Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa
File:                     323830333a393439303a3a2f33322d3438203d3e20323732383233.roa (raw, json)
Hash identifier:          hoHYvPHlRNtud4QaRNz7crh2+s0WQyfgd/ufUgCL/Qk=
Subject key identifier:   2D:15:FC:65:98:8B:06:9C:BC:78:1E:DA:92:F0:75:8F:FB:BE:0A:4E
Certificate issuer:       /CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
Certificate serial:       5978246FC611A5F0C5CE8B93F887C70AF277142F
Authority key identifier: 2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa
Signing time:             Tue 05 Mar 2024 18:02:58 +0000
ROA not before:           Tue 05 Mar 2024 17:57:58 +0000
ROA not after:            Tue 04 Mar 2025 18:02:58 +0000
asID:                     272823
IP address blocks:        2803:9490::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:78:24:6f:c6:11:a5:f0:c5:ce:8b:93:f8:87:c7:0a:f2:77:14:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFF142AE78A7D965F8E227DFAA659E2FEBDE078
        Validity
            Not Before: Mar  5 17:57:58 2024 GMT
            Not After : Mar  4 18:02:58 2025 GMT
        Subject: CN=2D15FC65988B069CBC781EDA92F0758FFBBE0A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:09:6f:3a:88:d9:47:14:75:21:b0:bf:fe:
                    75:e0:62:64:18:0d:e9:45:8c:88:31:2c:a6:72:6c:
                    46:ef:b6:dd:6a:85:77:c2:d7:12:c1:68:f8:96:0a:
                    f0:cf:ef:91:d8:20:d9:de:bb:fb:80:90:5c:82:af:
                    33:9d:8d:6c:8c:cd:03:27:53:3f:02:c8:f1:5c:33:
                    48:78:e7:49:49:06:78:da:52:b5:4e:86:63:f5:17:
                    1d:96:97:32:53:d9:61:e6:6f:5e:5e:7d:cc:a1:10:
                    2f:8f:f5:ce:90:26:c0:d7:bc:d6:61:85:8c:48:84:
                    57:0e:c3:f2:e2:b8:86:5a:3a:6e:f6:32:3d:2f:d7:
                    77:c6:24:01:3b:6b:e9:96:d2:05:26:2e:3b:6b:64:
                    ef:7a:d9:46:29:d4:be:2d:3a:26:96:4e:23:25:73:
                    76:28:3c:b7:a4:ce:f9:a7:88:1b:54:57:dc:29:84:
                    47:9a:22:fd:97:53:d4:96:ae:ae:19:3e:b1:0a:c0:
                    a0:8f:47:b7:0f:ee:9c:ac:bc:3c:b5:f0:43:e0:ee:
                    6b:46:65:85:0f:12:cc:8f:ae:27:7a:85:0b:53:c0:
                    c3:a3:59:01:85:ca:83:93:fb:2b:61:6e:88:21:17:
                    cd:16:d7:43:99:41:5e:41:21:e1:c7:a4:8c:57:f9:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:15:FC:65:98:8B:06:9C:BC:78:1E:DA:92:F0:75:8F:FB:BE:0A:4E
            X509v3 Authority Key Identifier:
                keyid:2A:FF:14:2A:E7:8A:7D:96:5F:8E:22:7D:FA:A6:59:E2:FE:BD:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AFF142AE78A7D965F8E227DFAA659E2FEBDE078.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4244F6835E22BA2699928203BFB83ADB5D244A099F53528B5F78D228D6959373/0/323830333a393439303a3a2f33322d3438203d3e20323732383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9490::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:3f:54:ae:43:80:f3:55:21:5a:6f:3f:9d:75:d6:30:4b:
         8d:9b:74:b3:eb:45:9e:ed:fb:12:2c:61:3b:0d:e8:ce:f5:0a:
         f7:06:51:fa:d2:fd:fe:19:82:5e:f4:55:d5:70:25:9c:ef:f1:
         b5:d8:dd:87:7c:39:59:da:f6:55:5e:08:55:b1:ea:91:4f:4e:
         76:51:2b:7b:18:10:54:1e:45:41:2a:f8:47:12:b7:25:97:bd:
         77:1c:0a:d0:cb:e4:c8:2d:e5:40:03:ac:9d:53:67:11:0a:ab:
         a7:b3:c8:07:52:62:2e:ce:a7:3e:e9:ff:c0:a9:4f:db:24:47:
         5b:61:32:a9:bc:1d:86:ee:98:ea:76:e4:59:b5:34:25:f2:10:
         41:d1:77:8e:a9:69:30:b5:98:6e:70:65:a9:a9:59:9e:a8:18:
         4f:9a:aa:2c:34:55:03:a1:e1:e7:3d:c1:e7:40:3d:f0:e7:63:
         5c:43:b3:42:7f:0f:18:03:88:89:f9:26:9e:8a:fb:f3:08:e8:
         8f:c4:52:88:cf:25:6e:1c:d1:a6:ce:94:92:0f:13:b5:11:ac:
         33:70:73:79:51:5e:a6:36:72:6a:7b:7e:51:1d:95:a1:3c:62:
         c4:39:8d:9a:29:a6:75:a6:2a:4a:ef:98:ca:32:20:96:80:4a:
         ba:d4:fd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:36:11 2024 by rpki-client on console-fra.rpki-client.org