Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a613030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a613030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          uLRhW1rzeFcJOsbnWLKRIiV6GjnCRLdjBS1vvMeMsRc=
Subject key identifier:   71:7A:BD:5F:0B:EA:63:BF:33:B4:0C:19:78:A5:C9:1B:FA:09:07:2A
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       2D180A4F0A8175A73E5E22F9FC658401838DECB2
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a613030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:30 +0000
ROA not before:           Tue 05 Mar 2024 17:42:30 +0000
ROA not after:            Tue 04 Mar 2025 17:47:30 +0000
asID:                     61508
IP address blocks:        2803:f240:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:18:0a:4f:0a:81:75:a7:3e:5e:22:f9:fc:65:84:01:83:8d:ec:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:30 2024 GMT
            Not After : Mar  4 17:47:30 2025 GMT
        Subject: CN=717ABD5F0BEA63BF33B40C1978A5C91BFA09072A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:5c:8b:c4:76:e3:c7:f2:8a:55:e1:8f:83:
                    b9:97:71:d1:9a:d6:ea:3d:60:92:b6:5d:81:bc:01:
                    03:c7:8c:48:3f:29:fb:c8:8a:63:0d:a3:27:0f:c5:
                    82:2a:08:7f:df:8c:99:79:38:f3:e2:24:21:a9:03:
                    7b:0b:bc:64:09:80:9c:05:70:4e:47:6e:a4:8f:83:
                    fa:d8:5e:72:8d:7b:c8:b0:4f:df:9e:b5:f8:24:e4:
                    c0:62:b0:ec:36:f5:ae:e4:00:3b:b5:5c:7b:23:a1:
                    00:68:62:43:b3:f0:24:e5:b9:8e:a8:41:e1:47:0b:
                    7b:a6:8c:05:91:8c:68:b2:33:36:90:7e:a9:d4:d8:
                    eb:ca:45:49:07:bb:47:52:13:46:0f:03:23:9e:8f:
                    72:7d:f4:64:44:62:8e:d9:41:51:93:b1:5e:18:d7:
                    db:12:96:70:5d:04:4b:83:f4:f2:86:ee:3e:95:66:
                    02:34:1d:8b:6e:26:27:be:eb:56:b6:79:37:9d:88:
                    4e:f5:61:e2:a4:ae:70:e0:e7:0c:c0:a7:f8:c5:b3:
                    fd:61:50:be:37:af:9d:da:28:c3:71:e0:6c:3b:ac:
                    4c:3d:7e:42:8c:49:2c:cb:ac:41:0b:65:6d:80:46:
                    dd:fa:57:56:1c:12:76:a2:f8:28:e5:74:86:41:44:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7A:BD:5F:0B:EA:63:BF:33:B4:0C:19:78:A5:C9:1B:FA:09:07:2A
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a613030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:74:32:75:cc:b8:b3:72:bd:77:75:f8:65:51:8e:28:2e:fa:
         6f:f4:72:30:a7:01:ef:b3:f2:5f:75:d7:2d:68:27:0b:89:a7:
         1f:98:11:9a:9f:38:0c:66:df:72:e0:f3:3d:d8:ae:e9:df:89:
         5a:9b:b5:d0:51:8d:22:47:3c:00:a0:33:66:f0:aa:25:0d:5b:
         e0:72:1f:00:e1:61:03:d7:cb:6a:39:5b:64:3c:92:30:9c:bc:
         f8:d5:a4:d1:64:67:ee:62:ed:31:e0:a9:b3:08:48:3a:1d:97:
         cf:02:bc:7c:58:a4:08:5b:dd:30:6c:51:ff:5b:ee:a2:8a:81:
         e2:02:03:83:bb:a8:5a:15:ef:91:a0:8e:3f:ae:1d:47:dc:c7:
         6f:14:fa:ef:ee:02:2d:5d:6e:7c:49:cc:d0:ab:31:fa:7a:4b:
         9a:3b:96:f7:b8:c6:71:73:30:38:7c:a8:c2:ca:b7:0f:ab:f0:
         55:29:a3:e9:5a:b9:aa:5a:4b:20:32:09:b9:5f:67:c6:f9:7e:
         34:9f:31:6c:50:c2:05:48:02:8e:a8:4c:60:5e:e0:df:ab:8a:
         0d:5e:0c:8e:b7:57:02:b9:18:02:65:66:75:6c:d7:e1:bb:9f:
         c1:c9:01:2e:9d:1d:1c:c3:50:52:c7:39:75:87:18:c0:1a:2f:
         8e:1e:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org