Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3130303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3130303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          U8G6sd7gXVT0nTYEcnHgusNWv93tPleeaA2xshwLhLk=
Subject key identifier:   D9:C9:96:0E:95:8F:5A:A0:71:A3:34:B6:DB:59:F5:55:8E:03:DB:E2
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       4EF9672D4B34FA07DE8B880E7ABF546D0DE0A12C
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3130303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Wed 17 Apr 2024 01:35:00 +0000
ROA not before:           Wed 17 Apr 2024 01:30:00 +0000
ROA not after:            Wed 16 Apr 2025 01:35:00 +0000
asID:                     272877
IP address blocks:        2803:2a90:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f9:67:2d:4b:34:fa:07:de:8b:88:0e:7a:bf:54:6d:0d:e0:a1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Apr 17 01:30:00 2024 GMT
            Not After : Apr 16 01:35:00 2025 GMT
        Subject: CN=D9C9960E958F5AA071A334B6DB59F5558E03DBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:5a:70:52:be:d0:41:22:9c:7d:76:fd:31:
                    5f:13:41:f3:89:7b:1d:43:6e:b2:2b:e7:7f:f9:b4:
                    05:65:08:a0:31:06:a4:51:e3:20:25:eb:38:42:88:
                    30:7f:ec:2e:3f:21:3e:52:4c:8b:43:77:d7:21:42:
                    a4:4e:35:03:9c:59:99:bb:86:25:a6:66:f8:40:fb:
                    c3:01:2e:21:8a:a9:92:8e:fd:45:ae:31:2e:36:f9:
                    cd:0d:d8:90:b0:12:e4:17:d3:ef:3c:fd:10:8e:c2:
                    cb:2a:2d:69:25:c1:11:39:f8:80:11:f8:49:5d:e5:
                    67:4d:df:e1:71:b9:f7:9c:72:ba:23:69:80:6c:50:
                    76:6f:fd:bb:a7:27:57:cb:ce:4a:1b:d1:d7:ce:42:
                    ea:67:06:20:ab:c3:b3:b8:7e:4a:91:43:2e:03:66:
                    cb:c9:26:15:94:32:45:7d:08:d1:26:86:7d:d5:59:
                    3e:28:22:7f:77:07:43:4b:69:71:cc:6a:a4:35:51:
                    ee:31:e6:ba:2f:d9:cc:18:25:4b:14:5b:3f:e3:0b:
                    50:20:50:62:26:4a:6f:9e:0c:b4:62:f9:89:9f:06:
                    43:67:f7:db:b8:b6:6c:67:29:4e:ba:79:1d:af:b7:
                    45:0a:46:59:b7:75:0c:81:ef:54:92:cc:b1:14:04:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C9:96:0E:95:8F:5A:A0:71:A3:34:B6:DB:59:F5:55:8E:03:DB:E2
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3130303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:6c:b7:c6:a3:f1:bc:b0:93:9d:34:bd:bd:c3:eb:14:9c:ac:
         2d:6f:4a:43:83:66:2f:72:49:21:4e:43:0f:61:c2:16:c6:19:
         c3:e8:42:0b:d4:0f:a7:7b:e3:60:01:25:c8:9e:6d:69:39:44:
         67:3d:3f:5c:dd:de:0c:e6:61:73:2d:15:c2:88:78:b5:f2:bc:
         fb:49:6a:df:4f:9f:a4:aa:3d:6c:4b:8b:ac:06:37:ee:4d:f5:
         8d:a9:08:e2:a3:32:55:c2:f8:70:20:4d:71:1c:fe:9e:f5:47:
         d0:6b:06:0e:ff:d4:83:5c:c6:6e:22:24:2c:38:88:23:9e:2d:
         65:b4:1a:7c:08:60:d7:1b:eb:06:a1:65:87:92:fa:89:d4:6f:
         9c:01:e4:a1:a6:21:b2:fe:ea:2c:f6:6a:a2:78:c8:f0:15:92:
         85:04:f4:57:da:57:c0:e6:9a:e5:af:a4:87:8e:d8:05:73:b5:
         f8:8c:80:28:a3:e9:77:da:53:8c:8e:c8:35:3f:4e:52:2b:6b:
         91:67:2b:b4:2a:f4:ce:7d:89:25:e6:8e:1b:4f:2e:82:7d:8e:
         33:de:84:72:72:bf:75:78:04:42:74:f8:94:17:34:ff:65:09:
         89:db:3d:48:ef:51:32:31:03:78:88:1c:9d:71:26:23:27:df:
         9f:2d:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org