Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a3a2f33322d3336203d3e20323733313432.roa
File:                     323830333a326335303a3a2f33322d3336203d3e20323733313432.roa (raw, json)
Hash identifier:          EpeI8Kj6FgsUiV7aZOKKm7dGk9QVqOXaPrmmv59m+6g=
Subject key identifier:   CC:EA:C9:4B:08:BD:58:BF:8A:BD:66:0F:66:98:F0:77:DC:F3:08:83
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       4A9FFC0886C29E1DA7B5CF190447C3959C1DA85B
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a3a2f33322d3336203d3e20323733313432.roa
Signing time:             Tue 05 Mar 2024 18:14:08 +0000
ROA not before:           Tue 05 Mar 2024 18:09:08 +0000
ROA not after:            Tue 04 Mar 2025 18:14:08 +0000
asID:                     273142
IP address blocks:        2803:2c50::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9f:fc:08:86:c2:9e:1d:a7:b5:cf:19:04:47:c3:95:9c:1d:a8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Mar  5 18:09:08 2024 GMT
            Not After : Mar  4 18:14:08 2025 GMT
        Subject: CN=CCEAC94B08BD58BF8ABD660F6698F077DCF30883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:4a:4d:9e:0b:5d:e3:0b:a5:8c:99:a2:01:
                    cd:4f:d4:b0:69:3d:23:73:dc:b9:46:07:81:a9:dd:
                    a5:05:3b:28:59:7e:da:d9:ba:36:d3:32:2b:2d:55:
                    a4:d8:08:17:92:14:c1:48:f6:55:48:4a:a1:46:ba:
                    79:59:99:58:89:98:a5:69:d8:1a:dc:f3:7e:83:e6:
                    fa:d3:f0:41:14:8c:80:44:54:74:4a:6c:c2:53:61:
                    a2:c8:95:53:84:54:0c:9b:e3:ba:0c:ed:04:5d:76:
                    6f:30:7e:5f:fd:16:2e:1e:9f:da:a4:cf:1d:ba:75:
                    c9:c5:31:8f:47:1b:f8:f8:4b:c3:cd:3f:cb:95:d8:
                    31:b2:61:a3:6a:68:14:0a:31:b6:a3:06:38:ac:4f:
                    0f:45:b4:31:b5:96:13:c3:80:31:cb:dd:cf:78:2f:
                    c4:6f:a2:14:e1:4d:ac:2c:09:29:ee:b9:ad:5b:45:
                    1f:d8:d3:52:da:f6:6b:f4:5c:1e:15:e7:dc:12:75:
                    4e:93:46:4a:7f:9f:d4:b3:f3:89:ea:83:ef:2e:8f:
                    7b:30:a2:30:5e:50:76:c7:af:2d:3f:29:45:ad:ae:
                    49:de:f7:72:9b:a2:68:63:ea:5e:3b:a4:ac:56:1b:
                    35:c4:29:41:67:27:a1:81:b8:5a:8d:10:f0:45:d1:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:C9:4B:08:BD:58:BF:8A:BD:66:0F:66:98:F0:77:DC:F3:08:83
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a3a2f33322d3336203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:f6:96:d8:8d:3e:67:f5:58:37:d3:88:1a:05:c0:7c:ce:
         40:dd:77:31:f6:f7:bc:21:60:87:8b:fd:d9:b3:db:f8:f6:7f:
         c7:2d:8e:2f:7e:e7:ca:48:6f:4e:8d:dc:80:f8:dc:16:3e:1b:
         4d:d8:88:05:75:e5:f8:17:ea:b2:56:0b:9e:44:7f:11:7e:01:
         85:ce:64:dc:e6:cf:18:bd:e3:9d:8b:89:d5:17:bd:1d:06:be:
         1a:c5:b5:b7:50:80:ba:32:b0:cd:50:02:46:ad:0a:d6:32:12:
         a0:6d:88:33:23:c1:6a:8a:1d:a2:24:df:30:c7:df:3d:ed:78:
         fb:13:f9:0e:e0:1f:3b:6e:4a:4a:59:34:8a:f7:fa:b9:2b:c3:
         5c:d6:18:80:4b:43:d6:ad:00:83:ce:86:18:f1:6e:e4:be:dd:
         96:dd:b8:ca:42:06:5b:8f:89:66:56:3c:39:a0:6d:b1:d5:6b:
         06:f4:fb:5d:a3:37:ed:76:9a:ed:13:21:30:b8:84:29:86:b5:
         2e:13:e3:e4:0f:8d:d0:ef:67:c5:6a:15:da:ba:40:7c:b7:00:
         ec:57:26:4c:1e:e8:8b:35:0e:cc:e7:52:bb:24:9d:8c:98:3b:
         a8:da:ff:ab:a5:14:68:e9:15:4d:ce:a7:61:5d:da:75:0c:96:
         5e:59:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:33 2024 by rpki-client on console-fra.rpki-client.org