Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3566313a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a3163383a3566313a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          /HnBUxRsqqS+dMbnQrKCOMu2xGZlWviT1pW6PR+kfPc=
Subject key identifier:   4E:48:71:55:56:2A:F8:CA:8B:26:26:C3:39:F7:7E:1C:E4:B6:3D:CB
Certificate issuer:       /CN=EE696F80F79D5A040A78AEE92CD99FF107BE3183
Certificate serial:       35FC2B9F672F1C68B6948AF7D9D74BE5D321D5E0
Authority key identifier: EE:69:6F:80:F7:9D:5A:04:0A:78:AE:E9:2C:D9:9F:F1:07:BE:31:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3566313a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:10:07 +0000
ROA not before:           Tue 05 Mar 2024 18:05:07 +0000
ROA not after:            Tue 04 Mar 2025 18:10:07 +0000
asID:                     262589
IP address blocks:        2801:1c8:5f1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fc:2b:9f:67:2f:1c:68:b6:94:8a:f7:d9:d7:4b:e5:d3:21:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE696F80F79D5A040A78AEE92CD99FF107BE3183
        Validity
            Not Before: Mar  5 18:05:07 2024 GMT
            Not After : Mar  4 18:10:07 2025 GMT
        Subject: CN=4E487155562AF8CA8B2626C339F77E1CE4B63DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:92:98:3d:dc:68:9b:e9:9d:12:32:bb:39:
                    9e:56:1b:2f:a5:d2:cb:32:73:85:d9:85:c0:04:bf:
                    61:51:80:ce:3f:40:6a:c5:38:bc:66:ea:b7:84:4e:
                    6b:fb:3c:07:a2:a7:60:6e:8d:c9:90:db:c8:71:07:
                    38:40:e2:27:1c:5c:55:75:cf:10:74:06:b3:09:42:
                    e9:8f:47:0f:3b:e9:be:a9:42:44:af:6d:7b:cb:b9:
                    18:31:a6:f1:36:3a:ba:2c:aa:24:04:47:2e:56:7e:
                    7a:cf:1d:9d:89:bb:74:97:f8:b0:11:cc:20:0b:77:
                    3e:12:be:ce:eb:d8:f1:5b:d6:25:63:3b:cf:1b:3e:
                    06:84:88:d0:a5:56:22:dc:1e:71:16:68:e3:9c:35:
                    0c:24:4f:8b:39:f2:fd:ef:57:12:d2:9b:26:16:46:
                    9f:ca:1e:f8:e1:ad:3e:2f:fe:26:d8:97:a8:4e:ab:
                    d7:47:47:9c:c4:50:37:f8:12:aa:05:80:18:83:82:
                    f8:69:4e:fc:b1:d1:a3:d0:e7:43:97:34:d7:3f:0b:
                    54:1f:bb:fe:f1:e3:32:10:39:f0:22:66:7f:68:29:
                    ff:30:6c:33:4d:17:cb:a2:a6:b8:8a:c7:89:b0:97:
                    ea:33:6b:7f:c8:ae:94:94:5f:4e:93:67:60:e9:e8:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:48:71:55:56:2A:F8:CA:8B:26:26:C3:39:F7:7E:1C:E4:B6:3D:CB
            X509v3 Authority Key Identifier:
                keyid:EE:69:6F:80:F7:9D:5A:04:0A:78:AE:E9:2C:D9:9F:F1:07:BE:31:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE696F80F79D5A040A78AEE92CD99FF107BE3183.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9887EB7602805A481E1F266FBE8A082634CF7625E143A97A8E169A01EA8CE1F/0/323830313a3163383a3566313a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8:5f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:e7:2a:7e:fe:3d:94:e8:a1:d4:48:98:e2:87:2c:51:59:99:
         b8:03:27:b6:66:3e:51:4b:3f:7a:4e:13:aa:28:6f:c5:9a:be:
         e8:c4:8b:e0:fe:09:98:59:bd:9c:a1:6c:be:4e:fe:c3:e2:62:
         a7:39:fd:f2:2d:8e:6b:e8:a9:67:b8:68:2d:3b:a9:03:3a:81:
         c1:c8:fb:38:44:5e:87:d5:75:96:1a:10:c6:5f:83:87:67:fe:
         30:ba:40:1f:7d:da:60:66:48:f8:dc:0d:d3:7f:40:8d:60:69:
         f2:21:9f:b1:5c:1a:81:3e:78:78:c5:d7:3d:03:f1:cd:e9:b7:
         6f:33:ec:35:4f:e5:51:6c:51:b5:49:55:03:e4:1c:04:9a:f0:
         1e:fe:8e:9f:3d:2b:a8:8a:a0:37:53:da:34:54:ea:0d:be:db:
         e8:02:16:83:29:99:fc:12:74:c5:f3:d3:fd:28:2f:45:cf:26:
         ec:70:b6:ac:fb:bd:a0:ed:eb:4a:f8:0d:55:55:1f:50:b3:c3:
         c0:fd:c5:92:05:e9:0b:71:23:cb:8b:f4:a2:fa:ee:55:09:c1:
         fc:b4:fe:13:9c:6f:97:64:40:4f:43:b2:1d:22:53:23:5c:01:
         a8:18:10:f3:45:68:80:0e:ef:d2:e8:8a:9b:43:a7:4d:de:c5:
         a2:06:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:44:23 2024 by rpki-client on console-fra.rpki-client.org