Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/323830313a31653a3a2f34382d3438203d3e20323632323537.roa
File:                     323830313a31653a3a2f34382d3438203d3e20323632323537.roa (raw, json)
Hash identifier:          51Vx3crVNrcPEPx7xq2hZQPO5gRhVlY4dJRBUunhWRI=
Subject key identifier:   AB:27:0C:6A:7F:0D:4F:04:E1:7A:4E:91:E8:44:65:F4:6D:2D:F7:DA
Certificate issuer:       /CN=184235E31F698CFFFECF0E6820F30FD56301CEE5
Certificate serial:       4F8150EB1500004CECA1F8416D6365347508F9BE
Authority key identifier: 18:42:35:E3:1F:69:8C:FF:FE:CF:0E:68:20:F3:0F:D5:63:01:CE:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/323830313a31653a3a2f34382d3438203d3e20323632323537.roa
Signing time:             Tue 05 Mar 2024 18:13:48 +0000
ROA not before:           Tue 05 Mar 2024 18:08:48 +0000
ROA not after:            Tue 04 Mar 2025 18:13:48 +0000
asID:                     262257
IP address blocks:        2801:1e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:81:50:eb:15:00:00:4c:ec:a1:f8:41:6d:63:65:34:75:08:f9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184235E31F698CFFFECF0E6820F30FD56301CEE5
        Validity
            Not Before: Mar  5 18:08:48 2024 GMT
            Not After : Mar  4 18:13:48 2025 GMT
        Subject: CN=AB270C6A7F0D4F04E17A4E91E84465F46D2DF7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1a:88:de:71:58:f3:a5:a0:42:c7:2b:71:00:
                    54:84:4e:b3:3a:fc:2f:3a:51:20:be:92:e0:6d:58:
                    e6:89:11:c2:04:8f:35:db:37:fd:4d:7f:9a:04:bb:
                    f3:54:94:8f:f2:0b:4e:73:ca:6e:cf:32:cc:2c:0e:
                    f1:e0:7c:a4:c2:87:3a:79:3e:5f:a7:50:5b:30:5e:
                    36:af:fb:e7:d1:72:bf:e5:9c:91:cb:d8:0a:de:0b:
                    50:be:4a:fc:b9:18:9a:a5:9e:5f:b6:6d:aa:26:50:
                    39:39:ea:f5:02:a8:e8:53:4e:54:3c:ca:70:72:00:
                    ed:ac:9b:8a:e6:49:e6:80:4d:86:d1:54:73:34:9b:
                    9a:ae:66:03:d9:88:43:27:cb:85:68:87:9f:a3:f1:
                    47:32:7c:75:f5:ac:7d:5c:c7:f2:5b:a6:00:f1:9f:
                    02:e0:a0:a5:ee:87:25:ad:55:19:46:1b:82:54:c8:
                    50:ef:a7:4a:83:33:c0:11:1f:31:e4:cf:28:38:e8:
                    f9:95:71:83:23:4f:c7:72:16:79:b8:13:02:58:92:
                    d7:77:f7:55:e9:52:8f:f9:e1:84:3a:78:70:75:38:
                    46:a9:0f:60:51:5f:78:f8:aa:8d:3f:07:86:0d:0a:
                    85:4e:b4:f3:d0:a3:0e:b0:9f:c0:8c:cd:96:5f:e7:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:0C:6A:7F:0D:4F:04:E1:7A:4E:91:E8:44:65:F4:6D:2D:F7:DA
            X509v3 Authority Key Identifier:
                keyid:18:42:35:E3:1F:69:8C:FF:FE:CF:0E:68:20:F3:0F:D5:63:01:CE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/323830313a31653a3a2f34382d3438203d3e20323632323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:85:4b:ff:28:dc:67:cd:ad:85:24:8c:0a:36:29:73:98:b4:
         4d:18:4a:e4:69:dc:aa:07:7a:55:83:73:db:4e:d5:65:20:ef:
         c5:e9:03:2d:9d:0e:9e:bc:19:3d:f6:42:b4:42:60:3f:46:c9:
         21:76:06:92:b8:e7:b3:43:5c:60:99:eb:1c:84:6a:f3:f0:fe:
         6b:79:7e:05:00:cf:14:c9:b6:70:44:20:13:2d:b2:3b:2b:7b:
         63:cc:c4:f7:57:9b:22:24:69:c4:a0:ae:75:15:dc:b8:0f:0c:
         0a:7b:f5:66:de:50:83:b2:77:2e:b0:bb:9c:9d:76:1d:6a:42:
         0b:e0:85:ee:c1:3a:33:c0:34:3e:6f:b1:3d:8d:f1:f9:95:43:
         9f:56:be:9b:0c:12:a6:0e:d3:51:59:d1:00:a4:de:58:ca:0d:
         11:7a:cf:16:8d:42:0b:c4:d8:9c:6a:ea:05:a4:94:32:ac:90:
         15:59:69:c0:2d:7e:a5:a1:d0:6a:5f:86:e2:c0:2d:bb:5a:4f:
         e6:06:4b:12:f8:b6:f7:88:1d:12:fa:fa:26:2a:03:55:1d:5c:
         d5:29:bc:6c:f3:e0:fc:72:74:f0:fe:b7:95:44:7d:f5:07:0e:
         44:70:57:f5:db:7d:b1:13:70:9a:75:cc:d3:39:d2:54:17:7e:
         6c:b9:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 16:13:47 2024 by rpki-client on console-fra.rpki-client.org