Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          Y+pM/WipyGTbwDcgMrmRnnC2voJffX0IiaTU7AeaOUY=
Subject key identifier:   81:AD:74:46:84:B2:EE:5D:4A:EC:3B:35:F5:30:3E:54:8B:A8:33:73
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       696AA239CD59E33B3ECD3AF9B293AC31867445BF
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Tue 05 Mar 2024 18:14:09 +0000
ROA not before:           Tue 05 Mar 2024 18:09:09 +0000
ROA not after:            Tue 04 Mar 2025 18:14:09 +0000
asID:                     273142
IP address blocks:        2803:2c50:a000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6a:a2:39:cd:59:e3:3b:3e:cd:3a:f9:b2:93:ac:31:86:74:45:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Mar  5 18:09:09 2024 GMT
            Not After : Mar  4 18:14:09 2025 GMT
        Subject: CN=81AD744684B2EE5D4AEC3B35F5303E548BA83373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:31:69:ba:1a:16:f7:fc:57:83:20:16:ee:
                    e0:1c:28:ca:aa:ce:a7:6a:52:fe:e1:14:53:ca:35:
                    6d:50:ef:bf:85:c5:40:23:f4:ca:e5:91:61:58:37:
                    5b:ee:56:a9:09:5f:f1:29:cc:0e:06:4d:30:5c:d4:
                    02:60:f7:1e:28:0e:f3:47:60:16:a9:d4:a4:4b:c8:
                    4b:d3:e8:35:e0:88:70:02:2c:5c:2c:93:2a:39:2d:
                    15:1b:23:b5:22:0e:be:90:4b:b2:0b:df:67:fb:3c:
                    87:e3:6c:7a:7f:61:99:3a:c2:66:d5:68:78:5f:32:
                    69:0e:84:0b:46:63:79:4c:cb:16:53:7b:0f:5b:58:
                    d5:26:d2:76:44:70:50:d4:06:5a:ec:3c:66:46:7c:
                    4f:19:f7:58:e4:89:b9:16:54:4a:3f:e6:48:40:43:
                    20:c3:67:39:5b:8d:05:ad:7a:6e:cd:19:83:b5:fa:
                    9e:75:91:fc:c0:7e:c5:c7:fe:2f:7c:26:97:a5:e0:
                    89:c1:01:8a:79:fa:c0:6b:a8:73:c6:31:01:4b:11:
                    1c:d9:16:09:31:44:27:38:cd:27:54:8a:c3:3e:5b:
                    c4:58:f5:66:82:ba:50:62:ea:27:91:50:a2:3b:da:
                    fc:e2:a7:23:9a:9b:f0:69:e0:31:bc:7c:fb:db:6b:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AD:74:46:84:B2:EE:5D:4A:EC:3B:35:F5:30:3E:54:8B:A8:33:73
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a613030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:74:fe:30:57:8b:f4:9b:9a:51:60:c9:2e:7a:a1:bf:28:
         f9:84:47:f7:3a:c2:22:69:65:cb:ba:4d:32:74:c1:18:25:44:
         44:32:7d:8f:13:df:f8:49:a9:f9:df:0e:91:44:13:37:72:66:
         8c:61:60:4f:cc:97:dd:7f:b9:83:6b:3e:64:4c:16:ea:10:a3:
         93:ee:93:87:69:6b:d4:8b:e6:fa:02:17:76:77:d0:29:0d:40:
         26:82:a3:92:26:af:37:72:44:bb:ef:f3:03:d6:22:be:09:7f:
         16:4a:96:0b:fb:54:40:e3:1e:a1:ca:08:69:a3:2f:c2:f6:66:
         57:f0:29:df:c6:a7:e1:ed:32:34:2a:cb:ed:d2:98:15:cb:74:
         b9:1f:ff:32:9d:65:9b:20:c6:39:46:33:98:59:61:b4:8e:8e:
         16:96:85:2d:46:4f:f7:fe:db:43:05:e9:19:de:60:d5:e4:1f:
         a8:41:1d:a8:65:89:2c:41:82:87:11:e0:67:00:47:56:9a:b5:
         fc:ee:ce:07:c2:b0:2a:ab:4c:26:fd:8d:01:54:4c:c2:71:23:
         b8:7a:f5:30:41:75:a7:9c:d1:63:b8:6d:91:d8:62:04:5b:9e:
         af:61:73:c0:6a:58:3c:72:71:c3:df:66:ae:36:c8:c2:4a:f1:
         99:e6:df:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org