Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/323830313a31663a653030303a3a2f34382d3438203d3e20323634363134.roa
File:                     323830313a31663a653030303a3a2f34382d3438203d3e20323634363134.roa (raw, json)
Hash identifier:          RixvYtFP9/pONtzpP5jraRzKu0IFRtbi2KhndeUZ3mM=
Subject key identifier:   03:35:51:59:36:48:30:A7:53:AE:41:1F:14:56:75:C6:C0:7D:0D:53
Certificate issuer:       /CN=C50C0142533E0F182F6D25231B18914021FD89CA
Certificate serial:       76EA140F4C9C77133DAFC43D9268EC713E69C119
Authority key identifier: C5:0C:01:42:53:3E:0F:18:2F:6D:25:23:1B:18:91:40:21:FD:89:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C50C0142533E0F182F6D25231B18914021FD89CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/323830313a31663a653030303a3a2f34382d3438203d3e20323634363134.roa
Signing time:             Tue 05 Mar 2024 17:51:39 +0000
ROA not before:           Tue 05 Mar 2024 17:46:39 +0000
ROA not after:            Tue 04 Mar 2025 17:51:39 +0000
asID:                     264614
IP address blocks:        2801:1f:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/C50C0142533E0F182F6D25231B18914021FD89CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/C50C0142533E0F182F6D25231B18914021FD89CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C50C0142533E0F182F6D25231B18914021FD89CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ea:14:0f:4c:9c:77:13:3d:af:c4:3d:92:68:ec:71:3e:69:c1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C50C0142533E0F182F6D25231B18914021FD89CA
        Validity
            Not Before: Mar  5 17:46:39 2024 GMT
            Not After : Mar  4 17:51:39 2025 GMT
        Subject: CN=03355159364830A753AE411F145675C6C07D0D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:92:76:ba:63:17:e1:c2:01:24:07:c1:b0:
                    e9:9e:d6:cc:93:56:80:15:76:e4:1c:78:17:7a:6f:
                    04:c7:e6:cf:0d:cc:ed:6f:04:05:3e:a8:17:8e:ec:
                    39:4c:c8:1f:22:79:4f:40:91:f2:41:a3:d5:5e:40:
                    a9:b8:10:5b:6d:5b:0f:80:05:73:5d:00:78:c4:3c:
                    7c:7c:ba:73:88:f6:2a:55:05:f0:be:7f:30:22:08:
                    82:eb:1c:4c:3e:f5:06:e0:ee:0c:67:66:0e:f9:59:
                    cf:80:d0:06:b3:1a:80:93:ad:4f:af:8b:e5:15:42:
                    06:db:51:a6:c9:4e:09:42:33:13:27:79:c6:a2:2f:
                    d1:a6:dd:81:2c:e5:5e:be:af:03:91:38:40:59:20:
                    dc:6d:01:af:af:1f:5f:ea:8d:f0:7f:6e:32:22:c6:
                    c9:6d:62:9b:33:45:fe:cb:9d:eb:68:3e:11:98:a5:
                    cb:d1:4d:c2:d7:e4:57:d5:aa:19:a0:25:0b:9f:a5:
                    71:87:ea:8f:71:1d:38:81:a3:51:b5:04:6d:3e:d3:
                    f5:f2:16:a7:b4:e8:31:8c:e3:a2:ba:e2:5d:09:51:
                    d6:bb:ac:84:11:34:fc:2f:59:22:15:e6:4c:f2:cc:
                    c2:06:a6:a6:7f:d9:ed:53:79:81:9a:7e:e0:86:9d:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:35:51:59:36:48:30:A7:53:AE:41:1F:14:56:75:C6:C0:7D:0D:53
            X509v3 Authority Key Identifier:
                keyid:C5:0C:01:42:53:3E:0F:18:2F:6D:25:23:1B:18:91:40:21:FD:89:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/C50C0142533E0F182F6D25231B18914021FD89CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C50C0142533E0F182F6D25231B18914021FD89CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/323830313a31663a653030303a3a2f34382d3438203d3e20323634363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:02:df:07:44:34:30:7d:5c:5e:34:26:38:7f:a5:c8:7d:06:
         26:92:91:0e:ab:02:a6:d6:7c:c1:6a:d3:9d:ab:b4:43:f3:cf:
         92:df:27:f9:ee:2e:62:a0:1e:5b:ce:09:dc:81:b1:98:1a:d1:
         8f:dc:25:e4:14:04:31:fd:8d:10:52:42:b6:bf:5a:00:ff:52:
         05:52:1e:e2:dd:07:64:c0:2f:cf:04:9a:45:50:07:78:39:a1:
         13:c3:4e:f7:1c:a8:7d:ee:7d:64:93:35:45:a4:e7:8e:3c:f1:
         2b:fa:1a:9b:fa:46:22:7d:62:bf:af:c2:8a:38:13:3f:a7:b6:
         00:0a:1a:66:91:4e:6a:61:72:7a:ca:b5:36:fb:74:1d:b6:2e:
         8b:2e:04:62:7d:e6:77:08:6e:70:0f:7b:1e:c1:df:e8:c4:2b:
         36:df:02:7b:54:1a:fc:f1:08:c1:1d:bf:fd:68:33:59:29:0a:
         97:08:ab:7d:43:58:34:1c:4f:86:ea:47:15:60:38:49:d6:06:
         f1:77:a3:22:ec:61:2c:f7:3a:99:aa:20:a3:37:ee:d4:8e:81:
         74:ed:eb:ff:32:cc:b2:82:80:2c:bb:12:a8:b4:a8:13:28:dc:
         28:dd:0b:e8:45:0b:94:c4:27:f7:cc:45:c9:65:39:5d:71:a9:
         e9:66:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:52:52 2024 by rpki-client on console-ams.rpki-client.org