Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa
File:                     323830313a303a39303a3a2f34382d3438203d3e203238313039.roa (raw, json)
Hash identifier:          F1jsmHQrl4WZ0MLhovE5a9RBg8m6VRcti9mA7hSajE8=
Subject key identifier:   E0:5D:E1:2E:3F:8B:D1:7A:16:61:2F:A9:AB:8A:10:B6:E8:F6:5F:C4
Certificate issuer:       /CN=F5FA228A2301CA3C33BD8830D58A40473348595F
Certificate serial:       15FDBBD080367228398353167A52DE6E46852E0F
Authority key identifier: F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa
Signing time:             Tue 05 Mar 2024 18:06:53 +0000
ROA not before:           Tue 05 Mar 2024 18:01:53 +0000
ROA not after:            Tue 04 Mar 2025 18:06:53 +0000
asID:                     28109
IP address blocks:        2801:0:90::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fd:bb:d0:80:36:72:28:39:83:53:16:7a:52:de:6e:46:85:2e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FA228A2301CA3C33BD8830D58A40473348595F
        Validity
            Not Before: Mar  5 18:01:53 2024 GMT
            Not After : Mar  4 18:06:53 2025 GMT
        Subject: CN=E05DE12E3F8BD17A16612FA9AB8A10B6E8F65FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:38:88:b3:1c:30:58:4f:b9:b0:14:12:9a:
                    f6:9a:c1:70:4d:76:e4:70:8d:f2:d6:61:8c:66:80:
                    32:96:25:b9:eb:f9:4f:e7:f2:07:1c:e9:ab:42:a2:
                    d6:37:7d:d3:ed:25:d2:a7:74:67:a9:fc:68:09:e6:
                    ce:92:a0:2b:ed:e1:0b:e3:00:a8:84:d2:1f:11:a4:
                    ff:4f:ad:d1:39:60:f0:0f:56:1a:ee:4e:97:d7:de:
                    a7:b6:1a:f6:1b:61:16:79:de:74:46:e3:d7:ad:58:
                    68:45:3a:ce:0f:a1:7f:18:b9:73:55:e3:ce:7d:0d:
                    02:06:3f:6d:24:05:f3:eb:92:78:fd:8b:b1:4a:33:
                    17:f7:92:62:b2:1a:92:c0:4d:80:da:d1:12:0a:e3:
                    0f:8d:02:c7:8a:02:d1:6d:7e:4c:ac:45:bc:a0:3f:
                    74:03:c5:df:65:df:95:12:83:e9:e9:70:56:b7:dc:
                    84:1e:e7:d9:4a:40:ae:da:99:f1:29:67:2b:d7:c5:
                    69:18:5e:76:95:69:9e:1b:e1:8e:e5:7f:42:ba:ae:
                    c1:86:97:04:91:84:d0:6c:5c:15:a2:17:f8:60:67:
                    04:2d:3b:89:29:46:fc:60:2e:e7:be:d1:a6:3c:cb:
                    5a:6c:92:ee:91:06:d7:cb:f5:8b:e1:97:8c:0b:57:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5D:E1:2E:3F:8B:D1:7A:16:61:2F:A9:AB:8A:10:B6:E8:F6:5F:C4
            X509v3 Authority Key Identifier:
                keyid:F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/323830313a303a39303a3a2f34382d3438203d3e203238313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:68:bd:e1:24:d4:aa:b1:77:0d:6f:bd:07:dc:62:18:57:65:
         b1:c5:98:83:46:60:60:31:02:e6:b0:31:ab:3d:1f:7d:ca:8c:
         b7:3e:a1:af:af:20:97:43:83:10:2d:47:aa:72:b0:cc:5a:d7:
         49:23:de:e0:05:4b:dd:58:18:6e:e0:22:2e:52:83:cb:0c:50:
         7d:54:63:06:21:ec:42:a5:2a:1c:bf:f8:44:ad:bf:4f:e2:9f:
         ad:68:9c:96:14:cf:a2:ac:37:98:a9:e8:30:13:e1:48:d6:d0:
         e1:26:35:d7:51:e0:9e:2f:54:9b:b7:8b:44:e2:e0:33:39:8d:
         b8:9f:45:25:05:1a:f8:68:ef:f4:0f:e9:22:6a:ed:1f:b8:bd:
         b7:1f:0d:1e:48:76:db:6b:76:28:43:f0:b1:13:e7:7c:c2:dc:
         2c:3a:78:cb:e4:a6:5e:1e:1f:04:f9:86:67:e3:e0:db:e0:98:
         66:6d:a4:bf:83:41:86:45:3d:c8:d7:d6:90:d2:0a:8d:e2:72:
         2d:ed:72:d9:ce:76:b7:c7:df:f5:36:73:df:c4:fa:7a:6f:e5:
         f9:11:90:ef:de:96:c9:14:7a:f5:80:72:7f:2c:71:38:29:97:
         96:a9:fd:6b:e9:12:42:31:25:a5:06:46:1b:39:a5:7e:7a:dd:
         1d:e4:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 05:38:38 2024 by rpki-client on console-ams.rpki-client.org