Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3332203d3e20323731393037.roa
File:                     323830333a653231303a3a2f33322d3332203d3e20323731393037.roa (raw, json)
Hash identifier:          gq8k4QKK/tfHs3wPPOUMBahDOYYTGGcboSLH1QurSIc=
Subject key identifier:   18:E3:A8:F3:65:BB:18:38:AB:87:64:DC:84:76:69:37:C2:03:F0:3C
Certificate issuer:       /CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25
Certificate serial:       59BBA81061831BF07AF03F0CD62249F36B460296
Authority key identifier: 22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3332203d3e20323731393037.roa
Signing time:             Tue 05 Mar 2024 17:45:23 +0000
ROA not before:           Tue 05 Mar 2024 17:40:23 +0000
ROA not after:            Tue 04 Mar 2025 17:45:23 +0000
asID:                     271907
IP address blocks:        2803:e210::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bb:a8:10:61:83:1b:f0:7a:f0:3f:0c:d6:22:49:f3:6b:46:02:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25
        Validity
            Not Before: Mar  5 17:40:23 2024 GMT
            Not After : Mar  4 17:45:23 2025 GMT
        Subject: CN=18E3A8F365BB1838AB8764DC84766937C203F03C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:30:4f:92:36:30:18:da:d8:03:6a:9c:3a:
                    fe:af:02:93:91:c7:9e:6d:0e:4e:1f:84:6c:58:14:
                    2b:38:c9:75:71:4d:56:ac:97:68:e3:6c:fc:05:b1:
                    18:c3:b3:03:33:69:da:fe:fa:d1:77:7e:4e:f2:d2:
                    15:0d:e1:d5:03:f2:fa:6b:4b:dd:e8:68:e2:dc:5c:
                    5a:14:c7:bb:09:d9:a3:f8:7b:d6:25:ab:68:02:41:
                    50:e5:00:69:e0:90:ad:e2:1f:d6:f3:3c:e5:42:c9:
                    23:07:f3:b7:73:c3:09:70:14:88:9a:22:ee:97:1c:
                    5a:45:01:3c:3f:be:7e:bb:d2:c6:ba:0e:93:46:0d:
                    ee:c3:71:45:b7:ae:8a:aa:e3:11:ef:f1:cc:a2:6c:
                    4b:a5:ed:17:6f:69:49:ff:a6:c2:b0:f0:67:b6:41:
                    2c:7d:ae:b1:ae:e6:f9:7b:cc:16:7d:96:90:37:64:
                    e2:f2:bb:2a:74:f4:a5:5a:21:05:9b:54:53:de:bf:
                    73:af:d7:55:79:18:c3:3b:4a:a6:a6:a7:15:e8:ce:
                    48:43:c9:32:b4:6e:29:3c:c7:70:ec:60:21:be:d9:
                    54:55:af:6b:b7:80:93:9a:82:4c:4a:29:0f:8c:06:
                    b3:39:5c:e0:78:4b:f7:40:cd:2d:6c:94:d0:89:ed:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E3:A8:F3:65:BB:18:38:AB:87:64:DC:84:76:69:37:C2:03:F0:3C
            X509v3 Authority Key Identifier:
                keyid:22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/323830333a653231303a3a2f33322d3332203d3e20323731393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e210::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:85:e2:4e:65:27:c4:3d:a8:07:9b:94:11:08:b2:2b:72:7c:
         8c:28:94:4b:f4:53:97:77:6c:77:aa:df:e0:2a:ff:7a:19:63:
         cf:19:c0:83:95:9b:5c:b2:12:c9:88:6c:c7:06:e6:56:7a:67:
         01:0b:2f:04:cd:dc:e7:c5:d4:c1:39:93:3d:5c:c4:30:0a:e4:
         25:15:48:3b:5c:58:a6:72:a2:87:e6:21:4c:b7:12:11:eb:2a:
         e3:ac:02:f6:e2:f3:fa:fb:ee:aa:1d:68:19:61:64:6a:89:f8:
         4f:c9:bf:cf:ac:bb:7d:4e:94:69:8e:32:6a:05:56:f2:59:23:
         01:db:50:a4:98:7f:ef:87:16:56:e7:e2:fd:ca:7d:61:3f:c1:
         25:b3:6c:84:27:74:4c:29:c7:cc:bd:fa:0c:38:09:29:6c:db:
         08:f0:39:fc:71:6d:98:8f:a6:9e:b9:0c:0f:b2:c0:44:90:76:
         9e:44:33:7d:53:a2:34:9a:c0:56:f7:cb:98:a2:9f:46:e8:7e:
         38:f8:94:1a:33:b9:8e:31:e6:19:a5:a6:e2:9c:d9:49:1b:dd:
         6c:2a:0f:da:1f:25:b0:b8:15:f0:2e:64:72:26:3d:71:c6:dc:
         11:c4:6c:54:49:36:86:34:5a:22:f8:d7:82:33:44:4b:93:e8:
         a4:50:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org