Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a393030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a393030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          zW4rfSrB0K6V782veROVd5Y+AMvPsuOgAqfpYNd0pQs=
Subject key identifier:   27:2C:2B:54:0E:8B:82:62:D9:94:58:54:6F:DA:32:65:2C:23:27:F6
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       641E41B3145CB6D16341AABF89F266B420B6DA0A
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a393030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:29 +0000
ROA not before:           Tue 05 Mar 2024 17:42:29 +0000
ROA not after:            Tue 04 Mar 2025 17:47:29 +0000
asID:                     61508
IP address blocks:        2803:f240:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1e:41:b3:14:5c:b6:d1:63:41:aa:bf:89:f2:66:b4:20:b6:da:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:29 2024 GMT
            Not After : Mar  4 17:47:29 2025 GMT
        Subject: CN=272C2B540E8B8262D99458546FDA32652C2327F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:27:84:fa:c5:be:f4:8b:8d:56:65:7c:be:
                    a0:49:af:5d:dc:0d:86:6e:fd:cf:1b:35:e0:c5:f2:
                    74:d2:f3:98:88:70:1a:b4:4c:14:75:66:c2:9d:58:
                    c7:6c:19:c0:cf:f3:01:3a:9f:a5:4f:e5:af:1b:96:
                    fe:d3:4e:c6:5e:39:6d:c4:f3:84:2d:5c:73:3c:1a:
                    5e:60:e3:24:e0:aa:fb:ac:05:dc:cb:6a:ce:1b:9d:
                    67:65:0d:84:e2:ff:14:96:47:dc:8f:8b:65:45:c1:
                    e4:ff:94:ac:bb:18:6e:84:f0:ca:d2:a7:f8:06:e6:
                    1c:af:54:10:4b:36:7b:53:13:42:0a:a0:71:5c:33:
                    b1:be:94:75:b5:6e:e5:93:52:12:e8:19:a6:d9:9b:
                    9f:48:69:0f:1e:df:fc:84:3f:9c:de:b7:c4:9e:9c:
                    58:1a:52:87:23:5d:ea:2e:7b:50:5a:af:ce:a7:e1:
                    e8:d8:25:de:27:ff:3b:ce:68:94:54:c3:bc:45:bf:
                    42:1e:d5:d1:e8:f9:47:d8:ed:9b:8e:be:bb:a4:9a:
                    b9:57:9f:22:86:0f:3f:b5:a8:5d:26:c0:18:41:de:
                    df:4c:ac:f7:7c:c9:60:cb:d4:18:05:26:bf:f4:4b:
                    7c:23:bb:a9:6c:11:76:e4:47:cb:b2:3d:23:79:96:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:2B:54:0E:8B:82:62:D9:94:58:54:6F:DA:32:65:2C:23:27:F6
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a393030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:0f:c1:03:2d:4f:db:ed:a1:75:57:ed:2f:d6:3a:9c:d9:
         c2:8d:b2:46:59:87:53:c4:7f:60:76:6a:6e:a4:de:be:55:2d:
         c5:d6:b7:ca:fd:66:17:fe:9b:50:3d:0e:82:a3:50:d6:5a:ca:
         e1:4a:cf:fa:b3:00:35:b1:59:91:6f:0e:13:39:70:e5:91:df:
         86:68:a4:83:f6:16:5b:d6:84:c5:c6:69:8a:97:a7:1e:91:c7:
         c0:ac:12:34:89:ba:f2:cc:6f:6f:d0:22:a9:09:6a:1e:15:93:
         63:ce:a2:f1:ef:61:37:17:fd:64:8c:14:2e:1c:c0:2c:f0:6c:
         c7:37:9b:d9:a7:cd:91:09:8f:b0:70:9a:f3:09:41:9d:5d:3a:
         22:7a:17:7f:db:c6:ad:71:0e:5c:67:ad:55:a4:2a:49:8d:b6:
         08:d1:fb:fa:b4:af:a3:e4:4b:96:cf:ff:64:9c:45:f7:2a:e0:
         b0:22:f9:de:8d:7d:d2:8d:57:d2:79:e4:93:30:6b:22:56:c1:
         0b:bf:8f:38:89:37:46:c9:38:55:3e:ea:b9:68:d7:65:b4:7d:
         eb:09:a3:64:a8:02:1d:1f:0a:6a:63:16:64:37:87:80:4d:1d:
         a4:4b:04:6b:06:29:72:60:75:9f:e0:43:dd:7d:95:64:4e:7a:
         a5:f8:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org