Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3330303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3330303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          tDLL0n79zAq+xjRH7xjuwEGFHOmgf3ckfA4yTonuBS0=
Subject key identifier:   8C:FA:3B:ED:D7:87:B5:22:B0:F0:9E:0C:E2:86:D1:69:17:C4:CA:A1
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       2170EF8EC19556C5E070A71C158C59EDB8E0B3B2
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3330303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 05 Mar 2024 17:45:00 +0000
ROA not before:           Tue 05 Mar 2024 17:40:00 +0000
ROA not after:            Tue 04 Mar 2025 17:45:00 +0000
asID:                     272877
IP address blocks:        2803:2a90:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:70:ef:8e:c1:95:56:c5:e0:70:a7:1c:15:8c:59:ed:b8:e0:b3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Mar  5 17:40:00 2024 GMT
            Not After : Mar  4 17:45:00 2025 GMT
        Subject: CN=8CFA3BEDD787B522B0F09E0CE286D16917C4CAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:94:00:ad:60:df:e4:f8:69:6e:49:cf:0d:
                    db:19:e3:d8:dd:72:0a:14:9f:ba:1c:d9:23:e2:f5:
                    6c:5e:ef:53:68:1f:88:b2:bb:c1:6e:3a:48:ac:7d:
                    7b:2e:69:22:35:09:5c:8e:41:ae:48:b6:7c:ef:f9:
                    d1:c3:2f:5a:e7:8f:ee:ff:56:8f:6e:d1:9e:d9:62:
                    e6:53:09:d0:7b:35:01:f7:5c:f7:6f:a7:ec:25:3f:
                    24:fc:06:c7:e2:0c:5e:2d:5e:f7:76:7f:a3:6a:5f:
                    c5:2c:75:ea:c5:aa:30:2a:9e:9c:50:fd:54:4e:6a:
                    fe:fc:7a:cf:a4:ff:2f:9b:a1:8a:42:ee:3f:7c:29:
                    81:31:c7:c9:17:dd:73:2f:4b:90:5b:89:bb:cb:1e:
                    c6:cd:51:dc:06:b9:da:ef:8d:2d:e8:b1:5b:dd:ac:
                    be:42:be:f5:81:92:8a:40:0b:5e:9f:d0:4f:18:38:
                    42:24:79:02:65:b0:7a:e0:ee:7e:43:48:d0:95:0f:
                    a6:91:b5:c2:41:92:43:4c:36:68:8c:20:e7:c0:47:
                    2b:e1:2f:e3:7a:52:29:d8:6b:8c:e2:43:3e:ce:11:
                    12:63:36:7f:95:b3:23:13:32:df:7e:a9:aa:87:ae:
                    38:81:21:03:de:ed:52:56:46:b2:61:d6:2b:89:f8:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FA:3B:ED:D7:87:B5:22:B0:F0:9E:0C:E2:86:D1:69:17:C4:CA:A1
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3330303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:76:da:af:da:70:fb:bd:e6:f4:44:c1:15:f1:d0:e1:84:f4:
         57:31:34:67:07:b4:e5:05:3f:25:bf:c4:48:9e:57:bd:c7:78:
         43:2f:74:26:46:89:78:a5:c6:48:4b:75:b8:ce:88:a3:d2:82:
         0b:d2:7e:97:16:b0:72:ab:ba:2d:3c:dd:c7:81:36:c4:d7:3f:
         ee:54:e3:b8:83:8a:2d:e9:d7:19:39:65:6f:07:f6:e4:6e:76:
         6c:62:5a:ef:f4:2c:ae:3d:d5:0f:3d:aa:ae:61:9e:bd:4f:d3:
         3c:91:2a:59:8c:08:0a:ac:c7:d8:91:4a:55:48:bd:10:ab:62:
         05:90:42:9e:6f:c8:d9:82:c1:17:26:52:5e:0d:70:42:0a:88:
         33:4e:98:58:49:40:78:46:15:17:f4:23:8b:01:1c:17:e3:be:
         7e:af:8a:b5:ec:bc:af:f6:b6:28:3b:50:6b:bb:21:51:0a:19:
         81:fc:66:da:dd:a4:ec:83:13:e6:65:0f:19:f8:a2:8a:91:cc:
         d6:c4:6f:91:71:9c:2a:1c:fc:7f:a9:28:7a:ee:93:9c:e1:83:
         dc:1f:ae:d6:a6:44:96:01:24:52:cb:59:1a:45:76:07:13:f6:
         53:d7:52:d8:3b:f0:5a:4e:f1:cf:5d:e3:66:7a:6a:25:b7:31:
         12:d3:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org