Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a313030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a313030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          KR558Da11sKuCaw2czDNLgZILByZH/HFTcDt4MTf75M=
Subject key identifier:   62:15:54:50:DA:32:4A:BC:FE:FF:AC:21:C3:EE:6C:08:20:1A:C9:95
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       07EEF110CD478BB993A1EA6312C84E39209ECB44
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a313030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:30 +0000
ROA not before:           Tue 05 Mar 2024 17:42:30 +0000
ROA not after:            Tue 04 Mar 2025 17:47:30 +0000
asID:                     61508
IP address blocks:        2803:f240:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ee:f1:10:cd:47:8b:b9:93:a1:ea:63:12:c8:4e:39:20:9e:cb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:30 2024 GMT
            Not After : Mar  4 17:47:30 2025 GMT
        Subject: CN=62155450DA324ABCFEFFAC21C3EE6C08201AC995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:8e:d6:35:a3:88:41:92:56:0c:4b:ca:a7:
                    e5:7a:dd:3a:18:74:0c:4a:07:6b:a4:93:c2:99:a8:
                    06:79:d4:e4:67:aa:63:06:33:b1:d8:84:19:77:d6:
                    64:6a:5e:fa:23:37:1d:d9:dc:9e:7b:c1:f1:a0:55:
                    4c:5c:66:ad:33:9a:43:da:30:26:26:e6:20:7e:eb:
                    d4:c4:17:5e:f8:32:e7:5c:95:7f:f4:cf:cc:cf:31:
                    40:e6:00:69:5e:26:96:6f:7a:86:76:db:a2:c5:0b:
                    bf:98:9f:63:6c:57:00:e4:69:4e:18:84:7b:b9:ed:
                    2f:4d:e4:04:da:df:3a:cf:65:3a:f3:63:85:36:7b:
                    28:69:9d:dc:d9:6c:d2:d1:5a:34:09:53:10:7a:51:
                    6f:cc:33:c3:8b:47:ad:30:82:14:a7:2c:7c:f2:59:
                    4c:81:60:0b:0e:4d:d4:a1:e3:3d:48:09:dd:b7:a1:
                    dc:f5:8e:8f:a1:93:a1:78:05:ee:98:32:4e:c4:5d:
                    a7:89:1d:ec:b5:68:04:63:b8:ff:23:12:96:09:79:
                    b3:8a:42:48:5b:e0:ac:f0:c9:5e:85:66:cb:3e:ea:
                    29:34:05:0c:d1:74:e4:fc:25:36:50:1c:41:b6:75:
                    a8:ce:2a:b7:12:cc:ee:95:14:f4:91:79:bf:d0:0a:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:15:54:50:DA:32:4A:BC:FE:FF:AC:21:C3:EE:6C:08:20:1A:C9:95
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a313030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:b1:86:42:a2:1e:97:a0:9c:38:58:3b:6f:ef:28:5b:f0:
         48:b2:b1:f2:25:12:32:0a:ca:3a:ea:e3:b3:5f:09:fc:54:72:
         37:d6:99:65:2f:48:6f:98:c6:e0:fb:a7:97:b1:7f:a2:42:be:
         86:55:68:c2:1f:ee:b0:a5:89:2c:5c:73:f9:c9:fd:38:ea:c3:
         92:4f:ed:fe:51:0e:9d:71:63:8c:2e:eb:bf:83:a5:9e:4b:88:
         8b:19:3c:1a:c7:80:73:df:80:b8:49:d7:b5:79:3e:df:52:e6:
         cc:72:9f:12:16:18:79:47:ed:fd:ae:8d:bd:4c:3d:8c:5a:70:
         25:31:4e:ec:31:1a:c8:44:6b:32:ec:78:e1:12:20:58:f7:1e:
         d2:24:60:03:53:81:89:47:7f:03:00:bc:05:8f:77:ea:46:4c:
         62:13:e9:28:4c:25:01:ee:25:95:46:4d:bf:0b:48:4c:bb:da:
         27:88:23:d3:f8:15:c7:c3:03:64:a3:79:73:59:2f:4b:6f:9f:
         86:fb:3e:b5:f9:c4:af:b3:cc:60:55:b0:07:80:6b:5b:ba:1a:
         06:ad:b3:52:6c:ff:ce:85:f4:8e:e1:0f:1d:cd:75:fa:b0:68:
         aa:ca:d2:b9:4a:01:79:e0:f2:75:51:fc:23:b2:9d:fe:ea:55:
         76:54:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org