Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/323830313a31313a323030303a3a2f34382d3438203d3e203631343836.roa
File:                     323830313a31313a323030303a3a2f34382d3438203d3e203631343836.roa (raw, json)
Hash identifier:          yCcRZ280EfFDGZAsfevElMKmFlgwCRyKOnRp+jPe9To=
Subject key identifier:   EA:09:D7:84:FC:57:C7:8A:DE:D6:9E:36:79:5D:EB:97:47:C5:4C:B7
Certificate issuer:       /CN=65592E93C8C71F06F334AC488E771F3A67B2EB17
Certificate serial:       547FB63F8068B1B34ECBFDE56B395A07A65799F8
Authority key identifier: 65:59:2E:93:C8:C7:1F:06:F3:34:AC:48:8E:77:1F:3A:67:B2:EB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/323830313a31313a323030303a3a2f34382d3438203d3e203631343836.roa
Signing time:             Tue 05 Mar 2024 17:50:51 +0000
ROA not before:           Tue 05 Mar 2024 17:45:51 +0000
ROA not after:            Tue 04 Mar 2025 17:50:51 +0000
asID:                     61486
IP address blocks:        2801:11:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7f:b6:3f:80:68:b1:b3:4e:cb:fd:e5:6b:39:5a:07:a6:57:99:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65592E93C8C71F06F334AC488E771F3A67B2EB17
        Validity
            Not Before: Mar  5 17:45:51 2024 GMT
            Not After : Mar  4 17:50:51 2025 GMT
        Subject: CN=EA09D784FC57C78ADED69E36795DEB9747C54CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:2c:5d:4f:a4:06:4d:75:cb:f5:16:ab:67:
                    7d:93:c7:df:85:67:f8:bb:64:74:cf:8a:2b:ea:ee:
                    ba:b2:6d:29:00:0d:ba:05:a7:02:cc:e3:f7:0d:3f:
                    09:23:81:77:90:60:b3:1d:f4:de:34:32:82:9b:31:
                    9a:7d:f2:6e:cd:a0:c7:96:7b:47:06:ec:63:f6:25:
                    b7:6c:35:d0:6a:8f:c5:36:84:18:9d:34:7c:da:3d:
                    97:29:76:e5:51:fc:0c:38:59:90:5e:02:e7:9a:aa:
                    e9:22:b0:a4:fc:04:bf:3e:3a:3c:a2:49:cb:7b:2e:
                    a4:32:86:68:50:37:bc:7d:a7:1a:98:10:a4:67:26:
                    4d:27:e2:a0:e7:56:d6:00:ad:f6:12:98:2d:22:88:
                    7a:53:aa:aa:67:f8:fe:4f:ca:7b:e3:a8:8b:07:8c:
                    7b:f0:1d:2a:d2:e9:7a:65:dd:49:af:db:96:1e:82:
                    2d:77:25:00:1a:9a:17:e9:3e:64:69:08:1a:cd:fc:
                    ee:35:0c:6e:97:03:6a:27:ce:ac:e8:cf:ec:7a:a1:
                    f4:8e:20:af:3a:49:b2:8d:66:89:f1:54:64:af:b9:
                    af:ea:46:a8:89:36:13:4b:da:57:77:b6:ff:23:84:
                    8e:33:ef:13:18:46:86:eb:15:1a:f9:1f:13:12:d0:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:09:D7:84:FC:57:C7:8A:DE:D6:9E:36:79:5D:EB:97:47:C5:4C:B7
            X509v3 Authority Key Identifier:
                keyid:65:59:2E:93:C8:C7:1F:06:F3:34:AC:48:8E:77:1F:3A:67:B2:EB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65592E93C8C71F06F334AC488E771F3A67B2EB17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F383FDA0DCBD803E664F22F1AAD837427049E65B6F9E0EB251813428C712177C/0/323830313a31313a323030303a3a2f34382d3438203d3e203631343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:7e:b4:f0:11:a1:45:06:5b:83:5f:fd:12:6d:1c:a8:7a:
         81:50:96:a0:63:59:0a:0d:08:11:78:e2:55:62:31:4f:8e:9c:
         f0:6f:af:3a:32:06:5e:b1:7c:b2:56:71:94:16:22:b6:eb:bf:
         c7:d3:a6:c8:9c:80:21:a1:0b:df:61:8e:3f:25:53:f8:d7:fa:
         d4:86:3a:35:2d:6e:cb:83:a1:11:9e:6b:83:18:46:13:73:2b:
         03:9e:b9:9d:23:dd:a7:e9:3b:5d:d8:04:8e:14:b3:af:1d:4b:
         41:b3:92:ce:ee:e9:3c:ec:4a:b9:54:bb:a7:b9:3e:36:bd:97:
         28:03:7f:9d:ce:48:19:a0:cb:e1:b8:bf:49:5a:c4:e5:e7:ed:
         34:10:d5:2c:86:33:f8:25:13:cf:bb:10:86:dd:db:66:41:7a:
         af:21:88:ef:d7:db:b6:fe:41:36:3a:0c:7a:9c:31:60:23:57:
         77:b4:cd:8e:dc:b7:53:64:77:d6:73:3a:1b:26:9b:43:f8:62:
         62:d8:9e:93:4f:07:05:27:5d:23:d3:03:29:e7:86:ec:51:cb:
         ec:14:7d:d3:ed:5f:aa:ca:e6:ee:9d:4a:8a:8c:b1:07:43:43:
         c5:9a:ea:4f:4c:da:bf:18:e0:22:f7:2e:c9:0a:52:de:9b:41:
         9f:93:78:9a
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUVH+2P4BosbNOy/3lazlaB6ZXmfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU1OTJFOTNDOEM3MUYwNkYzMzRBQzQ4OEU3NzFGM0E2
N0IyRUIxNzAeFw0yNDAzMDUxNzQ1NTFaFw0yNTAzMDQxNzUwNTFaMDMxMTAvBgNV
BAMTKEVBMDlENzg0RkM1N0M3OEFERUQ2OUUzNjc5NURFQjk3NDdDNTRDQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRixdT6QGTXXL9RarZ32Tx9+F
Z/i7ZHTPiivq7rqybSkADboFpwLM4/cNPwkjgXeQYLMd9N40MoKbMZp98m7NoMeW
e0cG7GP2JbdsNdBqj8U2hBidNHzaPZcpduVR/Aw4WZBeAueaqukisKT8BL8+Ojyi
Sct7LqQyhmhQN7x9pxqYEKRnJk0n4qDnVtYArfYSmC0iiHpTqqpn+P5PynvjqIsH
jHvwHSrS6Xpl3Umv25Yegi13JQAamhfpPmRpCBrN/O41DG6XA2onzqzoz+x6ofSO
IK86SbKNZonxVGSvua/qRqiJNhNL2ld3tv8jhI4z7xMYRobrFRr5HxMS0FTRAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU6gnXhPxXx4re1p42eV3rl0fFTLcwHwYDVR0j
BBgwFoAUZVkuk8jHHwbzNKxIjncfOmey6xcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzgzRkRBMERDQkQ4MDNFNjY0RjIyRjFBQUQ4Mzc0Mjcw
NDlFNjVCNkY5RTBFQjI1MTgxMzQyOEM3MTIxNzdDLzAvNjU1OTJFOTNDOEM3MUYw
NkYzMzRBQzQ4OEU3NzFGM0E2N0IyRUIxNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NTU5MkU5M0M4QzcxRjA2RjMz
NEFDNDg4RTc3MUYzQTY3QjJFQjE3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjM4M0ZEQTBEQ0JEODAzRTY2NEYyMkYxQUFEODM3NDI3MDQ5RTY1QjZG
OUUwRUIyNTE4MTM0MjhDNzEyMTc3Qy8wLzMyMzgzMDMxM2EzMTMxM2EzMjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzEzNDM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQARIAAwDQYJKoZIhvcNAQELBQADggEBAAwifrTwEaFFBluDX/0SbRyoeoFQlqBj
WQoNCBF44lViMU+OnPBvrzoyBl6xfLJWcZQWIrbrv8fTpsicgCGhC99hjj8lU/jX
+tSGOjUtbsuDoRGea4MYRhNzKwOeuZ0j3afpO13YBI4Us68dS0Gzks7u6TzsSrlU
u6e5Pja9lygDf53OSBmgy+G4v0laxOXn7TQQ1SyGM/glE8+7EIbd22ZBeq8hiO/X
27b+QTY6DHqcMWAjV3e0zY7ct1Nkd9ZzOhsmm0P4YmLYnpNPBwUnXSPTAynnhuxR
y+wUfdPtX6rK5u6dSoqMsQdDQ8Wa6k9M2r8Y4CL3LskKUt6bQZ+TeJo=
-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:50 2024 by rpki-client on console-ams.rpki-client.org