Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3430303a3a2f33392d3430203d3e203532323836.roa
File:                     323830333a626130303a3430303a3a2f33392d3430203d3e203532323836.roa (raw, json)
Hash identifier:          vEiB3BrLPJRJG4P0ukK8A/rPIaJ8ACAvpsff+HS1nIk=
Subject key identifier:   69:4C:E6:7B:AB:44:A8:6B:9C:2B:00:82:20:2B:11:CC:85:21:3E:30
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       4783E53B45FCD9876B2CE3FC735CB344A1BCAC2E
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3430303a3a2f33392d3430203d3e203532323836.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     52286
IP address blocks:        2803:ba00:400::/39 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:83:e5:3b:45:fc:d9:87:6b:2c:e3:fc:73:5c:b3:44:a1:bc:ac:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=694CE67BAB44A86B9C2B0082202B11CC85213E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:c5:f4:da:40:33:36:a9:a0:2f:54:ad:e3:
                    ce:58:c2:cc:08:a6:3f:0e:69:e9:51:6c:a1:71:d3:
                    70:8b:2e:65:4b:7a:38:ef:11:0e:bc:88:62:34:12:
                    c4:a7:0e:6c:d1:01:24:c9:51:e8:e4:19:f0:30:bd:
                    1b:b9:98:89:e8:fd:49:44:d4:84:49:31:a9:85:8b:
                    e7:3c:48:20:8b:57:15:29:3a:7a:b9:21:dd:61:92:
                    e1:79:1d:b8:a0:a1:52:1a:6e:d4:6f:b7:22:ed:5d:
                    fd:5c:a3:2e:0e:60:79:32:2a:6f:74:ba:d2:cf:f7:
                    48:d4:54:dc:38:1f:57:de:43:68:6b:a9:39:f0:85:
                    00:23:07:fd:1b:22:53:bf:d8:2b:15:fa:a8:2c:4b:
                    ff:0a:af:2d:7f:ef:a7:78:c3:14:c0:90:ed:ce:7c:
                    fa:76:68:82:16:bb:ab:54:62:46:2e:85:69:5b:43:
                    f0:65:d6:a7:b4:5f:fe:8f:be:84:b9:0f:97:16:7f:
                    77:cc:0e:c1:c5:2c:e0:a7:08:a3:9c:a3:d8:52:88:
                    f4:fa:cc:cb:dd:66:d4:40:50:2b:48:d7:9d:bc:23:
                    5c:ef:d1:f1:ca:51:cf:19:59:5b:65:03:a2:82:df:
                    22:26:61:d5:46:fe:e1:be:36:3f:3b:17:29:2f:fd:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4C:E6:7B:AB:44:A8:6B:9C:2B:00:82:20:2B:11:CC:85:21:3E:30
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3430303a3a2f33392d3430203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba00:400::/39

    Signature Algorithm: sha256WithRSAEncryption
         8d:5c:6d:00:5a:86:43:8a:eb:f5:68:d6:d1:b0:d4:7e:7c:36:
         b7:64:78:b7:bb:f9:d4:cf:95:37:b6:52:0d:3f:41:99:16:99:
         b6:3f:be:cd:1f:e8:3f:ca:b5:c6:a8:a1:19:f4:e0:3e:1a:23:
         cf:eb:5c:09:4d:0f:33:3e:76:8c:db:81:27:5d:84:b7:3b:66:
         dc:22:e1:45:03:33:15:5a:b5:bd:b5:04:36:9e:92:c5:82:fa:
         e1:b1:dc:d5:1f:f7:cb:11:81:d2:7d:23:20:ce:c6:31:08:90:
         a6:da:c2:0f:9b:c5:94:72:d3:a4:b9:20:1c:19:5f:eb:ee:aa:
         eb:60:fe:97:3a:c8:92:0c:65:1c:92:d9:20:15:61:a7:a2:8f:
         ff:14:08:0d:d1:e5:ce:3a:aa:9c:c1:b0:c2:98:78:5b:9d:dc:
         48:1c:e3:c4:05:da:d4:34:87:48:7b:af:99:5c:4c:14:26:b7:
         62:5d:7c:49:6a:56:76:c5:e4:70:e0:98:1f:7c:55:8f:de:e8:
         7e:e9:18:55:bd:63:24:df:ff:aa:91:21:66:00:d2:21:02:7f:
         02:f6:cd:4a:a8:72:b8:51:19:f0:0e:ac:93:3a:e3:43:f4:34:
         a7:db:cf:58:dd:49:d8:eb:eb:ea:78:cc:13:e9:19:6d:d4:2b:
         ca:86:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org