Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/323830333a346465303a3a2f33322d3438203d3e20323730303531.roa
File:                     323830333a346465303a3a2f33322d3438203d3e20323730303531.roa (raw, json)
Hash identifier:          Qg5igGrcytoVv6dz1EonpKNOejZHfsSY2RpFcraBL0o=
Subject key identifier:   5B:05:D5:83:5F:88:A3:E2:63:48:6A:16:CE:2B:94:87:37:9B:60:15
Certificate issuer:       /CN=B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224
Certificate serial:       611C95E3BBA07211B4987455A62BBD6C9A5F67F4
Authority key identifier: B5:7E:BC:F7:8B:C5:0E:7A:1C:13:B5:A6:A2:0C:0A:47:DB:F4:B2:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/323830333a346465303a3a2f33322d3438203d3e20323730303531.roa
Signing time:             Tue 05 Mar 2024 17:48:16 +0000
ROA not before:           Tue 05 Mar 2024 17:43:16 +0000
ROA not after:            Tue 04 Mar 2025 17:48:16 +0000
asID:                     270051
IP address blocks:        2803:4de0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1c:95:e3:bb:a0:72:11:b4:98:74:55:a6:2b:bd:6c:9a:5f:67:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224
        Validity
            Not Before: Mar  5 17:43:16 2024 GMT
            Not After : Mar  4 17:48:16 2025 GMT
        Subject: CN=5B05D5835F88A3E263486A16CE2B9487379B6015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:df:2c:00:5e:21:fd:62:20:f0:8b:af:e8:ea:
                    95:b3:b5:65:a2:ca:fa:b6:84:9c:03:db:75:3f:c6:
                    31:d5:93:57:ec:4d:ba:27:ca:3d:c4:9a:ac:45:0c:
                    10:3c:a7:b0:37:a3:63:82:7f:fd:db:9a:32:6b:87:
                    a7:65:d2:12:fe:1a:4f:cc:e4:83:eb:7e:3f:3e:62:
                    4f:e2:e9:08:01:11:09:d1:85:66:54:a5:66:f7:e7:
                    bd:34:a2:59:60:f3:cd:3e:da:25:cc:95:63:35:f5:
                    e5:d7:a2:8b:3e:87:cf:9c:bf:91:a7:33:7d:87:aa:
                    47:ba:19:ec:7e:10:cd:42:d8:99:4a:7a:81:7e:e7:
                    9f:bd:a8:82:d2:01:3e:01:c6:ea:24:d2:36:7e:e8:
                    3f:53:3b:94:89:e2:2b:2a:e4:a6:61:3c:bb:97:ad:
                    06:11:c4:ba:77:2a:ee:3e:42:80:7a:49:d3:e2:e1:
                    c6:87:0a:d0:66:40:75:93:90:0f:54:af:ee:4d:f5:
                    ad:26:10:fa:7b:2c:4d:aa:de:c3:d2:77:78:35:71:
                    ba:d2:84:c2:df:15:0b:83:1e:83:57:02:00:59:d9:
                    3c:20:10:36:6a:05:e0:92:45:ef:a3:6c:53:40:67:
                    af:c8:44:00:f5:8c:89:4f:5e:f3:e4:a0:4f:5e:4f:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:D5:83:5F:88:A3:E2:63:48:6A:16:CE:2B:94:87:37:9B:60:15
            X509v3 Authority Key Identifier:
                keyid:B5:7E:BC:F7:8B:C5:0E:7A:1C:13:B5:A6:A2:0C:0A:47:DB:F4:B2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/323830333a346465303a3a2f33322d3438203d3e20323730303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:74:71:a3:75:2e:89:46:89:44:f9:9c:bc:ec:7e:40:66:60:
         e0:5a:21:74:41:f1:8d:bf:b7:a0:3e:8b:72:6c:49:0b:18:28:
         c4:24:50:a5:c1:b3:42:19:72:d4:b8:c6:8e:72:eb:7a:44:c6:
         e2:25:fa:ec:54:63:de:a7:b8:da:5f:f1:d5:80:87:64:6c:c9:
         4b:30:f1:ab:10:ba:b1:ec:6a:0b:0e:2c:bd:4c:3c:60:0d:90:
         96:01:d9:cc:4f:1b:87:b6:4b:66:ff:68:08:4b:70:38:cf:b3:
         76:72:f1:c2:5b:66:df:3d:70:47:c6:cb:bc:07:aa:74:52:b8:
         fa:6a:65:a6:38:f3:a7:0b:ea:92:c1:b1:92:c4:4f:6d:de:02:
         e7:2b:37:16:3a:a3:8c:01:f7:dd:ea:65:af:07:21:79:8e:1d:
         28:a9:3d:db:35:3d:3d:0d:48:94:12:65:0c:b7:63:f4:b0:dc:
         72:77:e0:a9:39:4d:58:47:62:3f:b8:e1:14:4c:9a:cf:bf:f8:
         8b:5a:06:2a:09:f9:0b:2a:02:1e:32:7c:5d:55:72:3a:64:00:
         27:06:a9:8e:48:39:a7:3f:30:aa:88:ed:51:b4:8c:bc:69:a1:
         d2:00:71:0d:49:ac:b3:13:07:a9:12:10:18:c8:d4:11:87:fc:
         b7:a9:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org