Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a363030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a363030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          gxkdT3Tw51GBoWV/wtm+o92ohmssCU0yinT+f8JZW9E=
Subject key identifier:   1E:3B:BA:E7:1D:68:59:4C:43:1E:C9:70:AD:05:C1:28:8B:A2:CE:44
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       7306BA1C2E572835773B733A297D7C9FA6069618
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a363030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:31 +0000
ROA not before:           Tue 05 Mar 2024 17:42:31 +0000
ROA not after:            Tue 04 Mar 2025 17:47:31 +0000
asID:                     61508
IP address blocks:        2803:f240:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:06:ba:1c:2e:57:28:35:77:3b:73:3a:29:7d:7c:9f:a6:06:96:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:31 2024 GMT
            Not After : Mar  4 17:47:31 2025 GMT
        Subject: CN=1E3BBAE71D68594C431EC970AD05C1288BA2CE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:dc:04:74:4c:31:7d:80:38:aa:ae:13:cf:
                    c2:1f:74:28:7a:dd:ec:2d:c1:13:9b:5f:4a:ae:d0:
                    c6:ab:4f:22:09:ba:dd:73:34:80:bf:13:1f:f8:ae:
                    a1:b7:ba:9e:eb:8d:d6:12:83:11:05:34:a2:22:7a:
                    52:31:35:ce:cd:e8:11:4f:3d:03:7a:04:32:1a:ce:
                    8d:32:77:12:48:ec:4a:b4:42:63:a1:a9:cd:f0:74:
                    f4:bc:85:13:37:9b:f0:f5:c7:0a:2b:b2:5d:bc:ff:
                    39:00:df:0e:fe:af:bf:5a:16:7d:4a:4e:da:5e:58:
                    d5:ad:df:f9:fa:6e:3a:9b:13:ea:b5:ef:c7:ed:2f:
                    6e:8e:8c:9c:0d:d3:d9:e5:fb:e3:d1:16:3e:1b:4f:
                    8b:4f:d2:e2:7f:c8:1f:b8:91:c6:30:de:fe:92:15:
                    f7:8f:d4:c6:12:22:df:fe:f7:68:c5:30:66:64:b8:
                    e9:1b:78:81:3a:b1:b4:34:02:e1:e6:29:94:3b:46:
                    d6:db:17:b7:c8:31:5d:5f:b4:eb:ad:d5:49:8f:70:
                    a1:4b:2e:8a:58:bd:40:d5:6d:48:93:84:4e:35:ba:
                    f8:e2:b5:bb:4b:c1:88:af:07:72:7d:f0:9a:ca:2c:
                    00:c7:96:5c:0f:02:5d:57:92:36:59:c2:e7:05:fd:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:BA:E7:1D:68:59:4C:43:1E:C9:70:AD:05:C1:28:8B:A2:CE:44
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a363030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:7c:36:0d:61:ea:4b:5f:26:bf:a8:ff:b4:c1:38:80:07:99:
         74:52:90:9e:7a:e3:3f:68:04:e2:dc:17:b1:54:c4:f6:53:69:
         aa:2c:2c:99:b9:19:38:c8:fa:78:df:3e:01:97:26:2b:5e:fb:
         3b:27:86:8c:60:9d:d1:7f:e4:79:55:ff:7b:bb:c3:28:7f:ce:
         7b:0b:53:a6:0d:32:2a:d9:65:b8:db:74:04:3d:ed:e1:e4:1c:
         a4:c7:8b:db:7d:fd:9c:90:a4:87:a1:4e:40:d3:31:c6:4f:e4:
         c4:8e:48:90:e9:64:10:c9:bc:bc:72:ce:c6:2e:e7:03:82:f3:
         cd:92:43:ae:1a:fc:7a:db:56:f2:a2:fc:28:f8:45:3c:ff:fa:
         c4:fb:39:45:6f:95:ec:e3:68:8c:e1:c2:bc:11:b8:fa:19:8b:
         c8:4f:d1:b7:54:67:30:38:db:64:fd:75:c5:e1:a2:b1:3e:88:
         b2:68:3d:39:a0:fc:7c:d5:c4:29:5a:69:0e:1b:ee:bd:5a:6f:
         f8:b4:2d:87:18:f6:05:3f:17:24:19:cc:43:1c:49:11:ad:7d:
         79:40:9a:f8:a9:f0:f3:04:ef:23:87:52:90:a3:53:ac:39:0a:
         a4:d4:3e:04:90:ed:c5:66:5b:73:0e:e6:18:70:45:db:fe:d9:
         a0:9c:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:04:43 2024 by rpki-client on console-ams.rpki-client.org