Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/323830333a396139303a3a2f33322d3634203d3e20323732383832.roa
File:                     323830333a396139303a3a2f33322d3634203d3e20323732383832.roa (raw, json)
Hash identifier:          +5DNuAPFSH4mJtEh1s5yokFO2BfHPsbFEEbGP3y7EpA=
Subject key identifier:   CD:48:A3:8C:AC:F9:2F:06:18:B0:D4:CE:2C:57:3F:82:8B:21:8F:B2
Certificate issuer:       /CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
Certificate serial:       7B4A884733AEB27985614EB00EC3C6A6AE1DD22B
Authority key identifier: E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/323830333a396139303a3a2f33322d3634203d3e20323732383832.roa
Signing time:             Tue 05 Mar 2024 18:09:55 +0000
ROA not before:           Tue 05 Mar 2024 18:04:55 +0000
ROA not after:            Tue 04 Mar 2025 18:09:55 +0000
asID:                     272882
IP address blocks:        2803:9a90::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:88:47:33:ae:b2:79:85:61:4e:b0:0e:c3:c6:a6:ae:1d:d2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
        Validity
            Not Before: Mar  5 18:04:55 2024 GMT
            Not After : Mar  4 18:09:55 2025 GMT
        Subject: CN=CD48A38CACF92F0618B0D4CE2C573F828B218FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:18:db:8e:37:5f:65:7a:47:77:75:d0:01:
                    b1:30:15:a4:3f:9f:06:37:95:c0:07:8c:4a:04:b1:
                    b8:08:ef:38:29:c7:78:8b:ca:56:95:3b:46:08:47:
                    73:4d:99:76:19:f5:d1:81:ff:01:8e:1e:51:32:21:
                    f2:06:8e:cf:54:27:2b:74:85:76:11:58:e4:02:4e:
                    58:6b:41:2d:6e:69:88:0e:4c:a9:97:4b:8c:8b:5a:
                    6f:00:99:56:44:43:9f:60:00:95:8f:79:4c:c9:b0:
                    bd:d5:1f:f2:3f:75:fc:cd:7a:7f:39:b3:75:b2:d7:
                    8e:67:b1:b2:74:c5:ac:6c:96:b3:a5:de:1d:3a:16:
                    78:13:4e:ca:33:ca:fe:18:bb:65:7f:aa:40:75:ed:
                    c8:d9:1e:36:49:96:43:31:ce:2f:5b:b8:a4:ec:40:
                    37:42:8e:70:ff:e7:3e:46:1e:07:e0:38:50:94:8f:
                    8b:35:c2:3b:63:da:a5:2f:3e:07:e2:0e:74:50:b1:
                    e5:cf:3f:25:92:ba:6d:f0:e8:6f:65:4d:6d:1e:64:
                    3f:e0:8c:59:d9:95:04:a8:59:a1:fc:8b:d8:9a:04:
                    31:2c:bc:5a:ab:80:0b:e2:44:20:3f:38:30:ba:f1:
                    0d:42:94:a4:5d:a1:51:fe:47:2f:07:40:6c:9d:7a:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:48:A3:8C:AC:F9:2F:06:18:B0:D4:CE:2C:57:3F:82:8B:21:8F:B2
            X509v3 Authority Key Identifier:
                keyid:E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/323830333a396139303a3a2f33322d3634203d3e20323732383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:95:e7:3a:ab:b2:02:e9:c2:92:dd:72:1b:53:5c:5c:de:43:
         d0:d5:12:29:21:90:0b:f4:24:94:bd:d4:98:ae:07:7f:4e:e1:
         30:00:62:a2:e4:76:97:51:26:77:78:d9:eb:d1:b7:1d:57:0d:
         e0:d4:33:23:4e:2f:88:36:b3:8e:6f:92:12:2d:ce:c9:4a:a6:
         29:d1:ef:f0:a3:3b:68:0c:01:a0:ec:c8:d8:9c:5e:15:95:e0:
         29:f3:a6:31:24:f7:96:44:c7:d4:5e:a8:f9:eb:af:99:26:2d:
         44:4d:13:ae:44:e7:d3:64:ec:7f:9d:4b:99:c4:30:5a:be:88:
         49:4b:90:9a:17:b3:9e:18:50:66:9d:b9:df:5c:7c:df:0e:fd:
         be:4a:29:b9:39:7c:fc:a6:c5:b9:9f:00:6e:0c:a0:ce:98:40:
         36:cd:2f:59:4f:9d:8c:59:d5:4e:ee:37:01:a5:7a:3b:9e:7c:
         2b:e5:7d:db:6b:81:a6:33:5d:5e:a7:99:e0:0e:a6:84:d0:02:
         7d:c8:c5:ba:69:b6:2a:6a:a5:e8:65:d5:65:aa:0d:a9:2b:e5:
         57:a9:7e:b4:d4:33:b4:eb:63:c3:ac:d3:6d:0b:02:96:74:bc:
         52:3a:7c:4a:36:ee:44:2d:64:f6:07:eb:d9:eb:be:9c:ac:1b:
         db:9c:3f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org