Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a353030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a353030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          bfggqULhZeNLsuYHMZZ+KXYkeGg4Ya6DGHzSwwYAMj4=
Subject key identifier:   6F:2C:E6:55:15:21:CF:C1:E1:CF:0A:39:9A:C5:E4:66:36:8A:29:3C
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       0DA4E5111140F15E19A3A4136450F86127689BDD
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a353030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:27 +0000
ROA not before:           Tue 05 Mar 2024 17:42:27 +0000
ROA not after:            Tue 04 Mar 2025 17:47:27 +0000
asID:                     61508
IP address blocks:        2803:f240:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a4:e5:11:11:40:f1:5e:19:a3:a4:13:64:50:f8:61:27:68:9b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:27 2024 GMT
            Not After : Mar  4 17:47:27 2025 GMT
        Subject: CN=6F2CE6551521CFC1E1CF0A399AC5E466368A293C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:2d:de:2f:94:3a:2f:98:84:5b:ff:e2:a2:
                    57:83:1a:af:a1:65:19:fa:54:33:4e:6b:7a:47:d6:
                    db:a2:c2:00:2a:51:1a:b0:6e:e5:1d:a1:1a:8f:9d:
                    61:35:9d:65:65:92:ea:d3:22:09:4f:f1:67:93:f5:
                    da:83:88:30:82:f5:6b:86:69:6b:cd:6b:c5:17:53:
                    cf:c6:5c:ec:5c:22:36:a7:c0:5c:ef:0c:b9:55:a9:
                    42:09:c4:c4:88:aa:73:d7:c8:b7:04:b5:79:d8:6b:
                    c2:c2:f9:bf:54:c9:5b:5d:69:d9:87:2e:f7:da:21:
                    d5:aa:c6:c0:a6:23:88:bd:37:2f:3b:39:76:ed:ad:
                    ac:49:9a:8e:dd:5c:37:4b:41:2e:cf:85:43:20:7e:
                    63:64:28:36:f3:0c:09:1b:5b:c2:28:ec:60:0f:4f:
                    d9:76:19:50:7b:d2:e2:3a:fb:78:f4:dc:1b:9f:52:
                    28:08:a0:d1:95:31:a9:33:88:1a:52:1d:03:ad:01:
                    bc:33:4d:e5:f0:97:fe:0d:28:b3:9a:a6:eb:59:d3:
                    ad:f6:35:16:95:8c:03:10:00:df:ce:c5:b4:17:17:
                    8b:52:eb:b1:2e:74:89:7f:a4:5c:a5:e4:cf:82:5e:
                    f4:c2:26:79:6a:44:d9:a9:b4:b0:e9:fe:d4:fb:8f:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:E6:55:15:21:CF:C1:E1:CF:0A:39:9A:C5:E4:66:36:8A:29:3C
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a353030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:9b:51:e8:34:e6:29:9e:55:ec:36:df:43:f3:5f:2a:86:e7:
         71:87:97:9a:be:97:1f:15:19:c7:57:80:16:3b:f7:b6:a1:e0:
         68:36:46:8b:00:bc:7a:92:17:85:fc:51:09:b1:be:16:cc:65:
         2c:07:f6:8e:33:8d:5c:08:6f:e1:74:ab:4e:80:8a:90:ee:d0:
         98:09:71:53:68:0b:ab:94:3d:67:8c:de:dc:55:db:cf:75:27:
         20:28:f0:15:db:85:21:1c:f5:c2:21:79:86:35:a3:41:e5:f7:
         7b:c1:26:f8:79:0a:f6:df:be:2d:bc:6e:d8:0e:3b:e6:d3:5c:
         49:3d:6d:90:f8:a3:e3:00:3f:48:e2:82:5c:56:b2:5a:fb:c9:
         e6:19:a1:7f:fa:05:21:e5:51:97:f2:58:3e:ed:57:5f:82:84:
         ae:2b:77:ea:a0:32:c1:7e:3a:2f:20:24:61:e7:5d:00:64:bf:
         69:9c:83:c6:83:b3:35:5d:6b:ff:b7:4b:f9:a5:aa:1d:56:4c:
         97:0a:ef:6e:72:b7:43:b0:f4:96:62:95:0d:82:55:84:f6:d6:
         c2:55:f7:90:54:87:64:a9:8f:7d:f6:5b:2b:0f:e9:dc:99:7a:
         4e:db:e8:97:ad:45:b6:20:ba:ed:cb:b5:89:39:88:58:5b:50:
         e6:4e:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org