Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa
File:                     323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa (raw, json)
Hash identifier:          0WpgKQuT20h4FlesDGt8XiO6u0LbqCuUi0+Wzo8MqsM=
Subject key identifier:   D7:60:C3:A7:1A:00:58:02:DA:65:B6:2C:33:C3:A9:87:F5:1C:29:09
Certificate issuer:       /CN=5EBCF17E06528C616B6957551981653EE0748D3C
Certificate serial:       60DBA6E952EE3028E72BCB76BAB3FA5C99371686
Authority key identifier: 5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa
Signing time:             Tue 05 Mar 2024 18:18:48 +0000
ROA not before:           Tue 05 Mar 2024 18:13:48 +0000
ROA not after:            Tue 04 Mar 2025 18:18:48 +0000
asID:                     267854
IP address blocks:        2801:13:800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:db:a6:e9:52:ee:30:28:e7:2b:cb:76:ba:b3:fa:5c:99:37:16:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBCF17E06528C616B6957551981653EE0748D3C
        Validity
            Not Before: Mar  5 18:13:48 2024 GMT
            Not After : Mar  4 18:18:48 2025 GMT
        Subject: CN=D760C3A71A005802DA65B62C33C3A987F51C2909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:b8:11:68:f3:c1:8f:9e:ec:e4:a3:23:88:
                    6d:ec:0b:bc:9e:17:1f:1b:c3:0f:45:4e:97:a2:88:
                    a5:16:90:96:42:b4:0c:0f:63:0e:a5:ad:6c:5b:b5:
                    22:a9:6f:ed:df:6e:6f:b1:1f:d8:13:ab:9e:d1:24:
                    4f:ed:f9:48:06:ce:9b:b5:3a:b4:3f:f7:fc:c5:8c:
                    19:8c:03:16:ea:bf:9f:89:ea:65:48:ce:49:1e:15:
                    22:32:e1:c0:d1:ed:d4:e5:02:1a:70:c1:a5:b9:01:
                    a2:8d:34:7c:e0:44:96:d9:cf:fa:f3:44:3b:87:db:
                    07:86:fb:09:33:f2:b2:d4:54:93:4c:e6:ed:68:92:
                    05:c9:76:7c:86:b5:54:97:4a:7a:2f:65:4e:73:f4:
                    2f:cd:62:d9:a7:d7:2e:3f:47:63:a5:cb:13:c6:68:
                    08:43:46:0a:4a:9c:9c:ff:8d:3d:80:7e:51:56:d4:
                    f9:47:a5:7c:35:0a:cf:0f:07:40:26:29:51:12:e5:
                    ce:33:a4:af:f0:3f:e8:64:93:e5:91:f4:74:f7:cf:
                    32:cb:6b:01:c9:dd:52:37:55:20:c2:85:00:5b:05:
                    d0:ab:04:ac:e2:20:56:bf:64:df:47:a2:f5:ea:7e:
                    c1:87:d8:6f:a6:a8:f8:22:ae:9e:f3:ac:0c:e2:11:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:C3:A7:1A:00:58:02:DA:65:B6:2C:33:C3:A9:87:F5:1C:29:09
            X509v3 Authority Key Identifier:
                keyid:5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/323830313a31333a3830303a3a2f34382d3438203d3e20323637383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:36:e6:c7:23:80:63:67:95:12:28:e2:d1:79:00:c0:e7:2f:
         40:93:cd:5c:17:93:4c:2a:3f:72:71:fc:4b:61:4d:78:cd:74:
         e4:53:03:a8:1e:d3:d1:e5:2f:25:f1:73:0b:f1:dc:d8:9e:d4:
         53:ad:7d:b6:3f:70:4b:00:a4:89:9b:d4:54:46:9f:72:33:37:
         62:9b:f6:ee:28:a5:ce:7c:2d:7d:76:d2:56:8c:38:a1:3a:40:
         0f:44:90:56:89:9e:fb:66:33:d0:7d:2b:9d:5a:f6:ef:bd:cf:
         71:cc:1d:ed:0a:40:a4:00:78:b0:e1:50:73:91:13:f9:46:51:
         63:41:54:c8:7d:10:de:bc:9d:96:6d:3b:48:1e:9d:d0:40:02:
         3b:47:28:1d:df:4e:29:e6:59:d4:a6:17:5d:77:fa:56:18:c5:
         7b:8c:1e:9f:8c:46:2a:56:34:13:61:9b:be:63:93:10:56:4b:
         20:ab:c1:e2:a8:bb:6c:c7:f6:fb:d1:78:f4:de:d5:9c:99:3b:
         c4:9d:0e:3c:68:02:1d:23:c9:15:40:bd:cf:ba:7b:aa:aa:91:
         5f:0c:94:74:01:15:2b:03:f7:b0:d1:1a:2f:54:74:ca:f4:d9:
         a6:c9:db:53:1d:79:f9:18:22:fe:17:39:74:7b:e1:5f:05:1b:
         37:bb:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org