Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a373a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a373a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          11Qdhgr+jJyNkBtiwU/tm5lRlaqX9KgltYWkH5TxTOc=
Subject key identifier:   C2:9C:58:7C:4F:D8:4E:CB:C5:BA:AC:42:FA:B0:D4:64:00:C1:45:62
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       6A003183D515573E588848C576EA94D33B65C567
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a373a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 05 Mar 2024 18:22:37 +0000
ROA not before:           Tue 05 Mar 2024 18:17:37 +0000
ROA not after:            Tue 04 Mar 2025 18:22:37 +0000
asID:                     272082
IP address blocks:        2803:9b10:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:00:31:83:d5:15:57:3e:58:88:48:c5:76:ea:94:d3:3b:65:c5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Mar  5 18:17:37 2024 GMT
            Not After : Mar  4 18:22:37 2025 GMT
        Subject: CN=C29C587C4FD84ECBC5BAAC42FAB0D46400C14562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:81:50:7e:00:f2:89:01:3d:34:31:b7:e3:
                    13:cd:22:4f:28:75:25:c3:9f:c0:cf:5d:0b:5c:a7:
                    6f:53:16:62:1c:40:86:0a:5e:8e:6d:94:d8:67:75:
                    13:dd:4e:c0:01:42:0d:32:c8:bf:a8:67:75:84:df:
                    89:02:56:8d:a4:c0:5f:83:2a:26:ea:97:e5:93:21:
                    29:bb:86:54:d9:da:35:e6:13:36:bb:53:39:00:a4:
                    8c:3c:2c:15:da:d9:3a:f3:ca:69:cc:91:e7:85:0c:
                    f1:b3:71:23:9e:fc:b4:91:4a:62:15:6e:9b:bd:5c:
                    f3:2f:34:9e:47:06:76:4b:4a:3d:cc:15:1d:ec:36:
                    6d:18:db:d7:ab:93:c5:eb:9c:cd:31:03:ef:23:c9:
                    5b:35:8e:c1:69:fb:6c:39:bb:43:55:64:ac:6f:dc:
                    14:59:d2:eb:9c:de:d7:b9:cf:36:44:45:26:97:28:
                    f1:9d:47:22:63:b7:2f:1a:b9:0c:52:0d:b2:d4:14:
                    eb:fc:ad:92:37:d0:61:90:d3:26:ea:20:96:8d:9d:
                    3a:56:a4:9f:2b:06:6a:07:e4:4c:9a:b2:6b:04:3b:
                    55:9e:73:0c:a6:4c:43:b6:fc:15:8e:37:ac:0c:3d:
                    9e:34:f3:ed:cf:bd:a5:47:fc:09:98:b2:b4:cf:f1:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:58:7C:4F:D8:4E:CB:C5:BA:AC:42:FA:B0:D4:64:00:C1:45:62
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a373a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:13:a9:53:cf:82:d0:44:c3:e6:20:26:99:03:f9:04:12:b8:
         00:5c:15:f3:54:2c:82:6f:b6:e7:e0:2b:7e:d8:7b:01:e8:8e:
         a5:91:64:ac:61:b6:2c:31:50:e7:1d:ea:1a:dc:0a:fd:f6:a0:
         3e:d0:c6:5d:d9:e2:ad:0a:be:76:c4:64:be:bf:76:d2:d0:ef:
         f5:20:52:0a:46:c3:87:c2:03:45:a5:36:7c:9b:7f:e0:f3:ee:
         7a:bd:d1:51:d9:d1:1d:09:9b:5e:f2:0b:71:d1:2a:3b:c9:65:
         5d:63:7d:a2:bf:79:ed:8d:55:f0:ab:8d:92:3a:a8:e8:6d:1f:
         66:e7:3f:2f:c4:e8:48:e6:a6:2a:27:6b:56:88:36:77:4b:8a:
         e4:d6:a8:41:a1:9a:56:2b:aa:86:5c:f8:4b:6e:4d:30:aa:21:
         21:a9:8b:e2:12:88:c7:0f:3e:b6:e3:76:43:f9:f8:a2:b7:d0:
         ab:7f:78:42:b5:f9:63:c6:61:58:d0:81:e1:80:46:c0:b8:e4:
         51:89:b9:ca:74:5d:f9:49:f1:68:8c:f8:af:2a:eb:9f:cf:a5:
         1f:96:fb:de:fe:3c:56:ee:53:ac:d3:5a:b5:ea:35:7f:91:6d:
         b0:e2:46:f7:8a:b1:9a:c4:ee:41:b5:58:19:7f:c7:e1:3e:e8:
         be:d0:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org