Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/323830313a31373a353030303a3a2f34382d3438203d3e20323634383238.roa
File:                     323830313a31373a353030303a3a2f34382d3438203d3e20323634383238.roa (raw, json)
Hash identifier:          Gdt0nNZQCqbZjUWVtrGl9sb/yC0pJKtQv1mcWN6dBj4=
Subject key identifier:   F5:89:3D:78:43:D8:89:F9:32:C9:BE:7A:E8:67:E0:E8:05:8F:2E:58
Certificate issuer:       /CN=5C052530EF2C6FD41906B3995027B8B0165F9CFB
Certificate serial:       16E94046EB2CC8EE7E1F961D3C7A0F9216FC26EA
Authority key identifier: 5C:05:25:30:EF:2C:6F:D4:19:06:B3:99:50:27:B8:B0:16:5F:9C:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/323830313a31373a353030303a3a2f34382d3438203d3e20323634383238.roa
Signing time:             Tue 05 Mar 2024 18:04:50 +0000
ROA not before:           Tue 05 Mar 2024 17:59:50 +0000
ROA not after:            Tue 04 Mar 2025 18:04:50 +0000
asID:                     264828
IP address blocks:        2801:17:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:40:46:eb:2c:c8:ee:7e:1f:96:1d:3c:7a:0f:92:16:fc:26:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C052530EF2C6FD41906B3995027B8B0165F9CFB
        Validity
            Not Before: Mar  5 17:59:50 2024 GMT
            Not After : Mar  4 18:04:50 2025 GMT
        Subject: CN=F5893D7843D889F932C9BE7AE867E0E8058F2E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:13:f2:5e:5b:96:0a:1e:b4:a5:c5:08:52:
                    68:59:72:21:7c:5e:c6:1e:c8:a8:ed:fa:48:05:07:
                    60:4c:91:6e:22:ad:63:3e:69:3d:3c:df:d7:0b:c6:
                    3c:65:f2:a9:d2:41:72:db:fb:2b:d4:de:c2:17:31:
                    71:22:18:46:bc:05:1a:1c:80:b1:52:22:34:e1:7d:
                    f7:17:ae:3f:66:86:d9:d0:a9:3b:eb:3e:81:79:95:
                    64:e3:31:54:15:18:4f:f8:ff:97:c7:63:fe:d8:dc:
                    06:0b:07:c3:70:b4:0c:14:a2:b2:b0:65:a3:3e:b6:
                    8c:45:39:80:17:42:9e:78:36:0d:da:da:15:a0:7f:
                    97:2e:95:cd:74:de:29:b5:ed:4f:34:00:b4:2f:7f:
                    b1:fb:7d:fd:c2:25:f2:e4:ff:ec:4e:f0:70:c6:57:
                    3d:80:79:b5:92:95:be:df:a5:68:d5:19:9b:f6:b2:
                    fc:15:cb:d2:de:d6:cd:a4:57:79:b5:aa:45:81:7b:
                    7b:d2:1e:13:50:0f:9f:85:b2:85:88:aa:e0:41:ad:
                    59:32:35:be:90:80:bb:e5:ff:be:a2:1c:36:04:28:
                    a2:9d:70:c6:39:69:4c:db:d9:11:46:bf:40:e9:9e:
                    90:e4:a0:6e:e0:51:29:56:4a:2b:66:b6:86:ac:6f:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:89:3D:78:43:D8:89:F9:32:C9:BE:7A:E8:67:E0:E8:05:8F:2E:58
            X509v3 Authority Key Identifier:
                keyid:5C:05:25:30:EF:2C:6F:D4:19:06:B3:99:50:27:B8:B0:16:5F:9C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/323830313a31373a353030303a3a2f34382d3438203d3e20323634383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:a8:d7:0f:00:fa:70:e6:d2:4e:39:f8:1d:cd:1a:06:be:
         00:b5:a2:83:a8:d5:a5:74:40:bf:c1:56:51:6e:29:4d:87:d5:
         d7:72:56:2b:f7:a9:ad:dc:58:6a:53:f8:4d:d0:35:05:ae:39:
         43:cd:6e:19:3d:8c:c7:cc:53:c1:51:24:c5:58:e7:d0:66:fa:
         b1:ee:ad:64:a7:b4:49:c2:46:a4:16:a6:b6:25:17:c0:72:e2:
         60:5a:d4:7f:d7:dc:84:79:36:ab:c3:7a:d3:b2:c6:5f:c7:ce:
         9a:36:30:ba:31:3e:66:6a:c5:c7:cb:56:f9:65:74:b8:5d:e8:
         94:cc:51:c9:27:5a:9c:d3:11:e6:52:62:8f:bc:3d:b0:9d:dd:
         34:44:b9:ab:ae:c1:94:97:8e:0c:22:46:7b:40:e1:dd:60:53:
         fa:f8:ae:38:36:45:0e:46:99:02:35:f9:ac:1e:02:7b:1e:ae:
         c0:b4:84:ff:09:b3:11:12:a2:58:8c:8e:2b:87:78:b6:66:f2:
         f9:a1:50:91:20:91:c0:f9:bf:f4:3f:78:80:e2:54:7e:f3:cc:
         b8:42:2b:4c:be:10:5e:37:9b:8c:ea:93:7f:d5:5b:77:a9:3f:
         09:c2:20:b3:99:6e:98:ff:62:00:7b:34:cc:28:bc:51:35:9b:
         10:98:43:50
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUFulARussyO5+H5YdPHoPkhb8JuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMwNTI1MzBFRjJDNkZENDE5MDZCMzk5NTAyN0I4QjAx
NjVGOUNGQjAeFw0yNDAzMDUxNzU5NTBaFw0yNTAzMDQxODA0NTBaMDMxMTAvBgNV
BAMTKEY1ODkzRDc4NDNEODg5RjkzMkM5QkU3QUU4NjdFMEU4MDU4RjJFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENBPyXluWCh60pcUIUmhZciF8
XsYeyKjt+kgFB2BMkW4irWM+aT0839cLxjxl8qnSQXLb+yvU3sIXMXEiGEa8BRoc
gLFSIjThffcXrj9mhtnQqTvrPoF5lWTjMVQVGE/4/5fHY/7Y3AYLB8NwtAwUorKw
ZaM+toxFOYAXQp54Ng3a2hWgf5culc103im17U80ALQvf7H7ff3CJfLk/+xO8HDG
Vz2AebWSlb7fpWjVGZv2svwVy9Le1s2kV3m1qkWBe3vSHhNQD5+FsoWIquBBrVky
Nb6QgLvl/76iHDYEKKKdcMY5aUzb2RFGv0DpnpDkoG7gUSlWSitmtoasb5hPAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU9Yk9eEPYifkyyb566Gfg6AWPLlgwHwYDVR0j
BBgwFoAUXAUlMO8sb9QZBrOZUCe4sBZfnPswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRUI1QzEwREZEQzZBQzY4RTk4NkQ5OTI5OEU5NDE3MjlD
QkJBMDVBMzJCRTg1NzgwOTI1MDBCMEQzQzZFMkI2LzAvNUMwNTI1MzBFRjJDNkZE
NDE5MDZCMzk5NTAyN0I4QjAxNjVGOUNGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzA1MjUzMEVGMkM2RkQ0MTkw
NkIzOTk1MDI3QjhCMDE2NUY5Q0ZCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUVCNUMxMERGREM2QUM2OEU5ODZEOTkyOThFOTQxNzI5Q0JCQTA1QTMy
QkU4NTc4MDkyNTAwQjBEM0M2RTJCNi8wLzMyMzgzMDMxM2EzMTM3M2EzNTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM4MzIzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABdQADANBgkqhkiG9w0BAQsFAAOCAQEAT6Ko1w8A+nDm0k45+B3NGga+ALWi
g6jVpXRAv8FWUW4pTYfV13JWK/eprdxYalP4TdA1Ba45Q81uGT2Mx8xTwVEkxVjn
0Gb6se6tZKe0ScJGpBamtiUXwHLiYFrUf9fchHk2q8N607LGX8fOmjYwujE+ZmrF
x8tW+WV0uF3olMxRySdanNMR5lJij7w9sJ3dNES5q67BlJeODCJGe0Dh3WBT+viu
ODZFDkaZAjX5rB4Cex6uwLSE/wmzERKiWIyOK4d4tmby+aFQkSCRwPm/9D94gOJU
fvPMuEIrTL4QXjebjOqTf9Vbd6k/CcIgs5lumP9iAHs0zCi8UTWbEJhDUA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org