Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a3a2f33322d3438203d3e20323730303039.roa
File:                     323830333a383432303a3a2f33322d3438203d3e20323730303039.roa (raw, json)
Hash identifier:          jDHdmnxisw+sTPocgY0L6UnnHqVr11YYGWmPMvRHr68=
Subject key identifier:   84:83:5D:8F:95:CF:29:3F:96:E9:D5:C8:6F:F6:D1:67:E0:CE:BA:E8
Certificate issuer:       /CN=E6A7505DAA0B511A5813C04388D52EC51B947806
Certificate serial:       62C1287FBC76E1A1B8226FEB8825D611BF7FE350
Authority key identifier: E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a3a2f33322d3438203d3e20323730303039.roa
Signing time:             Tue 05 Mar 2024 17:43:24 +0000
ROA not before:           Tue 05 Mar 2024 17:38:24 +0000
ROA not after:            Tue 04 Mar 2025 17:43:24 +0000
asID:                     270009
IP address blocks:        2803:8420::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c1:28:7f:bc:76:e1:a1:b8:22:6f:eb:88:25:d6:11:bf:7f:e3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A7505DAA0B511A5813C04388D52EC51B947806
        Validity
            Not Before: Mar  5 17:38:24 2024 GMT
            Not After : Mar  4 17:43:24 2025 GMT
        Subject: CN=84835D8F95CF293F96E9D5C86FF6D167E0CEBAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:42:6d:c5:dc:c1:56:4c:28:20:e2:0f:1a:
                    bf:bd:28:3c:5c:0f:49:23:0b:9f:50:15:21:a2:28:
                    c2:d9:ce:4f:53:ea:77:2d:0e:66:a3:43:cb:06:3c:
                    c8:43:27:bb:f3:c7:b4:46:8c:20:aa:31:31:6f:fc:
                    22:78:83:14:40:d8:ee:5d:3f:cf:30:dc:ff:d8:1c:
                    22:d9:00:cb:e2:40:49:82:12:74:6e:75:ee:2e:2c:
                    f4:08:d1:d9:e3:83:41:d3:29:e5:60:c9:0d:a4:76:
                    29:00:1b:34:01:76:23:a4:92:97:b3:b7:1e:43:49:
                    84:4c:23:e2:c3:47:a3:79:54:98:5d:f2:87:64:97:
                    a0:67:bf:55:17:df:e8:19:01:af:58:0c:39:8e:53:
                    db:c1:f4:ae:2a:b7:da:d2:96:80:26:5d:ce:5c:1c:
                    cb:e8:b2:67:bf:35:81:3a:db:25:95:0e:44:ad:73:
                    18:dd:b3:92:e9:00:9e:22:41:19:c7:9b:e1:da:e7:
                    2e:ef:82:aa:7d:80:ec:b5:6f:5a:24:11:75:78:d5:
                    35:85:84:59:81:0c:58:4c:79:33:24:fc:4c:ee:fa:
                    e3:15:3a:94:33:07:e1:86:0a:dd:ae:d1:37:d5:0f:
                    1d:fd:7c:a6:99:ad:f6:9e:c2:83:73:5f:71:43:44:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:5D:8F:95:CF:29:3F:96:E9:D5:C8:6F:F6:D1:67:E0:CE:BA:E8
            X509v3 Authority Key Identifier:
                keyid:E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a3a2f33322d3438203d3e20323730303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8420::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:d4:87:66:21:45:30:b7:40:61:fe:5a:38:ac:c2:57:52:
         fa:9d:c1:47:62:e8:85:83:0b:5e:36:0a:47:4d:d1:1b:9c:af:
         da:af:32:ad:b9:f2:57:82:10:70:d1:b0:2a:07:d5:74:90:0d:
         13:08:9c:1a:13:86:23:80:a0:ed:20:77:21:db:b4:1f:0b:14:
         cf:f6:e0:10:01:cd:60:21:52:87:4b:90:dd:8c:8b:52:d3:07:
         c5:92:48:2b:83:4b:71:e6:53:da:02:90:b9:32:14:83:74:43:
         10:76:f2:1e:c8:b4:a3:63:f1:33:b1:9a:79:19:17:5c:c7:92:
         09:0b:6f:0d:12:76:c0:e9:3b:38:20:d0:bb:62:27:d1:80:40:
         25:c8:e5:7a:5e:91:5a:87:27:c9:0a:31:71:e0:3d:b1:b4:bf:
         f3:66:f5:bb:a1:34:f0:a8:ec:d0:5a:61:15:af:ef:0c:c5:9e:
         85:63:0b:6f:87:3e:c6:1d:5b:31:75:64:16:74:5b:2f:f2:e5:
         bf:e7:f1:04:11:dc:a2:15:47:18:db:95:91:7d:12:f4:a0:fe:
         48:7a:67:74:6c:83:cd:d5:31:d7:86:b2:b6:e1:72:7f:af:2b:
         d4:25:66:31:79:fd:89:f3:c9:8d:56:4b:ab:a5:7a:31:df:c5:
         2f:39:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:16:17 2024 by rpki-client on console-fra.rpki-client.org