Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f33322d3332203d3e20323732303832.roa
File:                     323830333a396231303a3a2f33322d3332203d3e20323732303832.roa (raw, json)
Hash identifier:          A5Q8FAhebuVZH3JTUpkTT2TuOrssEaE6RcL+ENMwcm0=
Subject key identifier:   14:00:70:37:92:BC:67:82:7A:CB:F3:3E:54:78:8F:E3:82:57:9B:2D
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       5CE9629AE6B9C0F3F103DA94C984930F05E4436E
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f33322d3332203d3e20323732303832.roa
Signing time:             Tue 05 Mar 2024 18:22:37 +0000
ROA not before:           Tue 05 Mar 2024 18:17:37 +0000
ROA not after:            Tue 04 Mar 2025 18:22:37 +0000
asID:                     272082
IP address blocks:        2803:9b10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 16 May 2024 23:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e9:62:9a:e6:b9:c0:f3:f1:03:da:94:c9:84:93:0f:05:e4:43:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Mar  5 18:17:37 2024 GMT
            Not After : Mar  4 18:22:37 2025 GMT
        Subject: CN=1400703792BC67827ACBF33E54788FE382579B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:fa:e7:3c:15:00:21:ce:52:06:05:05:6b:
                    ec:e8:6f:62:6b:98:8b:15:24:79:59:72:8b:39:36:
                    99:fc:47:da:90:61:fc:be:2f:8e:fe:67:d0:59:fc:
                    90:fc:10:17:07:81:9c:49:13:0d:9d:18:68:b4:8c:
                    00:5e:03:ff:f1:5a:e9:b7:13:9d:5d:65:d8:28:cd:
                    c3:8a:d9:23:9d:28:cc:be:58:6e:09:aa:8f:26:c3:
                    66:eb:9c:56:15:1d:46:71:7f:cb:66:89:c4:be:d0:
                    7d:e3:e1:d4:22:69:ec:1c:5f:70:7c:7c:28:3a:3d:
                    6c:42:ca:be:86:7a:4f:11:26:f4:c1:c2:05:de:f8:
                    c4:91:82:2b:13:4d:6f:10:64:ee:d5:09:07:28:1d:
                    27:dd:30:0d:6a:ad:38:86:f7:2d:70:cc:05:9f:1e:
                    58:23:d9:e1:5b:ee:90:3d:2b:30:0a:1d:07:47:94:
                    cf:92:5f:ed:6b:3b:e4:78:5e:ac:4d:0d:06:e5:84:
                    04:13:75:37:91:18:cb:ae:1e:47:fc:88:9e:2b:95:
                    0d:48:d9:a0:65:fc:a9:0d:05:74:74:af:f9:24:3e:
                    a2:4e:9e:97:1d:5b:18:e3:81:e6:42:7e:4c:c4:41:
                    6a:a4:63:0c:28:59:92:95:d7:3c:ea:74:e2:65:3f:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:00:70:37:92:BC:67:82:7A:CB:F3:3E:54:78:8F:E3:82:57:9B:2D
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f33322d3332203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:12:4a:a7:68:29:b7:09:b3:ff:52:da:d7:06:1d:23:4a:
         ff:59:4e:a9:02:98:4b:71:7f:c0:e3:c7:3f:f9:66:01:1f:62:
         1e:82:a6:0e:94:3e:b2:d7:cd:01:7e:dc:ad:a1:c8:3b:a9:0c:
         c8:a3:7c:03:ca:12:d2:1e:3b:11:61:ce:b8:94:8c:14:b8:c8:
         f8:d3:06:6e:f1:64:04:90:43:ee:07:d4:59:cb:ae:c7:ac:f2:
         7c:16:ea:12:c7:a7:33:5e:69:f2:52:5c:81:8c:36:2f:c9:2b:
         50:67:77:ff:00:e3:d6:af:28:ff:ce:6c:4a:41:75:a5:41:40:
         68:26:26:2a:88:59:c2:98:c2:3c:4d:24:2c:d4:3e:d6:66:ad:
         39:ce:87:4e:72:90:00:89:be:31:2e:2f:ce:e2:c8:f1:55:b5:
         32:18:7b:3c:96:43:83:f7:aa:cd:1e:23:18:29:2b:ba:13:a6:
         ac:2e:54:97:4a:ea:bb:c7:ef:c8:3b:4f:b3:c2:ad:27:99:a0:
         45:3d:5b:4a:c0:c7:4c:d0:76:2b:bb:2e:32:af:f1:4b:b2:2f:
         61:a0:05:bf:39:91:01:da:4d:17:01:7d:96:7d:42:08:0f:8e:
         6e:f8:a3:42:9a:cf:fa:5c:1e:a7:ae:65:6f:4f:b0:92:cc:ac:
         24:fb:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 09:28:25 2024 by rpki-client on console-ams.rpki-client.org