Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          sPp7JfwRiec8m6zvb8nktJBDplDdAS0zkuqVJIoaCQI=
Subject key identifier:   56:7F:F2:62:5F:86:0A:22:1E:40:99:26:82:D2:DF:19:98:E6:22:6B
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       37AF820420C8DD9FD85ED2AB173C7929C397222B
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:27 +0000
ROA not before:           Tue 05 Mar 2024 17:42:27 +0000
ROA not after:            Tue 04 Mar 2025 17:47:27 +0000
asID:                     61508
IP address blocks:        2803:f240::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:af:82:04:20:c8:dd:9f:d8:5e:d2:ab:17:3c:79:29:c3:97:22:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:27 2024 GMT
            Not After : Mar  4 17:47:27 2025 GMT
        Subject: CN=567FF2625F860A221E40992682D2DF1998E6226B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:fe:76:50:1c:52:81:08:78:dc:b5:7c:cf:
                    43:b5:18:49:8c:1e:88:0f:53:1e:8a:ef:cb:f9:5b:
                    42:75:c2:64:9f:f1:14:50:61:c5:d6:55:2c:11:4f:
                    38:be:a7:e0:1b:2b:50:54:fb:83:39:8e:c8:36:73:
                    a0:33:a4:2d:a5:d0:c4:e0:a4:a6:7c:f6:12:ea:ad:
                    2d:21:e5:94:f5:63:79:69:c1:8e:e8:4c:a6:8d:f9:
                    71:e5:82:43:e4:fd:15:fc:cb:38:2a:d1:ab:f2:96:
                    0f:30:40:60:40:40:1a:8a:ce:43:c0:88:64:b5:3c:
                    59:fc:65:d3:5a:40:29:3b:36:8a:e7:d4:f9:dc:15:
                    85:51:5d:25:00:b8:df:d9:dc:f5:8b:12:9d:fb:c1:
                    15:bf:2b:d2:a6:07:b2:d4:f6:6b:9e:fc:a9:ab:b9:
                    31:1b:a2:e1:a8:26:d1:c0:f4:11:88:e3:31:ab:55:
                    c1:45:7c:70:81:2b:fd:36:46:4f:53:8b:5b:98:99:
                    d2:c0:31:b8:ce:ea:74:59:ff:48:52:61:07:ad:d9:
                    5b:37:69:03:e4:6e:73:f1:1c:d6:32:c5:8f:90:27:
                    96:5c:58:d4:3c:48:43:21:3b:c5:0c:b2:27:6f:53:
                    d4:c4:8d:4d:b9:0a:95:75:d1:4e:af:cd:bf:49:b0:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7F:F2:62:5F:86:0A:22:1E:40:99:26:82:D2:DF:19:98:E6:22:6B
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:ef:80:19:ac:b2:7e:45:58:11:e1:d9:42:ad:06:a1:da:7d:
         95:44:6d:75:b8:08:07:86:ee:4f:b3:31:53:73:94:f5:51:21:
         f2:58:64:10:c8:28:25:7a:02:26:74:bb:2d:ff:8a:34:0e:bd:
         1b:f6:dd:b8:3c:14:0f:49:1b:78:98:68:87:75:fa:d5:04:2b:
         f0:6a:4a:0d:c3:b8:6f:22:74:1f:43:ea:b7:55:3d:4c:3d:5b:
         2f:a2:0d:d3:90:b6:36:d0:7f:97:27:68:15:08:23:d7:8a:96:
         0a:5d:5e:50:c4:40:e4:18:cd:eb:8f:a3:2f:80:06:84:5e:bc:
         20:17:ed:b5:c2:43:7d:13:80:e3:8c:3a:ab:5c:7e:81:bb:ee:
         8b:b4:d7:35:ce:b3:17:d0:22:9d:0f:c3:62:d6:9a:83:9c:46:
         e8:33:a7:32:01:9a:89:75:30:9c:d7:b0:88:6b:8b:ef:cc:11:
         30:44:39:2e:17:68:84:cf:ce:5c:2a:00:31:34:ac:ce:f3:d5:
         c0:06:96:ff:0a:7b:ae:3d:46:d1:cd:b0:29:5d:6b:3e:72:77:
         25:d3:7e:fd:b0:a3:d1:9e:fd:7f:48:b2:81:e1:e6:f2:f8:75:
         a3:9a:a9:5d:0b:ff:0d:4b:21:38:8f:41:80:2c:2e:d7:b9:0e:
         b7:cb:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:04:43 2024 by rpki-client on console-ams.rpki-client.org