Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3330303a3a2f34302d3430203d3e203532323836.roa
File:                     323830333a626130303a3330303a3a2f34302d3430203d3e203532323836.roa (raw, json)
Hash identifier:          /zBX1ZBzLwr+WgaMaO/pGC6xNhfy4i0VjK2UUgZLWws=
Subject key identifier:   DA:5C:6E:25:0C:ED:7F:D9:2A:54:25:B8:9B:D9:AF:D3:8C:38:F9:9C
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       65F11716773291E1205C40BDE0AC71EA2FAD4BC0
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3330303a3a2f34302d3430203d3e203532323836.roa
Signing time:             Tue 05 Mar 2024 17:54:31 +0000
ROA not before:           Tue 05 Mar 2024 17:49:31 +0000
ROA not after:            Tue 04 Mar 2025 17:54:31 +0000
asID:                     52286
IP address blocks:        2803:ba00:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f1:17:16:77:32:91:e1:20:5c:40:bd:e0:ac:71:ea:2f:ad:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Mar  5 17:49:31 2024 GMT
            Not After : Mar  4 17:54:31 2025 GMT
        Subject: CN=DA5C6E250CED7FD92A5425B89BD9AFD38C38F99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:99:bb:63:f7:48:32:93:cc:ce:1b:5b:d2:
                    21:f5:d3:99:bc:6c:51:ef:57:15:ce:7b:0b:c2:75:
                    aa:af:7a:f0:4c:62:c7:d0:b4:a4:3a:4b:a6:e3:ed:
                    9d:43:1f:29:cf:14:47:76:ba:8d:37:46:c9:94:62:
                    8f:ca:a2:9c:44:76:57:7b:91:f5:0b:8a:8e:34:47:
                    88:52:32:e9:f2:b2:b1:e2:23:eb:2c:db:a5:d0:72:
                    ad:d3:11:85:63:ac:ac:d4:52:27:ad:96:c7:a2:9a:
                    b6:ba:31:7e:2b:d0:a5:e2:f8:77:dc:4e:d8:04:8b:
                    ce:ef:96:3c:ce:5a:ad:ad:27:fd:d6:07:b7:4a:76:
                    42:92:d2:6a:9c:da:68:24:15:2f:69:03:76:05:d6:
                    e1:33:d1:03:e1:84:78:f2:2d:2e:ba:e9:8b:34:1a:
                    d5:71:7c:8a:60:c6:10:66:05:68:c9:5a:fd:dc:4b:
                    54:93:e2:3c:bd:7c:a3:66:48:a8:eb:62:f7:38:d0:
                    ee:9d:bd:21:f3:1d:1f:5b:8b:3c:f6:e1:8d:dd:85:
                    16:7d:e4:aa:3b:c7:d7:97:95:de:cb:29:a0:69:83:
                    a9:87:4d:40:25:45:a0:bd:65:a3:55:58:4f:34:d3:
                    2f:ee:fe:e3:1f:f2:1a:83:83:b1:b3:a1:40:45:13:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5C:6E:25:0C:ED:7F:D9:2A:54:25:B8:9B:D9:AF:D3:8C:38:F9:9C
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3330303a3a2f34302d3430203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba00:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:69:49:4f:ff:58:fa:d1:6c:dd:d9:a4:ff:69:b0:94:0b:d1:
         90:98:f6:48:2a:0b:6e:55:fd:0e:e4:c2:4a:57:56:65:31:ba:
         4e:29:7b:7d:50:df:e4:fc:eb:23:29:65:53:c9:e0:33:9d:2d:
         e4:66:a7:cc:99:83:a7:bc:a0:7c:78:42:5e:a4:51:d6:b1:8f:
         c1:ee:98:f0:64:29:52:87:da:93:ed:5b:fa:10:30:85:78:c7:
         82:6a:10:a2:66:46:0c:e6:27:aa:cb:b5:15:03:b9:dc:19:5d:
         74:24:5b:a5:c1:e5:b6:48:d2:2b:92:68:66:5a:bb:a7:94:55:
         cf:5e:96:0c:af:a1:4c:ba:da:bc:75:89:57:47:0e:f5:94:5f:
         77:b3:79:80:76:27:64:d8:f6:f7:f1:eb:c4:ff:eb:38:23:d0:
         f7:53:39:09:72:71:48:66:7a:7b:8e:76:98:d4:25:43:d8:a2:
         9c:ca:ad:f9:27:3d:85:fa:fd:7e:4d:7f:8d:e4:73:a4:15:95:
         1a:9d:80:2b:7d:b7:10:bb:9c:93:56:ea:54:c7:d4:1a:b2:38:
         0c:0a:5a:12:02:1d:40:6c:7b:9c:6d:be:3d:d0:38:79:6b:51:
         c9:e2:02:9a:1c:06:b7:24:98:7a:1c:cd:35:48:c9:be:a8:56:
         ac:9e:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 03:44:59 2024 by rpki-client on console-fra.rpki-client.org