Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/323830333a616431303a3a2f33322d3434203d3e20323732303432.roa
File:                     323830333a616431303a3a2f33322d3434203d3e20323732303432.roa (raw, json)
Hash identifier:          0ZDniSpvvM+/eQ92iWrdExMFFWMsy7xnxC9VQjqqtuE=
Subject key identifier:   33:C7:0B:6B:BA:66:ED:C6:E1:7F:FE:09:1A:62:4C:41:02:AC:9E:E3
Certificate issuer:       /CN=5055DAB0774256A9F10CE73FE01C249C78B2C542
Certificate serial:       59C72875C30936EB34058477D54452CF79906B46
Authority key identifier: 50:55:DA:B0:77:42:56:A9:F1:0C:E7:3F:E0:1C:24:9C:78:B2:C5:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/323830333a616431303a3a2f33322d3434203d3e20323732303432.roa
Signing time:             Tue 05 Mar 2024 18:16:53 +0000
ROA not before:           Tue 05 Mar 2024 18:11:53 +0000
ROA not after:            Tue 04 Mar 2025 18:16:53 +0000
asID:                     272042
IP address blocks:        2803:ad10::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c7:28:75:c3:09:36:eb:34:05:84:77:d5:44:52:cf:79:90:6b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5055DAB0774256A9F10CE73FE01C249C78B2C542
        Validity
            Not Before: Mar  5 18:11:53 2024 GMT
            Not After : Mar  4 18:16:53 2025 GMT
        Subject: CN=33C70B6BBA66EDC6E17FFE091A624C4102AC9EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:4c:18:17:c0:98:b8:11:37:b0:0e:a9:d4:
                    70:bd:be:de:d2:b8:1f:1a:5b:e3:cb:14:58:98:e5:
                    fc:8a:28:2b:73:d1:b8:d2:3d:a4:3c:36:f0:e8:6e:
                    b8:2e:2b:ad:df:c0:32:30:65:70:b2:a8:5b:75:33:
                    71:16:99:60:3b:5a:b4:e0:9d:23:db:51:94:eb:c6:
                    03:d5:9c:e6:56:f3:cf:84:13:9a:4f:e9:0c:b8:fb:
                    ab:94:21:8d:c3:ab:7e:9f:7f:6b:58:e4:9f:46:b9:
                    8e:42:c9:c0:ad:5d:02:8b:19:a8:7b:14:4f:bc:66:
                    d8:4a:65:25:f6:b9:4a:7c:aa:7a:fb:90:94:aa:4e:
                    3d:57:71:b5:d3:db:d0:09:2f:82:62:34:86:0b:45:
                    9f:a9:be:c4:94:8f:49:f0:37:d3:ec:4f:3b:06:9b:
                    36:d5:5f:8c:67:80:5a:20:a0:f3:1b:c8:2e:07:f0:
                    df:49:a9:0e:88:00:19:05:c8:fb:39:c0:79:8e:6a:
                    62:76:85:03:a2:de:cf:c0:6f:38:48:d1:b5:25:d9:
                    68:85:cc:41:fd:5a:23:68:17:25:b1:aa:c0:07:5e:
                    1a:a5:05:c1:af:32:a7:54:0a:85:aa:d3:4e:c9:1e:
                    44:0c:dd:82:f2:bd:1c:73:c0:da:69:08:16:0d:55:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:0B:6B:BA:66:ED:C6:E1:7F:FE:09:1A:62:4C:41:02:AC:9E:E3
            X509v3 Authority Key Identifier:
                keyid:50:55:DA:B0:77:42:56:A9:F1:0C:E7:3F:E0:1C:24:9C:78:B2:C5:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/323830333a616431303a3a2f33322d3434203d3e20323732303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad10::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:13:39:dc:8e:fc:33:62:53:ee:fe:38:1c:60:6f:04:53:
         fc:34:6b:78:6a:7b:96:98:e8:e3:c5:fd:00:36:b0:5a:5f:53:
         30:6d:25:48:75:f1:98:17:1b:2a:e5:e3:c0:a6:06:44:81:6a:
         ec:7c:7e:58:70:60:41:4f:b2:b6:96:21:2e:d6:fa:08:e3:44:
         03:71:8e:b5:a3:aa:8a:ca:41:09:c4:2d:77:f5:56:99:33:4a:
         8d:91:c9:0c:72:e4:ce:b7:7a:78:78:4e:6f:08:d3:e2:0d:0f:
         64:05:66:48:d6:fb:dd:14:0c:1e:08:85:7c:6f:8c:41:4d:ac:
         f6:7c:4a:a1:d0:b5:44:2e:c1:cc:47:8f:f8:3d:a1:31:22:cc:
         e6:e9:7a:25:62:e3:45:f2:51:9d:76:b5:33:7b:79:9d:3b:4b:
         f5:90:f6:d7:82:ed:24:19:60:2b:a5:65:9d:48:29:12:27:a1:
         4e:da:ab:72:ad:48:6c:9b:c2:e2:6e:c2:b9:63:e7:3e:50:77:
         66:01:06:f2:1e:cb:47:a4:7c:12:5d:1f:51:d6:46:c7:ab:de:
         8f:75:7e:29:e8:b5:2f:a4:31:f8:58:0a:01:72:d3:31:61:99:
         1c:16:df:4b:30:5a:2d:f4:4e:aa:36:8e:3d:52:58:80:f1:98:
         f1:21:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org