Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3a2f34302d3430203d3e20323731393033.roa
File:                     323830333a356265303a3a2f34302d3430203d3e20323731393033.roa (raw, json)
Hash identifier:          PWX18ygAwFMv1PlcTudR+W5XS82JhesB5GI51OGr/90=
Subject key identifier:   AB:21:31:B7:EF:53:36:72:45:62:0A:7C:5D:F5:F4:E9:AB:EF:30:82
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       45A6CC02DFF910917D297F6A612C5A4AFE21548E
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3a2f34302d3430203d3e20323731393033.roa
Signing time:             Tue 05 Mar 2024 17:46:17 +0000
ROA not before:           Tue 05 Mar 2024 17:41:17 +0000
ROA not after:            Tue 04 Mar 2025 17:46:17 +0000
asID:                     271903
IP address blocks:        2803:5be0::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a6:cc:02:df:f9:10:91:7d:29:7f:6a:61:2c:5a:4a:fe:21:54:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Mar  5 17:41:17 2024 GMT
            Not After : Mar  4 17:46:17 2025 GMT
        Subject: CN=AB2131B7EF53367245620A7C5DF5F4E9ABEF3082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:ee:c2:93:d9:43:7d:d6:74:5c:0c:8e:db:
                    8b:f6:37:87:14:23:f4:28:8f:59:b9:74:b0:f1:83:
                    f3:40:a7:96:d2:39:2c:59:bd:c0:30:25:cb:de:91:
                    58:66:64:1e:0e:6e:f9:6f:d4:09:15:41:5c:ba:4d:
                    9d:53:c6:33:9f:96:db:04:fb:56:b2:b6:4e:8b:e3:
                    60:67:8f:d7:20:92:f3:7c:02:13:50:a9:17:42:69:
                    78:44:d1:1f:ad:e0:0d:d3:67:d9:75:82:66:fd:bb:
                    e4:bc:76:89:f0:b8:e6:7d:a9:9c:a0:c9:ac:32:ae:
                    1c:61:18:73:04:00:71:8f:30:9f:ff:e8:ab:96:ec:
                    c0:8f:67:06:20:86:7d:13:55:86:73:f4:06:60:25:
                    59:85:ec:65:f3:ee:58:6a:02:4a:51:13:ce:d2:18:
                    13:8e:45:8e:dd:2c:d1:f6:5d:2c:ec:ed:14:89:7f:
                    af:cd:f0:01:71:f8:69:8d:b3:08:41:29:40:d4:40:
                    59:46:81:35:75:1d:18:d6:19:c9:13:64:5b:8e:09:
                    bb:4f:b3:67:0f:c0:39:9b:bb:d8:03:cd:8f:9a:b3:
                    bd:8d:ab:7e:51:dc:e3:42:e1:3d:a3:60:19:ca:0e:
                    01:52:e0:94:8d:f6:3b:a0:0b:85:4c:f1:04:bd:40:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:31:B7:EF:53:36:72:45:62:0A:7C:5D:F5:F4:E9:AB:EF:30:82
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3a2f34302d3430203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:59:4f:07:6a:db:c4:42:18:8a:7b:d6:6b:18:ff:9d:ea:59:
         26:43:0c:22:ae:77:83:42:d6:3b:b0:43:d3:d2:4c:3e:15:fd:
         f0:7b:a0:c7:2f:a2:b6:96:ff:76:04:50:19:cf:fd:cc:ad:a5:
         09:fd:8b:15:29:62:39:ef:67:42:bf:64:e0:ad:06:2b:9d:24:
         5b:39:0f:d9:05:29:98:fd:fc:d1:75:88:0f:69:fb:e3:cf:41:
         39:1c:24:01:37:9c:25:6b:81:84:58:75:7e:b7:14:5e:33:d0:
         ea:f4:82:22:60:ef:a8:be:e4:11:20:ed:ff:45:94:0c:7d:79:
         b4:a5:69:61:74:a3:f2:48:8d:44:04:44:fd:d1:d3:68:a7:1e:
         4b:32:c2:e8:73:9f:61:2e:c2:f2:69:1c:00:a9:9d:22:a8:5b:
         79:e1:f1:cd:b9:f2:2f:27:6a:e1:4a:e1:8d:bc:ae:25:f9:9b:
         18:c4:a1:00:3f:f1:fa:cf:09:da:fe:5d:3b:a0:98:a4:f2:66:
         29:44:ab:29:b9:93:ed:de:4a:d7:23:f7:15:7f:d3:80:d3:b5:
         cd:34:6e:98:31:46:05:fb:17:f7:84:4c:ea:d9:e5:20:b0:0d:
         89:c7:77:f2:97:42:69:ed:f1:89:87:02:57:ea:86:fc:dd:28:
         5a:a6:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 23:39:21 2024 by rpki-client on console-fra.rpki-client.org