Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33322d3334203d3e203631353038.roa
File:                     323830333a663234303a3a2f33322d3334203d3e203631353038.roa (raw, json)
Hash identifier:          BpXPKkPp9P8+ejounXQbRAEXJoB6jHeq5/XsYHFwm3c=
Subject key identifier:   45:4C:5C:76:15:0E:9C:69:10:89:7C:75:B9:25:73:1A:71:D8:8F:97
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       487B9679F21FDB8B7756AA9FCA0965A2AE674F96
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33322d3334203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:28 +0000
ROA not before:           Tue 05 Mar 2024 17:42:28 +0000
ROA not after:            Tue 04 Mar 2025 17:47:28 +0000
asID:                     61508
IP address blocks:        2803:f240::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7b:96:79:f2:1f:db:8b:77:56:aa:9f:ca:09:65:a2:ae:67:4f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:28 2024 GMT
            Not After : Mar  4 17:47:28 2025 GMT
        Subject: CN=454C5C76150E9C6910897C75B925731A71D88F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:c4:ee:92:9e:cd:50:0e:bc:01:b0:57:30:
                    54:b0:06:92:12:06:3d:5c:cc:d5:29:6b:ed:c4:99:
                    4d:9a:e8:6d:66:8d:33:a9:41:21:8c:2d:5b:e5:91:
                    de:8a:89:b5:ad:6e:ab:42:1e:f5:5d:17:65:d7:87:
                    df:f3:0f:db:e9:5c:d0:14:cd:a5:da:ba:53:62:93:
                    04:78:d2:c5:0a:7e:30:3f:84:ad:3b:ca:f9:39:48:
                    23:ad:16:b6:0e:76:df:de:ed:8a:26:f0:b1:f5:55:
                    fb:dd:35:a3:53:8d:46:ec:c1:dc:77:94:f7:5e:6f:
                    57:2f:ed:b1:36:71:2b:b8:94:e1:a1:fc:58:a4:2d:
                    b3:bc:06:a5:82:1b:81:e8:b4:e2:94:3e:e3:ee:f5:
                    6c:94:10:69:73:f1:e2:13:42:ff:de:0f:4a:ab:56:
                    53:35:00:1a:2c:72:d4:ed:0c:13:1f:c5:c0:4d:2a:
                    57:ef:65:28:8c:c1:b9:71:c8:b7:53:65:bf:c2:68:
                    c9:5a:1b:87:e4:82:ce:c3:8c:aa:72:68:57:82:89:
                    22:46:19:56:f8:9c:47:ef:80:f0:de:d0:77:82:59:
                    88:6e:ba:f1:ee:ce:60:1a:4c:77:c5:93:43:7c:4d:
                    74:ad:fb:cc:88:98:1b:39:d8:e9:99:07:a5:25:0f:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4C:5C:76:15:0E:9C:69:10:89:7C:75:B9:25:73:1A:71:D8:8F:97
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33322d3334203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:15:92:99:60:4b:a3:d3:bd:f4:ef:77:28:c2:dd:8f:fc:f2:
         a0:0c:d2:10:30:a5:76:7f:b8:97:09:2c:20:ec:2d:05:66:6f:
         5d:a3:34:79:c5:48:62:bd:d3:df:ba:a9:21:03:e4:8d:79:61:
         8f:57:ec:a1:a7:5e:cb:fc:a5:bb:dd:6d:01:c9:cb:2f:40:0c:
         8d:2c:5a:0f:15:c6:35:1f:b5:6c:9d:02:13:e4:af:2d:a6:78:
         43:3f:d7:3c:88:fd:ca:4f:6b:f2:a8:ad:76:5d:27:06:9a:5b:
         bf:04:47:bd:83:e7:4b:6d:5d:65:28:77:88:59:2b:de:e3:ab:
         31:32:3f:40:bd:99:63:b9:38:71:b8:da:86:0b:74:03:3c:54:
         f2:bb:8e:01:0c:b6:c7:51:fe:50:f1:f0:b4:70:47:bd:b4:9b:
         75:1e:5c:ab:6f:10:ae:11:e2:de:82:7e:1c:e4:da:4b:6b:0d:
         24:51:ce:45:67:57:e5:25:59:24:fa:d3:d6:56:36:16:ef:bc:
         4a:36:39:8d:99:b1:f6:e1:26:01:09:7e:ce:02:ff:82:8f:75:
         83:a9:e2:ba:d9:c5:a2:cb:7d:10:dc:64:d8:bc:83:0e:db:18:
         c1:37:3f:d5:ee:9f:a8:f3:f9:d4:a0:2e:b3:30:2d:31:7f:11:
         84:61:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 00:23:00 2024 by rpki-client on console-fra.rpki-client.org