Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383130303a3a2f34302d3430203d3e203631353038.roa
File:                     323830333a663234303a383130303a3a2f34302d3430203d3e203631353038.roa (raw, json)
Hash identifier:          bYrSQyH2utyp3XfnBK/doi1FfMDcrK8n3NCskwk+54k=
Subject key identifier:   97:CB:C4:47:2C:75:D7:4A:FB:2B:50:1F:07:74:69:C9:55:0B:CA:E2
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       5FA99565FCA43BCE45EC36C1B2A1FE8948E03846
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383130303a3a2f34302d3430203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:29 +0000
ROA not before:           Tue 05 Mar 2024 17:42:29 +0000
ROA not after:            Tue 04 Mar 2025 17:47:29 +0000
asID:                     61508
IP address blocks:        2803:f240:8100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a9:95:65:fc:a4:3b:ce:45:ec:36:c1:b2:a1:fe:89:48:e0:38:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:29 2024 GMT
            Not After : Mar  4 17:47:29 2025 GMT
        Subject: CN=97CBC4472C75D74AFB2B501F077469C9550BCAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:d5:a3:8f:22:31:39:e9:1c:3f:e6:04:f5:
                    9e:6c:8a:23:27:6e:bf:41:4b:bd:9b:ba:d7:d7:48:
                    e0:2b:c6:76:59:60:6b:90:72:0b:3b:b0:ad:a4:e1:
                    0b:47:b2:9f:20:51:e6:64:07:fe:72:14:3f:5d:d0:
                    00:b8:4f:14:39:16:07:0f:e3:48:e2:bc:cd:90:77:
                    a8:c1:ab:17:4f:26:4a:3d:1a:cc:6e:10:b6:ef:37:
                    29:21:c8:f1:03:a0:2f:5a:31:e8:41:b8:10:be:ab:
                    f8:e7:78:d2:47:60:46:f8:81:b3:40:54:e1:7f:b7:
                    0b:43:c0:6a:91:09:95:de:72:53:d5:d7:70:81:3c:
                    6d:91:c0:64:cc:38:6f:81:f7:99:79:66:a1:29:36:
                    d2:b8:da:13:b6:f3:d2:a6:e7:88:5c:d0:31:18:e3:
                    76:da:d4:f7:68:be:0b:47:4a:78:49:f1:fe:0e:eb:
                    9b:02:b0:6b:cb:83:51:d8:c0:ee:11:ee:15:ea:b3:
                    b6:e3:4e:3f:41:27:36:74:15:2e:af:84:64:de:ab:
                    bb:71:e2:9b:b2:58:1b:3f:f6:a4:15:e5:14:fe:0d:
                    82:35:76:ff:9f:42:01:2d:6d:bb:82:70:75:50:41:
                    47:10:c8:08:ae:2f:66:dd:fd:c9:4a:12:aa:31:86:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CB:C4:47:2C:75:D7:4A:FB:2B:50:1F:07:74:69:C9:55:0B:CA:E2
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383130303a3a2f34302d3430203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:ff:41:17:95:e6:e0:f3:fc:39:be:e6:67:d5:92:40:13:83:
         11:41:32:70:c8:db:9d:73:c8:1e:e3:21:71:68:ed:ba:b9:24:
         36:46:60:27:ef:44:a2:11:19:cb:99:77:ee:b0:92:99:34:75:
         a7:e7:75:f6:97:4d:12:ef:68:80:15:4d:cf:3a:f1:a7:da:02:
         9e:7c:4d:3a:b6:ae:07:fa:09:d4:d6:af:52:c3:f9:aa:f1:4a:
         71:42:a7:5a:6f:b6:25:2b:7e:a7:91:43:1d:28:0a:bf:6b:82:
         46:7f:a6:e8:a8:2c:99:4a:cc:c3:0e:3f:d5:86:e7:11:8a:22:
         c9:f8:fe:45:54:82:bb:28:1b:ca:29:f0:5c:13:79:33:da:90:
         84:f4:a4:87:c3:19:7e:19:a2:73:6c:53:1e:a8:33:9a:69:8b:
         10:a1:2b:4f:90:52:c7:29:b3:32:54:be:ed:7b:ef:57:17:d4:
         12:1c:e7:59:ef:8e:75:29:00:21:5b:e5:d9:d0:77:20:27:65:
         23:87:82:22:fe:b8:b3:31:e4:17:8d:e3:a4:1b:e8:b6:29:31:
         aa:18:04:9d:e3:41:9d:7d:1c:3b:48:28:e4:2f:27:b4:5f:b2:
         e3:b3:01:b3:0f:83:f3:62:e1:58:59:5e:f7:39:fb:02:b0:a1:
         e4:d5:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org