Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a373030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a373030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          0rbVaeocvHNLJhxjRm22Enh6eFAa+7puDv1JDiNZwC4=
Subject key identifier:   5E:99:07:03:43:D8:36:B4:B6:E3:36:BF:59:D7:3F:A3:F5:BF:20:54
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       0B922696EC9EEC8279C02211118BC32AA408A0F9
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a373030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:29 +0000
ROA not before:           Tue 05 Mar 2024 17:42:29 +0000
ROA not after:            Tue 04 Mar 2025 17:47:29 +0000
asID:                     61508
IP address blocks:        2803:f240:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:92:26:96:ec:9e:ec:82:79:c0:22:11:11:8b:c3:2a:a4:08:a0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:29 2024 GMT
            Not After : Mar  4 17:47:29 2025 GMT
        Subject: CN=5E99070343D836B4B6E336BF59D73FA3F5BF2054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:aa:fc:d7:f0:ff:b1:f5:58:4a:ab:99:ba:
                    5f:3f:4e:a3:88:a5:19:27:5b:42:65:78:1c:d1:b2:
                    19:19:3f:44:b5:f0:a4:dd:3c:c8:43:bf:4a:97:52:
                    b9:37:40:30:a4:53:0e:63:50:0e:12:dc:4e:d0:51:
                    b5:fe:54:fd:0e:0e:9e:14:2d:32:b2:95:05:d8:5e:
                    3c:1f:4e:8a:50:13:b2:71:93:83:f7:a2:92:f3:0e:
                    1a:3b:b9:64:4f:87:cc:45:7b:0b:cb:b0:15:ae:77:
                    b6:0b:a5:0d:93:a9:ec:d7:75:54:76:c0:ac:da:aa:
                    5a:e0:2e:3f:ce:f6:be:dc:17:eb:e5:1c:dd:38:50:
                    23:4d:c9:86:ea:00:d8:f5:6d:f6:ed:cc:3a:5f:c6:
                    89:09:3a:b7:78:74:6f:c2:a6:48:2d:4f:18:a3:60:
                    23:1f:58:98:08:ad:47:fa:09:bc:b8:8d:a0:cb:78:
                    bc:54:b5:2e:9f:b9:a7:85:0d:0e:07:cb:ca:cd:ad:
                    5f:3c:71:c1:70:37:13:c3:53:3e:af:a6:40:8c:4c:
                    2a:b4:a2:21:54:72:fa:c7:09:78:3f:95:76:ca:a6:
                    fc:b2:3a:e9:da:f8:12:50:33:6a:9c:08:5a:d4:62:
                    0a:90:ea:a4:1f:2e:3f:e9:f9:ce:41:ba:33:3b:73:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:99:07:03:43:D8:36:B4:B6:E3:36:BF:59:D7:3F:A3:F5:BF:20:54
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a373030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:f6:3b:3a:f4:0d:5d:de:31:65:a4:06:4e:f4:84:03:1b:
         36:7d:aa:9b:37:32:fc:d7:54:40:e7:64:69:50:ec:35:28:32:
         2d:f6:d1:5c:db:6d:05:74:43:ff:87:c5:29:b0:dd:27:b1:f4:
         e8:cc:16:b6:4b:67:1c:03:45:c0:c5:4a:88:dd:62:4f:74:fa:
         e5:a8:4d:f3:24:bb:b0:e4:25:79:f7:cc:11:cc:4d:70:0c:dc:
         4a:63:76:f2:5b:6d:56:09:e8:c7:fb:71:ad:03:35:fc:7c:45:
         69:39:ea:f2:34:ae:49:f2:c5:cb:dc:ee:7c:39:ad:eb:be:0e:
         61:7c:e6:df:96:5a:17:78:93:67:1b:c2:7f:99:72:83:48:45:
         a8:5d:99:81:1d:db:d4:4c:60:16:32:56:d2:f7:6f:a7:04:0a:
         80:8f:6f:7c:3e:d0:a0:51:f8:10:84:92:61:55:69:69:0f:fd:
         58:6c:b2:98:b3:cc:eb:db:77:c4:0d:39:e8:db:16:49:ab:39:
         f0:f4:6e:ef:d6:c7:08:44:00:9f:87:f8:5c:d3:69:5a:20:95:
         59:ca:12:a5:54:b7:03:ba:5a:63:48:9b:51:d3:70:ec:dd:84:
         9d:2f:84:67:24:2b:b6:ba:cc:8e:04:da:6a:c1:08:55:f7:52:
         9b:42:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org