d3:2b:5b:b1:f4:8d:
                    e7:02:d0:c0:62:a9:8d:aa:f7:b6:eb:fd:a2:e4:b4:
                    21:ac:25:25:15:d5:73:51:70:d8:c8:27:81:49:eb:
                    1e:12:f9:ca:b3:91:f6:4f:15:a1:40:1f:a1:c8:d6:
                    ed:2e:4c:44:68:45:a2:75:32:3e:95:bf:91:73:ba:
                    f6:cb:09:f2:ce:30:f4:3e:87:9a:6d:98:1f:1e:98:
                    7f:62:77:32:d2:09:45:66:e9:18:8d:9f:07:b8:03:
                    37:fb:cd:a4:55:98:17:87:5c:cb:98:39:7f:61:34:
                    e8:d9:16:d6:e5:ad:d2:1d:39:8c:f8:0f:6c:47:fc:
                    64:7d:c2:34:71:ab:ef:84:1d:ad:ff:1e:78:c7:17:
                    e1:5a:a4:35:11:2d:5d:28:cb:79:9a:68:88:b9:bc:
                    5f:0e:a5:e2:c9:4b:de:81:fa:97:94:0d:80:b2:0a:
                    17:96:e7:02:15:4f:8b:42:4d:7b:76:d8:2d:c2:89:
                    99:fa:1b:d6:a1:71:9b:80:67:c0:56:c1:4e:fa:f8:
                    69:11:f7:fb:8a:fc:30:e3:e3:c3:df:eb:db:ef:c6:
                    37:91:bc:27:37:cb:c6:c8:2e:f6:f0:bb:16:1b:1e:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:21:74:86:96:D3:84:EF:6C:BB:54:2E:76:F9:F3:0F:BB:2F:58:BF
            X509v3 Authority Key Identifier:
                keyid:0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/323830313a31393a653030303a3a2f34382d3438203d3e203631343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:f3:84:06:09:a6:64:db:e5:71:96:a2:42:6c:7a:26:70:76:
         b4:f4:a9:aa:2c:0f:b8:f5:35:9b:dd:29:53:57:73:10:a2:f8:
         5e:d3:f8:0f:fd:7c:3c:93:d0:ad:7a:be:a4:bf:21:31:5f:35:
         39:cc:4b:d5:5b:ec:9f:a5:62:8d:95:f8:65:bf:8f:77:ac:fa:
         b3:47:99:df:a7:47:91:62:1c:75:3c:1d:ad:dc:80:ea:50:50:
         47:59:94:15:bb:35:f4:ca:10:c4:75:ca:23:80:7e:6b:0e:56:
         68:52:ea:db:e6:e7:00:92:29:7a:0a:23:14:09:bd:89:67:69:
         4e:b9:fd:de:ae:c5:be:1b:fb:62:46:06:73:2b:77:96:4b:77:
         ba:1f:ad:63:08:88:b6:be:5d:b3:5b:3d:a9:6e:a2:bb:bc:29:
         6f:89:8d:02:0f:19:f6:86:22:34:61:09:5e:df:fd:b5:1e:ce:
         26:b0:cf:a1:c0:d8:55:9e:eb:7d:4f:a6:88:76:cb:f0:7b:16:
         e1:3d:d3:13:f7:6a:fe:21:cb:04:3e:c9:be:b7:90:f2:be:56:
         dd:91:db:1c:1a:74:34:7f:11:52:ca:3d:4b:67:2b:e6:73:06:
         a5:99:1f:5e:7f:d3:21:f2:a0:24:e3:ee:c9:0c:ca:37:0b:7d:
         bb:33:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org