Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa
File:                     323830333a366432303a3a2f33322d3438203d3e20323636373032.roa (raw, json)
Hash identifier:          j69WezR4oTL35gGhSh8ON+eshWD244sOnmPzbeBaMeE=
Subject key identifier:   EF:50:6C:C2:A9:F8:CA:49:29:5D:00:55:3F:1C:09:7B:54:71:B4:22
Certificate issuer:       /CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
Certificate serial:       15B62FEFE096D4003357CB48F7E8D9624B04711B
Authority key identifier: 27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa
Signing time:             Tue 05 Mar 2024 18:23:39 +0000
ROA not before:           Tue 05 Mar 2024 18:18:39 +0000
ROA not after:            Tue 04 Mar 2025 18:23:39 +0000
asID:                     266702
IP address blocks:        2803:6d20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b6:2f:ef:e0:96:d4:00:33:57:cb:48:f7:e8:d9:62:4b:04:71:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
        Validity
            Not Before: Mar  5 18:18:39 2024 GMT
            Not After : Mar  4 18:23:39 2025 GMT
        Subject: CN=EF506CC2A9F8CA49295D00553F1C097B5471B422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:9c:04:91:a8:4d:10:b8:c0:60:d3:b6:4c:
                    bc:26:fd:f1:de:85:30:fa:ae:c5:0f:de:fa:37:70:
                    a7:f2:f2:3d:f9:15:9e:8e:f0:bc:49:34:f2:3f:a3:
                    19:98:b1:ac:41:56:8b:1a:96:f4:53:2f:32:91:96:
                    29:75:08:79:51:f2:80:8c:03:16:5f:55:81:58:09:
                    b3:2b:09:86:83:28:b5:26:78:d9:ff:e2:eb:b3:5a:
                    a6:be:71:92:0b:e4:01:1f:59:be:c7:e8:51:91:c9:
                    e1:c7:68:4c:3d:54:59:f7:82:15:bf:73:08:26:54:
                    43:85:a6:40:59:4e:47:4b:f7:9c:91:f9:d3:38:8a:
                    19:49:e0:5b:0f:0a:fc:d1:0a:0e:dd:e1:13:9e:64:
                    17:5c:e6:6e:d1:02:6c:c8:e8:e3:f8:e3:1d:f8:20:
                    07:bb:e8:4f:a6:de:15:c8:53:31:e7:14:ab:e2:a3:
                    92:da:11:22:4d:89:ce:65:b5:1e:19:d8:56:22:1e:
                    56:84:b2:d1:1b:e6:10:b2:cb:60:93:66:4e:9f:cb:
                    e2:0b:4e:bb:ba:ed:b8:12:d3:05:20:6e:51:21:e2:
                    3e:59:5b:46:ac:45:63:e1:1b:a6:8f:42:3d:75:8e:
                    42:6d:17:5f:36:87:ba:fb:eb:e7:3c:25:af:50:4d:
                    f6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:6C:C2:A9:F8:CA:49:29:5D:00:55:3F:1C:09:7B:54:71:B4:22
            X509v3 Authority Key Identifier:
                keyid:27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/323830333a366432303a3a2f33322d3438203d3e20323636373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:fc:23:af:aa:70:b1:05:5f:29:7a:84:58:9e:67:ca:19:
         75:78:0c:4a:b9:11:32:8f:4e:49:55:9a:7a:e5:0f:83:82:75:
         47:a7:d8:27:0d:2d:74:22:e0:26:30:ce:05:01:1f:86:11:75:
         ed:20:ce:60:87:45:61:01:8f:d9:8f:85:4a:2c:fc:4f:65:05:
         8d:6b:42:4c:fa:67:c4:90:10:8e:05:34:d5:2b:95:da:07:2f:
         94:28:9f:1b:60:ec:ae:2e:4e:e9:27:c5:09:8f:ab:d8:81:79:
         1a:cd:80:40:59:9d:e0:f9:41:7c:1d:0f:bc:1f:2f:32:5d:5f:
         de:e0:51:46:53:66:4f:1a:2c:52:40:19:77:57:c9:e9:ce:25:
         7d:ad:4d:9f:ba:24:9e:ce:20:a3:c5:e3:db:e8:cf:6a:d8:8f:
         b0:18:f3:3f:c5:1c:44:fc:e9:9c:11:ca:81:95:eb:a7:07:0a:
         37:f4:74:bf:4c:61:38:87:e4:76:ba:57:f9:90:ef:5b:1e:6c:
         ce:9e:d8:ad:f0:37:24:14:be:b6:40:fa:1b:00:1f:6e:bb:6e:
         80:53:dd:22:88:ec:e6:7a:e2:7b:7f:90:e9:1a:2d:91:6d:4a:
         30:1c:d0:5f:88:fe:85:42:d0:b7:66:8f:f4:79:f3:52:2a:e4:
         74:95:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org