Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f34362d3634203d3e20323731383839.roa
File:                     323830333a3231303a3a2f34362d3634203d3e20323731383839.roa (raw, json)
Hash identifier:          vu2oqOPDBK4FfpU/kG2j5yyUuvvwjXoTMK4+u+Ez9QY=
Subject key identifier:   30:9A:7F:95:A2:F3:93:FF:6B:AC:49:B4:F1:B6:63:26:5A:49:42:F3
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       7AA4E18D1C8410603ADC198C42107AE53767C4AB
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f34362d3634203d3e20323731383839.roa
Signing time:             Tue 05 Mar 2024 18:15:21 +0000
ROA not before:           Tue 05 Mar 2024 18:10:21 +0000
ROA not after:            Tue 04 Mar 2025 18:15:21 +0000
asID:                     271889
IP address blocks:        2803:210::/46 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a4:e1:8d:1c:84:10:60:3a:dc:19:8c:42:10:7a:e5:37:67:c4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Mar  5 18:10:21 2024 GMT
            Not After : Mar  4 18:15:21 2025 GMT
        Subject: CN=309A7F95A2F393FF6BAC49B4F1B663265A4942F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:6c:70:00:ec:f0:81:6c:7b:a0:36:a1:da:
                    b0:19:25:db:65:ac:e6:71:68:c3:58:3e:7d:bb:2e:
                    51:69:68:38:68:ae:ec:d5:22:04:bf:71:d2:ba:62:
                    97:d7:a6:5c:e3:87:ab:6f:eb:37:24:80:c9:e1:d0:
                    37:77:ac:be:93:e2:c7:ac:7e:07:a1:6b:00:05:97:
                    e0:61:2e:39:36:e1:04:60:70:b4:39:30:cf:61:99:
                    89:2d:bd:7c:29:f4:77:4b:fb:e7:0d:33:ed:05:01:
                    e2:06:65:57:97:ee:e8:af:54:13:9b:29:07:cc:a7:
                    c2:3e:96:8a:8a:55:84:7a:27:88:af:e1:1e:41:eb:
                    ba:73:81:80:9e:50:14:25:26:4b:95:97:4d:3c:62:
                    e3:0e:bf:88:25:94:79:4b:c3:9e:1f:68:8a:bf:7e:
                    7a:12:84:35:fd:d3:9b:8a:1f:75:c6:ae:4e:55:17:
                    10:d8:e9:3b:22:5a:2a:5b:b7:50:31:f3:66:76:6f:
                    15:1a:87:b1:cd:39:52:7c:d4:ae:c9:9e:39:d8:7d:
                    34:fd:7a:af:1d:1a:a6:21:b5:6d:36:23:c4:76:62:
                    fa:07:d2:fe:2e:ab:64:8a:fe:51:d7:d6:db:aa:4d:
                    e9:3e:16:0e:b8:c6:07:fa:9a:c1:e3:46:3a:c4:3f:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9A:7F:95:A2:F3:93:FF:6B:AC:49:B4:F1:B6:63:26:5A:49:42:F3
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f34362d3634203d3e20323731383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:210::/46

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:48:d3:be:06:8e:dd:06:45:ec:8a:72:03:33:28:69:22:
         19:06:23:f7:10:98:3b:40:54:24:13:0f:06:d3:ad:54:84:f4:
         52:75:74:a5:b1:2b:59:d1:2c:3d:0d:5f:95:a0:7c:d6:73:5c:
         80:d9:b8:41:93:d0:24:69:63:c9:97:e5:a0:12:e0:2f:6a:21:
         32:e7:28:9e:b8:dc:c6:c6:79:45:bf:73:04:88:dd:da:75:e1:
         03:56:ee:47:61:07:a3:cc:9a:03:5b:53:ed:c3:15:8b:85:d4:
         1a:68:1a:06:d5:93:b1:f3:9f:fb:33:ed:71:e4:3d:18:e8:0b:
         f0:98:6d:fe:1e:e5:16:63:1c:b4:4f:47:29:17:df:20:e2:49:
         55:02:87:f9:4c:02:49:a5:78:bf:1a:8f:74:10:3d:50:b5:86:
         ac:18:8a:4d:2e:86:75:93:4d:d0:14:e8:96:bf:9d:4d:8a:41:
         d4:82:2d:8f:e9:3b:18:ae:9a:e0:c4:2d:f9:fd:d0:d3:94:a0:
         6d:3d:9d:c5:09:46:fd:16:80:ca:3c:b3:4b:94:65:42:49:24:
         5b:1c:44:1a:43:6a:32:6f:c9:2a:69:fc:9d:f3:6e:90:49:8e:
         d8:51:cd:9a:a9:f0:8a:c4:c5:4a:5e:95:cc:c7:62:83:32:84:
         4e:56:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org