Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a373a3a2f34382d3438203d3e20323730313035.roa
File:                     323830313a3137613a373a3a2f34382d3438203d3e20323730313035.roa (raw, json)
Hash identifier:          j9ve6mA2km1adYz14u+I65u67WICWDcCR5Z4D1RRLHI=
Subject key identifier:   55:86:3B:F2:28:0A:18:59:30:59:0D:1E:82:3E:AF:35:E2:59:0C:E2
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       7472C2CC86805051E03443CC08D31519BA24F68C
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a373a3a2f34382d3438203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:03 +0000
ROA not before:           Tue 05 Mar 2024 17:39:03 +0000
ROA not after:            Tue 04 Mar 2025 17:44:03 +0000
asID:                     270105
IP address blocks:        2801:17a:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:72:c2:cc:86:80:50:51:e0:34:43:cc:08:d3:15:19:ba:24:f6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:03 2024 GMT
            Not After : Mar  4 17:44:03 2025 GMT
        Subject: CN=55863BF2280A185930590D1E823EAF35E2590CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:47:59:7d:8c:1f:bf:45:f8:4f:49:e8:ee:
                    f1:8f:d6:20:98:b3:90:67:59:82:c6:5a:78:86:7f:
                    c5:d6:6a:79:21:d7:ab:4d:5b:be:35:8a:3a:89:28:
                    ac:b7:78:d2:ae:a8:76:da:57:da:ad:47:2d:5d:51:
                    12:0f:36:68:4e:91:55:1d:85:b4:69:fa:39:5d:c7:
                    dc:b1:44:47:a1:28:63:27:0c:63:b0:be:9d:d5:2b:
                    95:0a:6a:52:b3:8c:f9:88:e8:21:5b:20:aa:c8:ac:
                    e7:f5:b7:ae:38:9f:53:ef:69:3a:0c:4f:fe:00:a1:
                    74:44:9c:d7:24:17:c2:22:6c:2a:46:0d:83:00:0b:
                    2b:68:5b:aa:68:dd:70:dd:72:d0:25:a9:45:b4:d7:
                    33:62:ae:5e:ae:62:af:51:1c:05:a0:2d:d4:92:99:
                    20:65:63:41:f9:b5:cc:60:53:bf:20:b2:2e:16:ea:
                    74:d5:c3:c9:01:13:84:43:1d:96:ba:1c:c0:2a:a9:
                    9b:b2:9a:18:e3:1e:19:53:29:fb:70:28:b9:1f:6f:
                    fc:12:c3:d4:d5:ff:96:45:85:db:a4:ed:43:e0:d4:
                    e3:0e:2d:00:c8:78:f7:d1:ac:14:13:43:4f:f3:ea:
                    08:bf:44:c3:52:31:28:c6:9d:15:b6:a0:4e:35:04:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:3B:F2:28:0A:18:59:30:59:0D:1E:82:3E:AF:35:E2:59:0C:E2
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a373a3a2f34382d3438203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17a:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:4f:97:f2:25:55:bc:05:30:de:e1:58:92:66:37:54:af:a6:
         8a:94:3b:65:62:cf:95:fc:c5:0e:49:64:67:a4:a4:28:37:2d:
         f3:96:9c:0d:f6:84:31:c5:86:f4:4e:9f:48:20:b5:bb:a0:d1:
         07:22:e9:36:1f:1c:c4:37:6f:e4:ce:c3:51:ae:39:b6:36:62:
         d1:3f:ff:68:b6:a3:a0:ab:df:3c:1b:b3:98:38:43:54:cc:ad:
         0b:0d:23:43:69:40:97:56:44:9b:82:a5:51:bf:2f:ba:b0:7b:
         d9:02:83:75:6d:82:4b:5e:33:ee:0c:9d:bf:ca:16:e0:c2:2c:
         96:9b:3b:42:19:3e:80:31:f2:4f:91:a3:f2:48:cd:3a:b4:11:
         cf:13:a3:6e:48:2a:e1:bc:1c:83:6e:e3:f6:25:7a:63:cb:2f:
         f1:81:39:25:76:6f:7b:5c:a6:84:2f:d0:ab:1b:cd:56:95:56:
         ce:7d:4d:66:19:e2:33:00:bf:47:05:0c:18:35:4e:07:c3:c9:
         33:8d:a1:b2:47:98:02:b4:be:a8:03:51:c4:40:ac:0a:9a:2f:
         a5:75:81:a0:57:85:8c:37:a4:4e:d5:8f:f5:18:1a:c9:c3:1d:
         44:b4:4e:c7:db:2d:59:b0:b8:ea:3a:83:24:d5:07:a5:9c:81:
         17:96:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 07:40:04 2024 by rpki-client on console-ams.rpki-client.org