Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a383a3a2f34382d3438203d3e20323730313035.roa
File:                     323830313a3137613a383a3a2f34382d3438203d3e20323730313035.roa (raw, json)
Hash identifier:          iJrS12CNrc3f3vXnwIHU2j/WJIklYdU2LbDMToJ6E20=
Subject key identifier:   8F:08:21:68:41:A4:49:85:75:67:69:F1:EF:9B:90:82:1C:78:C2:F4
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       57B776B4B0045F43D4EF8DD47C737DA67CACADFA
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a383a3a2f34382d3438203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:03 +0000
ROA not before:           Tue 05 Mar 2024 17:39:03 +0000
ROA not after:            Tue 04 Mar 2025 17:44:03 +0000
asID:                     270105
IP address blocks:        2801:17a:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 07:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:76:b4:b0:04:5f:43:d4:ef:8d:d4:7c:73:7d:a6:7c:ac:ad:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:03 2024 GMT
            Not After : Mar  4 17:44:03 2025 GMT
        Subject: CN=8F08216841A44985756769F1EF9B90821C78C2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:ee:40:ea:ea:c5:36:ae:00:ef:30:76:03:
                    41:1d:2b:3b:08:6b:2d:00:38:3b:9f:29:95:d7:93:
                    54:89:69:18:67:1c:76:4f:c5:6a:71:7c:60:63:92:
                    ff:61:95:b0:c1:ea:19:72:7d:73:fb:63:1e:97:fa:
                    69:be:13:2d:cb:be:33:5e:1c:67:94:c9:2c:54:a1:
                    cf:3d:30:f6:27:32:6a:0a:3b:72:d4:20:5d:12:f1:
                    99:a7:d2:9d:66:4a:4d:c5:60:23:d5:f1:e6:b7:c6:
                    15:27:df:e3:9a:a1:96:95:df:aa:75:d8:39:82:43:
                    66:61:a1:98:89:61:f3:56:12:40:ce:e4:95:96:2c:
                    4a:94:55:ab:54:ce:8b:d1:fe:4b:b5:7a:14:ae:43:
                    28:ca:26:89:b0:fe:d8:ee:45:87:ac:22:e4:4d:58:
                    9f:0d:a9:de:9d:65:36:22:d3:15:77:7b:ec:9c:52:
                    02:18:e5:92:d7:fc:50:bf:c2:09:9c:8c:8f:c9:a2:
                    6d:3b:05:55:86:02:0e:e9:72:d7:25:08:12:b0:23:
                    97:a3:77:d1:99:fd:e2:89:94:bc:5a:28:a4:52:1a:
                    e7:e4:82:d6:2d:c9:19:dd:9a:e7:92:e3:c6:f1:7e:
                    2d:4e:0f:ea:4b:99:31:45:4a:bf:11:c8:3e:22:02:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:08:21:68:41:A4:49:85:75:67:69:F1:EF:9B:90:82:1C:78:C2:F4
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a383a3a2f34382d3438203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17a:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:30:ee:a1:ab:29:f9:9d:a2:0c:64:cb:83:e8:6f:b8:b7:
         53:36:6e:fc:18:68:31:0a:94:2b:e4:30:f6:a6:f9:76:1c:39:
         2c:24:28:ea:8b:4a:90:e8:8a:b1:ac:2f:1a:96:bc:e5:6c:4f:
         16:13:d2:c4:eb:64:53:70:fc:6b:d3:5e:58:3c:a4:92:db:3b:
         3a:da:65:60:50:e9:36:32:0a:15:79:24:2d:a4:cd:a7:f9:fd:
         da:a5:62:2d:ba:90:46:a7:42:9f:d1:29:66:51:5f:66:e7:b8:
         42:d1:b4:c7:83:db:9a:f4:74:88:6a:48:45:b7:54:ba:28:7b:
         9f:19:98:c0:e9:a5:ae:2c:a3:b4:08:4b:33:a7:1a:a0:80:0f:
         55:ce:41:c3:9d:3a:c9:aa:eb:24:0b:49:49:a8:2c:5b:36:ae:
         69:c9:bc:ce:36:6e:93:ce:d3:d3:c1:90:ba:4a:df:a7:b3:5b:
         fd:e6:18:d4:3d:f7:11:af:5b:7b:c1:d7:60:fe:a2:4b:90:4f:
         f7:ea:e9:15:18:b3:6d:93:8e:2f:27:33:06:d8:fd:2b:ff:97:
         db:45:05:b0:44:82:42:23:e1:90:e2:0a:b6:65:7b:8b:48:f8:
         ed:d6:4c:5d:a9:aa:19:d2:18:db:af:ac:91:23:24:4b:be:70:
         5c:4a:5d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 23:28:13 2024 by rpki-client on console-ams.rpki-client.org