Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          SJdDMpkX5FPDpCXJGB0jNpwhflz5Fd5hZrzSwLXZoUY=
Subject key identifier:   3C:93:ED:1C:37:2A:55:42:78:98:20:6E:96:F2:23:AC:FB:AB:18:F7
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       3D5B46455DBE4C92AE541BF98EF206DFA270C48A
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 05 Mar 2024 18:22:36 +0000
ROA not before:           Tue 05 Mar 2024 18:17:36 +0000
ROA not after:            Tue 04 Mar 2025 18:22:36 +0000
asID:                     272082
IP address blocks:        2803:9b10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5b:46:45:5d:be:4c:92:ae:54:1b:f9:8e:f2:06:df:a2:70:c4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Mar  5 18:17:36 2024 GMT
            Not After : Mar  4 18:22:36 2025 GMT
        Subject: CN=3C93ED1C372A55427898206E96F223ACFBAB18F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:3b:f4:64:8f:6b:8a:bd:52:4f:e2:ba:6a:
                    71:83:d3:d3:00:e1:a9:0a:6f:22:aa:4b:48:db:e6:
                    4e:08:b0:8d:61:bf:92:af:e5:d5:88:e3:81:46:62:
                    fb:e2:dd:91:67:4d:1c:f6:fb:16:96:cc:a5:49:05:
                    17:4e:31:5d:31:56:73:22:bb:be:33:fe:a9:29:51:
                    24:35:cd:c5:c8:a7:a8:16:76:29:f0:42:0e:45:92:
                    4a:0c:54:bd:85:a6:20:6b:9d:74:6d:d7:ca:35:06:
                    e0:b4:fb:0b:86:01:77:86:55:5d:a0:8e:ea:f4:fa:
                    16:47:a5:0f:81:c6:49:74:6a:35:3d:fa:6c:c0:74:
                    74:07:60:9f:ab:41:55:ec:f7:4d:ce:13:9f:77:02:
                    0f:4e:4a:99:82:2c:55:74:be:40:50:3c:c7:4b:05:
                    34:a6:59:77:6d:a2:ec:68:e1:c7:ba:0b:70:0e:9a:
                    2f:07:47:c6:01:ae:24:03:36:a0:69:7e:c3:77:21:
                    80:f3:42:65:89:e0:cd:d3:d0:13:1c:ad:f3:f7:1f:
                    73:e8:d5:da:9c:e6:49:45:06:68:4c:d0:05:7b:e4:
                    3d:0b:9e:95:08:82:43:4b:65:7e:82:dd:68:0d:f6:
                    c2:9e:23:e6:ca:3b:fe:05:16:28:d8:52:29:45:fd:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:93:ED:1C:37:2A:55:42:78:98:20:6E:96:F2:23:AC:FB:AB:18:F7
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:98:3d:d4:2f:81:54:9a:4d:44:4e:58:7d:93:23:10:34:
         af:c3:78:06:81:86:ca:99:27:c0:c1:f1:28:83:3a:6d:ee:eb:
         7f:80:a4:fe:f5:77:ab:e1:c5:4b:60:d4:c1:8c:44:65:05:38:
         ee:7e:5d:01:26:86:a1:64:5d:97:2e:63:9e:87:6e:b4:c4:66:
         96:af:4d:92:30:81:a5:2d:99:d3:0e:b4:31:9b:96:83:2f:77:
         df:df:ed:d9:35:4d:ad:8f:5c:81:57:52:ac:fd:9b:0d:e0:34:
         8c:5f:2f:17:4f:9b:7a:0d:bc:d2:3b:31:71:5a:d0:fb:2e:66:
         cd:9a:20:60:8f:18:3e:df:34:2c:62:17:f3:72:81:be:4d:82:
         90:ac:05:45:b9:30:ff:6d:dc:ba:41:44:e9:40:14:83:f3:f1:
         53:23:cf:ba:97:6e:e9:79:10:b2:59:15:e7:31:ea:2d:06:97:
         e6:22:d9:b6:ee:c9:37:44:04:4b:c4:45:68:a0:6e:84:a7:26:
         a3:f8:1a:93:5e:4d:e7:f1:b2:60:bd:c3:56:c9:ec:d8:23:92:
         25:3e:e3:a7:7b:9e:77:39:fb:7f:f4:1a:bf:a8:f1:47:5b:fe:
         e6:c0:cf:c9:93:8a:ec:8c:aa:14:21:44:bb:72:20:6e:83:10:
         09:c6:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org