Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/323830303a3630303a3a2f33322d3438203d3e203532333233.roa
File:                     323830303a3630303a3a2f33322d3438203d3e203532333233.roa (raw, json)
Hash identifier:          iUEvmNkxMmDTxuHHj1XKBicf+/pm7egkR/K38J/DfNo=
Subject key identifier:   E9:E5:F9:57:18:4D:94:AB:CB:D8:FB:3A:3A:00:36:F2:62:3D:CB:61
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       48B21940B4C3A03E7B0D616F6DFD049DCCA2DADD
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/323830303a3630303a3a2f33322d3438203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:17 +0000
ROA not before:           Tue 05 Mar 2024 18:02:17 +0000
ROA not after:            Tue 04 Mar 2025 18:07:17 +0000
asID:                     52323
IP address blocks:        2800:600::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b2:19:40:b4:c3:a0:3e:7b:0d:61:6f:6d:fd:04:9d:cc:a2:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:17 2024 GMT
            Not After : Mar  4 18:07:17 2025 GMT
        Subject: CN=E9E5F957184D94ABCBD8FB3A3A0036F2623DCB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:30:3b:67:0d:e8:65:80:ec:97:0c:a9:eb:fa:
                    8f:b9:48:8c:ff:1c:2f:9d:fb:68:5b:9e:cf:01:37:
                    d8:fc:45:ab:f9:44:c9:c2:5a:5c:9b:ca:88:a6:bb:
                    41:35:2b:52:f6:9b:ab:d4:d5:9f:66:69:39:8b:aa:
                    0e:b9:c2:f4:09:58:63:7f:93:b5:92:49:ae:9a:9a:
                    8a:15:71:9b:1e:0e:6a:89:56:b9:68:3e:be:c9:4e:
                    46:5b:c1:ab:6c:71:9c:57:29:a1:28:f4:ed:7b:39:
                    d2:9c:2e:bc:ba:90:8e:b6:d4:eb:b9:63:5d:32:04:
                    87:ac:05:19:39:30:d5:bb:d6:09:a0:bb:64:b3:21:
                    61:e6:20:7f:e9:a3:88:e7:23:6e:35:b0:03:6c:69:
                    c1:6f:2f:9e:1f:75:fd:f5:91:4d:c8:1c:0f:7a:98:
                    19:8a:e3:e3:b5:f9:a2:61:72:3e:c7:d8:0f:c9:5a:
                    b4:5a:f1:16:9e:ba:7c:db:23:7c:d0:29:5e:24:03:
                    58:ac:b9:bb:d7:5c:35:cb:e1:79:c4:68:54:7e:d0:
                    2e:29:19:6f:38:88:e3:9a:92:41:33:34:e5:9f:34:
                    9d:1f:86:8d:3b:99:59:05:3c:c8:4f:1f:c8:ea:9d:
                    e7:18:ec:f7:cb:15:a8:11:a1:8f:eb:f0:bb:59:4f:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E5:F9:57:18:4D:94:AB:CB:D8:FB:3A:3A:00:36:F2:62:3D:CB:61
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/323830303a3630303a3a2f33322d3438203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:4f:ae:60:d2:f8:c9:64:3a:78:b2:a8:1f:3b:db:2a:d8:
         5d:24:b0:7f:a4:27:68:11:44:e7:8f:01:b2:50:6c:8c:c1:13:
         93:7f:ca:c9:a9:3a:e1:e1:ce:f5:2e:0a:76:91:8a:79:fa:49:
         b7:c9:c4:af:08:2f:ed:47:f9:4f:24:54:82:a1:f7:b8:71:6e:
         08:c4:89:0b:5e:9b:90:5b:40:93:72:63:84:ac:97:22:04:b9:
         64:c9:df:0e:3c:52:10:1f:33:ee:f5:c4:dc:c5:18:fd:d1:d2:
         b1:ed:94:95:27:82:ce:71:d0:84:63:db:19:1a:1e:b2:eb:f3:
         e9:98:18:0b:ba:86:44:97:a2:ac:8b:ec:a8:2c:05:cf:c7:ae:
         d7:ce:c7:d3:44:db:08:28:f2:5d:f9:01:db:59:c2:2d:ae:51:
         4c:d5:cc:1d:1e:20:6b:07:23:ca:f5:73:85:af:fb:3c:44:a7:
         d1:45:b0:4a:ce:df:3d:e6:8f:58:bf:41:a1:ff:9d:01:e9:1f:
         a6:57:15:83:00:10:b6:ce:5c:b3:f3:34:17:d7:93:cf:6e:33:
         07:2e:ce:a0:7e:57:f9:10:33:d1:5a:c3:10:0a:b1:91:09:05:
         76:e7:21:af:30:14:cc:cd:57:7b:31:b0:31:61:d6:80:ba:38:
         15:b6:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org