Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a3a2f33302d3438203d3e20323730303335.roa
File:                     323830333a653565303a3a2f33302d3438203d3e20323730303335.roa (raw, json)
Hash identifier:          Ic9ZxzcdNsuVbsEkLG9T40CJiwo14nIcrgi4KxkC1U8=
Subject key identifier:   6C:11:F3:18:B5:4B:FB:A4:41:6C:2A:E4:C4:17:61:E8:E2:84:1B:13
Certificate issuer:       /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial:       27D213BD42CA2361555AC1AAE2A8520862C92FA4
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a3a2f33302d3438203d3e20323730303335.roa
Signing time:             Tue 05 Mar 2024 18:06:47 +0000
ROA not before:           Tue 05 Mar 2024 18:01:47 +0000
ROA not after:            Tue 04 Mar 2025 18:06:47 +0000
asID:                     270035
IP address blocks:        2803:e5e0::/30 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d2:13:bd:42:ca:23:61:55:5a:c1:aa:e2:a8:52:08:62:c9:2f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
        Validity
            Not Before: Mar  5 18:01:47 2024 GMT
            Not After : Mar  4 18:06:47 2025 GMT
        Subject: CN=6C11F318B54BFBA4416C2AE4C41761E8E2841B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:b6:93:87:01:8b:80:ce:be:50:d5:66:09:
                    01:a1:ce:75:00:2a:ee:9c:e3:63:04:a8:d8:ea:63:
                    64:be:09:1e:4a:29:9b:e2:0d:ce:76:29:68:8c:15:
                    d5:46:e1:ac:ca:5a:f7:55:b9:92:97:2f:db:ab:12:
                    f5:05:20:0a:ea:f9:cb:0d:94:cf:b4:a2:18:49:2c:
                    da:2f:4e:ac:a7:e9:89:1c:f6:28:cb:b7:dc:a1:ff:
                    7e:b0:9e:c5:e0:d9:0d:28:49:7c:d7:3c:31:90:fa:
                    d6:59:e3:1f:99:30:2d:0c:f5:de:f8:73:ea:71:78:
                    9d:74:c1:3c:2e:84:f3:e1:fc:06:76:2e:14:31:b9:
                    9d:13:3c:11:39:10:e5:86:ee:f0:62:05:b6:1a:2a:
                    f6:e6:c7:b2:0f:b6:37:92:ac:a4:48:de:30:89:e1:
                    c3:b7:41:46:9e:2a:ef:82:3b:d5:21:eb:78:b4:0b:
                    27:a3:e3:86:20:69:f7:19:a2:24:c7:4d:c0:13:ad:
                    d1:81:7e:5d:cd:bb:d1:fd:52:e8:09:fd:9e:61:2b:
                    76:a7:53:c3:2f:e2:cf:80:94:a4:0f:39:e6:1d:21:
                    ab:2d:7b:58:9d:c8:e2:65:35:ba:fa:9a:8f:4b:bb:
                    23:0b:f4:34:5a:6d:64:dd:aa:20:fb:b6:30:b3:58:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:11:F3:18:B5:4B:FB:A4:41:6C:2A:E4:C4:17:61:E8:E2:84:1B:13
            X509v3 Authority Key Identifier:
                keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a3a2f33302d3438203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0::/30

    Signature Algorithm: sha256WithRSAEncryption
         aa:bb:eb:c9:75:74:f8:4b:2c:2e:9b:b7:a3:1e:d6:c7:44:3c:
         14:36:31:d7:95:bc:9b:f1:6e:3f:31:e9:26:fc:91:a3:0d:67:
         1a:34:63:4a:71:34:2e:c1:f8:19:6d:2f:8b:e9:88:b1:c8:c0:
         b1:cc:13:53:91:c2:f9:31:b7:0e:bb:2d:82:4d:3c:8f:6e:0e:
         a1:ae:54:e7:f2:a0:52:96:7c:3f:95:4c:ee:c9:37:5e:a6:fb:
         ec:e5:48:b8:53:6c:98:4e:c2:66:fc:0f:ee:9e:60:7e:6c:b7:
         62:be:55:72:38:1e:3c:e5:9d:a5:d0:11:2e:2a:0f:a6:bb:27:
         b4:4d:bc:84:81:11:32:78:be:84:b5:04:86:25:a5:ec:63:d6:
         d7:a5:df:25:26:33:64:93:9b:0a:62:b9:fe:ed:e3:c7:90:a1:
         f4:e2:72:8a:df:6e:07:a8:d6:a9:65:7d:fd:70:2c:ec:72:35:
         1d:ed:80:9f:d2:df:29:70:cf:c5:05:1e:df:33:81:eb:8f:14:
         e6:b0:2e:94:3f:21:61:3e:30:e3:f8:fc:19:b6:5a:5c:23:1f:
         72:94:d4:4c:76:f0:e4:ad:67:15:f3:6e:8f:0b:ed:bb:8e:27:
         f8:5d:03:cd:d6:ac:07:ec:81:46:d1:18:95:65:0c:c4:af:2a:
         78:1a:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 07:58:50 2024 by rpki-client on console-fra.rpki-client.org