Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa
File:                     323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa (raw, json)
Hash identifier:          kBy4+QU+S1GNHYKv5DLgx0fwKtdu+Gv3Vi2ZJtixt0w=
Subject key identifier:   EB:FE:B0:5B:FD:EB:A2:7D:19:AB:F4:45:44:83:28:6C:3B:7A:F6:B8
Certificate issuer:       /CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
Certificate serial:       25FDF03231C3B1A38BDFB5CDD26710C511EB537A
Authority key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa
Signing time:             Tue 05 Mar 2024 17:49:19 +0000
ROA not before:           Tue 05 Mar 2024 17:44:19 +0000
ROA not after:            Tue 04 Mar 2025 17:49:19 +0000
asID:                     264630
IP address blocks:        2801:0:190::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:f0:32:31:c3:b1:a3:8b:df:b5:cd:d2:67:10:c5:11:eb:53:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
        Validity
            Not Before: Mar  5 17:44:19 2024 GMT
            Not After : Mar  4 17:49:19 2025 GMT
        Subject: CN=EBFEB05BFDEBA27D19ABF4454483286C3B7AF6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:e0:c7:5b:cd:e7:8b:94:4e:96:d2:30:1c:
                    7e:04:0e:6e:31:fb:6b:46:f7:4a:ee:e4:76:89:ab:
                    40:59:8e:70:03:1a:2d:53:2f:03:d5:fb:73:90:e3:
                    7f:86:96:d5:7a:78:17:ae:95:4e:48:2b:6d:7a:1c:
                    c6:33:6f:a3:10:80:61:6a:55:c4:9d:7d:7c:38:0b:
                    28:02:d1:20:cd:c7:01:6b:06:b7:d2:a0:d4:1f:e7:
                    fa:8b:96:65:d1:bd:a2:fa:00:9b:24:7d:ac:89:f5:
                    6a:c1:8e:e9:4f:c9:0c:c5:9e:a1:62:11:7a:e4:fa:
                    da:1f:e3:3b:68:ba:c3:03:3a:97:b6:ca:aa:d2:1a:
                    fe:34:76:36:37:f6:15:bb:cd:33:7c:88:7d:24:c0:
                    ca:d7:f6:d9:7c:95:93:96:8c:2d:41:5b:2c:78:41:
                    30:7e:da:d8:0b:92:d9:68:38:56:15:0b:1d:6a:eb:
                    de:0d:89:a7:79:51:ec:87:23:b5:e3:db:90:26:c7:
                    c7:9e:3e:5c:86:4f:dc:3b:a0:1b:a2:cc:cb:c7:84:
                    ce:8b:e2:05:d1:24:e5:aa:67:e3:ea:29:4b:36:da:
                    93:a4:04:2a:97:46:ff:9d:42:a0:24:85:45:b6:9b:
                    1b:5f:2c:f1:1b:3a:96:8d:0f:31:7f:7e:43:4c:65:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:B0:5B:FD:EB:A2:7D:19:AB:F4:45:44:83:28:6C:3B:7A:F6:B8
            X509v3 Authority Key Identifier:
                keyid:25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/323830313a303a3139303a3a2f34382d3438203d3e20323634363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:190::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:07:74:62:54:ca:44:ce:92:44:4e:28:22:ba:f3:ed:d6:7d:
         63:a4:40:b5:21:5b:49:98:9d:1c:86:c3:77:b7:94:fb:28:46:
         16:48:90:24:da:7b:86:d3:9d:4d:fc:74:73:3e:83:ff:ab:d7:
         3c:ab:d1:e6:cc:2d:56:5d:2e:ec:75:e5:d2:04:87:d3:03:29:
         3f:6c:5d:29:20:00:1e:ec:51:eb:c7:ac:5f:e1:a8:52:dc:17:
         7f:0c:e7:0b:c1:ab:07:82:4c:24:55:51:ca:ec:70:15:6f:d7:
         cc:99:b3:5e:43:fa:29:11:8f:b4:38:a8:3c:78:7e:b1:8c:e7:
         24:6b:ab:d8:77:21:b4:04:40:96:f0:76:57:b4:88:65:f9:1a:
         64:e2:80:c5:24:1f:d5:bc:ff:f5:a4:8f:2b:c7:15:99:ba:80:
         1c:6a:46:4a:68:aa:5e:ec:5a:ab:14:8f:da:0e:3d:7b:bb:10:
         8d:6d:a3:9c:f2:f0:ca:3a:d0:50:3c:97:ae:c3:be:40:fd:04:
         9d:ff:5e:56:42:96:2e:bd:ed:56:52:0f:6a:12:ef:6c:66:af:
         b0:d1:44:97:d7:d0:68:f9:28:be:50:02:3b:ab:54:6b:d4:e5:
         3b:ac:c2:1b:6c:63:9d:72:c2:e5:74:20:56:40:5a:f2:10:0a:
         9d:39:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:19 2024 by rpki-client on console-ams.rpki-client.org