Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272C1702EE191F4B4CB2BCA9C049F86AE871E9E3E473075F49404FB24D8F7B4E/0/323830313a303a3135303a3a2f34382d3438203d3e203237383937.roa
File:                     323830313a303a3135303a3a2f34382d3438203d3e203237383937.roa (raw, json)
Hash identifier:          wQ6fqoX7+ybeeUJG7ntiIG6fbJ/NS4qkwyMiRddYnUw=
Subject key identifier:   37:A8:FD:64:DA:9E:66:2A:62:94:E9:A1:D2:BF:6A:D9:03:4C:AC:BE
Certificate issuer:       /CN=A51CC7F03D5195F5ACE580797D8454B8AF89B02D
Certificate serial:       57566F5715700604B3EE6303891327A340EA806C
Authority key identifier: A5:1C:C7:F0:3D:51:95:F5:AC:E5:80:79:7D:84:54:B8:AF:89:B0:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A51CC7F03D5195F5ACE580797D8454B8AF89B02D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272C1702EE191F4B4CB2BCA9C049F86AE871E9E3E473075F49404FB24D8F7B4E/0/323830313a303a3135303a3a2f34382d3438203d3e203237383937.roa
Signing time:             Tue 05 Mar 2024 17:41:09 +0000
ROA not before:           Tue 05 Mar 2024 17:36:09 +0000
ROA not after:            Tue 04 Mar 2025 17:41:09 +0000
asID:                     27897
IP address blocks:        2801:0:150::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272C1702EE191F4B4CB2BCA9C049F86AE871E9E3E473075F49404FB24D8F7B4E/0/A51CC7F03D5195F5ACE580797D8454B8AF89B02D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272C1702EE191F4B4CB2BCA9C049F86AE871E9E3E473075F49404FB24D8F7B4E/0/A51CC7F03D5195F5ACE580797D8454B8AF89B02D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A51CC7F03D5195F5ACE580797D8454B8AF89B02D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:56:6f:57:15:70:06:04:b3:ee:63:03:89:13:27:a3:40:ea:80:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51CC7F03D5195F5ACE580797D8454B8AF89B02D
        Validity
            Not Before: Mar  5 17:36:09 2024 GMT
            Not After : Mar  4 17:41:09 2025 GMT
        Subject: CN=37A8FD64DA9E662A6294E9A1D2BF6AD9034CACBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:8e:d3:a5:2e:d2:f6:f0:84:55:65:c6:82:
                    ec:fc:34:d3:ab:e0:c3:90:f8:bf:39:7b:fc:1d:ae:
                    1e:06:c8:9b:65:f9:58:3a:78:62:be:31:55:02:2e:
                    30:ca:7e:7a:59:57:73:e5:13:83:6c:2e:71:33:c1:
                    ab:27:ba:b9:fd:4f:9c:5a:cb:08:89:af:89:c4:d9:
                    34:00:13:81:fe:32:68:74:63:87:33:f6:47:49:73:
                    b0:5e:a1:78:c5:46:d0:74:7a:c3:d6:47:10:99:a8:
                    8e:08:70:d7:77:d5:90:cb:fb:ac:8b:4b:ad:f3:96:
                    66:10:c3:f0:58:f3:7d:70:f2:33:57:fd:b1:39:06:
                    eb:45:8a:30:b4:2f:3f:99:ec:91:86:f2:aa:1b:5e:
                    e5:9a:2e:28:2f:94:b2:6a:c0:e4:70:77:2b:e8:f6:
                    e2:74:f2:a8:3d:8a:52:14:56:10:10:b5:62:cf:d9:
                    a0:3f:15:5a:5f:94:f7:d7:36:a1:ce:8c:82:a0:0e:
                    9e:f9:3c:f0:09:92:bf:93:c4:60:dc:1c:3c:68:8b:
                    d3:52:d3:33:92:b5:f6:42:14:a6:ec:dd:f3:cd:66:
                    c2:6b:e8:b7:94:2d:89:45:07:a6:f3:24:3e:ef:f2:
                    e3:3d:c8:93:7a:e6:29:4b:e5:9d:61:8e:4d:36:7f:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A8:FD:64:DA:9E:66:2A:62:94:E9:A1:D2:BF:6A:D9:03:4C:AC:BE
            X509v3 Authority Key Identifier:
                keyid:A5:1C:C7:F0:3D:51:95:F5:AC:E5:80:79:7D:84:54:B8:AF:89:B0:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272C1702EE191F4B4CB2BCA9C049F86AE871E9E3E473075F49404FB24D8F7B4E/0/A51CC7F03D5195F5ACE580797D8454B8AF89B02D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A51CC7F03D5195F5ACE580797D8454B8AF89B02D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272C1702EE191F4B4CB2BCA9C049F86AE871E9E3E473075F49404FB24D8F7B4E/0/323830313a303a3135303a3a2f34382d3438203d3e203237383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:150::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:5f:57:15:7c:43:78:9b:63:f4:33:16:e2:87:d6:21:5f:dc:
         fb:ff:65:a8:ac:16:cf:cc:71:33:11:41:f4:87:35:31:6c:92:
         fd:62:62:24:2b:d5:ac:65:51:3b:7e:11:27:1c:b1:40:7f:f3:
         11:2e:25:03:d5:f0:1a:2d:59:6d:25:44:de:d4:08:1c:11:4f:
         ea:3f:02:78:e6:31:39:10:f8:62:b3:f2:45:78:8a:00:3d:e3:
         c2:77:88:75:df:e9:c7:8e:36:db:ba:0d:af:96:83:01:ac:2b:
         7b:bb:ef:a0:b2:f4:9b:e9:df:19:4a:af:76:d4:32:52:6b:6d:
         84:03:96:1e:d6:5f:ba:39:16:e5:8b:64:de:4d:5f:23:a9:84:
         95:0d:27:cd:ca:d4:4a:d9:3f:a7:49:72:2f:a7:4c:1f:ba:33:
         eb:2e:70:1e:81:96:74:6e:68:37:9e:18:24:ad:cb:42:6c:41:
         c3:52:65:9f:4a:b1:21:af:48:6d:c3:4d:45:b8:ac:df:86:c4:
         d3:c8:ea:33:36:d6:a1:48:0a:d7:76:b1:5a:04:7a:c5:49:ad:
         63:03:3c:d8:86:34:fd:a1:a3:ff:c4:66:00:1c:59:35:f6:f5:
         e1:9e:dd:b3:8d:56:35:01:c2:5c:33:87:54:20:c1:02:ce:ee:
         5e:b6:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:39:59 2024 by rpki-client on console-ams.rpki-client.org