Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a333030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a333030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          3pqRzO5614nysx6wXUKQ07qrNHKgH7YyGOlfx+d3u1A=
Subject key identifier:   B9:F4:E7:26:99:99:35:BA:45:BD:FF:67:0E:CA:C7:44:AB:96:2B:18
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       139A5E25FB25354B84F1CB73C373BF49C7D8AEC7
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a333030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:30 +0000
ROA not before:           Tue 05 Mar 2024 17:42:30 +0000
ROA not after:            Tue 04 Mar 2025 17:47:30 +0000
asID:                     61508
IP address blocks:        2803:f240:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9a:5e:25:fb:25:35:4b:84:f1:cb:73:c3:73:bf:49:c7:d8:ae:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:30 2024 GMT
            Not After : Mar  4 17:47:30 2025 GMT
        Subject: CN=B9F4E726999935BA45BDFF670ECAC744AB962B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:c6:0f:2a:a2:2e:df:d6:69:b2:f5:38:00:
                    d2:ca:09:94:62:f0:d2:bc:a4:f6:64:1d:52:6f:dd:
                    c9:c2:4f:bd:32:bb:06:e7:6a:ca:82:e4:d8:16:ec:
                    60:7f:9d:84:0c:e3:45:3c:24:e4:a5:12:50:c4:2f:
                    b1:9e:4c:a0:19:5a:97:2f:39:77:42:9a:b9:04:c4:
                    f6:03:b2:d1:ba:5d:12:be:4e:83:b5:23:70:92:b0:
                    5c:c5:ec:6a:41:4d:4a:7c:0b:5e:83:f3:42:aa:b7:
                    0a:d9:2b:7d:c1:26:d9:a6:50:3c:bf:67:ca:c0:57:
                    58:42:69:cc:7f:33:cf:1c:7d:26:58:d1:c1:9b:5e:
                    4e:41:6b:66:d7:18:b4:d3:b0:d9:52:32:6c:af:33:
                    95:78:13:81:64:52:ed:a7:5d:76:00:fa:f0:8d:41:
                    08:be:1a:32:d3:05:28:8c:ab:62:d4:82:21:a4:15:
                    a6:54:ba:89:74:18:a4:b3:1b:4a:e6:31:07:b2:e3:
                    50:24:94:eb:84:34:34:84:df:af:a4:a7:f6:ff:c3:
                    c2:7f:bc:6c:a7:40:35:a5:9a:3b:4e:9f:dd:57:c2:
                    ad:8d:b2:81:4b:ea:51:1c:fb:d1:87:21:d1:b8:fd:
                    9f:b5:79:f6:41:62:41:f1:03:31:55:14:3c:6d:50:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F4:E7:26:99:99:35:BA:45:BD:FF:67:0E:CA:C7:44:AB:96:2B:18
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a333030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:9f:d2:a7:7c:09:11:26:54:5b:b2:fd:58:b1:5a:f7:0a:
         b7:04:c0:1c:f9:49:7b:93:85:dc:13:df:11:43:63:dc:c3:ee:
         75:71:b3:b1:f4:81:a6:7c:62:22:a4:c3:51:80:fa:89:2e:28:
         69:0d:a5:0f:57:aa:97:9a:4f:05:4d:70:7f:51:b9:9d:77:0d:
         0d:5e:4c:3d:6b:93:8a:88:db:98:4f:7e:da:03:18:bc:0f:75:
         40:66:2f:61:fd:82:fb:28:97:5c:18:f0:5a:d6:38:74:63:b4:
         a9:20:71:39:2e:1d:91:21:fe:6c:ff:4c:7c:42:3f:2d:a7:59:
         16:5f:11:dc:0b:64:b7:74:cb:ab:10:7b:e7:77:a4:76:6b:b9:
         4e:81:09:0f:4a:4a:af:da:43:45:0f:a5:d5:a4:4e:55:c7:63:
         f4:dd:85:27:57:60:a1:cf:8a:9c:4e:69:cf:78:e0:62:20:0f:
         31:2e:13:29:cd:e7:4e:63:e0:9c:5a:1d:cb:5f:7c:57:eb:7a:
         ce:84:c2:9e:ad:be:eb:20:78:d8:f0:b8:1c:51:5d:c2:47:e5:
         f2:2c:4a:6f:81:60:5c:cd:e8:b8:20:9c:47:b5:08:8b:46:31:
         ca:7d:6a:43:b2:d6:4b:63:45:f8:29:07:5e:8c:04:a1:c9:8a:
         63:38:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org