Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3330303a3a2f34302d3430203d3e20323731393033.roa
File:                     323830333a356265303a3330303a3a2f34302d3430203d3e20323731393033.roa (raw, json)
Hash identifier:          2SzCqIClQssbBVa9ysUXYaH/ZpcCROHeHmhpCplfhWY=
Subject key identifier:   F2:3E:3C:E1:2A:19:33:11:7A:CD:50:11:FB:6F:34:7C:62:9D:24:4F
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       2C0A40A92D1A6C08F179149C78C2690A22EF5577
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3330303a3a2f34302d3430203d3e20323731393033.roa
Signing time:             Tue 05 Mar 2024 17:46:17 +0000
ROA not before:           Tue 05 Mar 2024 17:41:17 +0000
ROA not after:            Tue 04 Mar 2025 17:46:17 +0000
asID:                     271903
IP address blocks:        2803:5be0:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0a:40:a9:2d:1a:6c:08:f1:79:14:9c:78:c2:69:0a:22:ef:55:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Mar  5 17:41:17 2024 GMT
            Not After : Mar  4 17:46:17 2025 GMT
        Subject: CN=F23E3CE12A1933117ACD5011FB6F347C629D244F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:8c:6e:4b:c8:62:5a:3b:07:f3:26:53:07:
                    e7:67:a6:27:08:d7:4a:db:ac:bf:89:40:1a:bc:91:
                    d1:19:d3:a4:0e:57:59:85:46:10:ae:0b:63:53:4b:
                    37:0f:45:ff:16:b2:9a:8e:03:c3:1d:4f:e7:2a:a4:
                    f1:a8:2b:e7:cd:6e:d2:df:1d:c5:b9:9f:bd:70:aa:
                    ee:e4:d7:c4:18:69:2d:db:eb:c7:af:2a:61:a0:b8:
                    42:80:b6:61:90:6a:6c:2a:27:a2:7c:80:3a:31:b3:
                    64:59:96:83:79:aa:a4:05:2e:71:3d:3d:9e:58:07:
                    68:db:ee:d6:4f:ef:a1:5d:c6:ed:76:bd:8f:91:14:
                    79:72:f1:85:4a:13:e7:9d:e4:75:f0:9f:dd:77:fc:
                    f2:ed:8c:35:02:79:b3:6b:f2:6e:6b:25:7d:c9:12:
                    d5:c0:71:4b:93:4d:00:2b:19:17:c9:17:54:ad:ff:
                    a2:4f:33:6f:eb:0b:65:b0:7c:94:2f:e0:55:2f:18:
                    ea:c1:50:e8:a6:83:f7:56:fb:12:8e:77:e4:ac:ff:
                    0e:99:d1:80:a7:bd:e9:d7:b8:fc:9e:5b:81:4a:cf:
                    e9:9e:29:36:96:57:59:a5:4b:cf:31:e0:9f:92:3e:
                    40:48:f3:36:8b:f3:27:60:2b:b3:38:6d:30:fe:02:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3E:3C:E1:2A:19:33:11:7A:CD:50:11:FB:6F:34:7C:62:9D:24:4F
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3330303a3a2f34302d3430203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:df:1d:80:76:20:59:91:11:a4:53:7f:2c:c0:cd:5a:b4:6c:
         c2:c4:2d:ae:ca:cc:6c:05:cc:5f:96:ce:6c:40:e1:73:b8:5b:
         18:62:cd:b9:37:3b:65:7e:8f:30:8b:69:c5:c9:47:e0:2d:aa:
         56:22:e7:d9:45:9c:c9:de:ef:77:63:63:3d:1d:da:7a:20:f0:
         f4:17:8d:0d:92:48:1f:40:8c:1c:7c:69:d8:74:f1:93:10:ef:
         37:25:b4:bc:ab:c0:0e:b0:fd:a6:e7:75:d6:38:66:4d:32:be:
         e3:32:4a:bb:02:95:c1:fa:38:2b:88:5c:df:0b:24:ec:4a:b1:
         77:5c:56:09:19:7b:6e:e6:97:39:9b:0c:2a:e8:24:8a:bb:01:
         25:c8:cd:0c:b2:3b:ff:f5:5d:b1:b6:7d:c3:1f:59:cb:7e:c4:
         99:df:66:a1:c5:16:d9:69:84:be:12:5b:bb:e9:29:b7:f1:83:
         b2:d1:3c:01:d9:59:dd:b5:b5:07:ec:70:1a:84:25:9d:ca:99:
         a5:ae:6a:37:4b:64:6c:3d:1b:2c:de:e2:0e:98:46:50:c6:a0:
         c8:cd:8e:62:58:9f:cf:80:d7:b1:08:dd:1d:0f:dc:9d:f2:58:
         12:19:6c:42:09:bc:5b:1b:a4:7a:1c:f2:e1:15:ec:11:c8:64:
         9c:9f:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org