Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/323830333a353865303a3a2f33322d3334203d3e20323639383738.roa
File:                     323830333a353865303a3a2f33322d3334203d3e20323639383738.roa (raw, json)
Hash identifier:          sYNRR4rB4ywsBng6UTGvAHlFR+n7ICFdoQg5Lf3Z2Sw=
Subject key identifier:   71:08:A8:87:F9:B9:B1:02:6D:1F:B2:DA:93:E7:47:9A:78:A8:75:C7
Certificate issuer:       /CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
Certificate serial:       39444191B8897520695A403F132FF2430AF37CEA
Authority key identifier: 0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/323830333a353865303a3a2f33322d3334203d3e20323639383738.roa
Signing time:             Tue 05 Mar 2024 17:46:59 +0000
ROA not before:           Tue 05 Mar 2024 17:41:59 +0000
ROA not after:            Tue 04 Mar 2025 17:46:59 +0000
asID:                     269878
IP address blocks:        2803:58e0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:44:41:91:b8:89:75:20:69:5a:40:3f:13:2f:f2:43:0a:f3:7c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
        Validity
            Not Before: Mar  5 17:41:59 2024 GMT
            Not After : Mar  4 17:46:59 2025 GMT
        Subject: CN=7108A887F9B9B1026D1FB2DA93E7479A78A875C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:bd:89:8c:a1:d3:77:cd:83:76:d8:78:08:
                    4f:65:33:cd:3a:54:00:6f:e7:4f:38:b4:83:e4:66:
                    91:9e:63:18:c6:07:6b:48:8c:7a:27:ef:41:ba:f9:
                    fe:4e:96:44:dd:9d:21:c3:f1:c8:16:db:6d:10:29:
                    b5:84:b8:2a:4a:83:0f:83:bc:d6:de:a8:2c:ea:0b:
                    f7:02:98:f4:53:10:d8:1f:86:c8:25:1e:bf:c5:50:
                    a0:c2:fb:2f:de:26:88:8a:5c:b7:a1:50:8e:bf:d6:
                    8c:4f:ca:11:b3:99:5e:c9:9b:9f:2e:e7:93:c1:3b:
                    13:b6:79:62:89:d9:7d:91:34:51:3e:25:55:00:ef:
                    28:50:4e:f9:09:af:c7:28:cd:6b:c3:71:6e:da:2d:
                    46:bf:2d:68:45:6f:4b:55:58:52:b9:24:dd:54:49:
                    3b:78:5e:d2:e0:e0:1f:39:f7:77:5e:80:b7:14:42:
                    de:25:21:1e:f2:e4:93:ba:1c:0e:70:89:e7:9d:2e:
                    c0:2b:f0:ea:60:c7:ba:35:b9:b2:c3:4e:da:d5:b0:
                    b1:38:29:7e:0b:c2:4d:d8:87:73:65:7d:fc:d3:3d:
                    d1:ec:14:08:ec:f1:29:99:6a:52:e7:85:f3:e8:80:
                    73:33:47:69:47:37:21:a3:ca:04:01:1f:05:fd:0c:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:A8:87:F9:B9:B1:02:6D:1F:B2:DA:93:E7:47:9A:78:A8:75:C7
            X509v3 Authority Key Identifier:
                keyid:0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/323830333a353865303a3a2f33322d3334203d3e20323639383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:85:60:ce:89:c3:8c:80:fc:85:d8:e0:90:3f:9c:e3:bd:
         35:02:91:64:d6:d4:49:ca:18:27:f1:ec:b9:e3:52:66:65:f8:
         fd:22:87:69:e1:f5:42:e0:61:f0:3c:bc:d3:bc:fa:22:a3:e4:
         4e:f9:d6:5d:88:e1:b2:93:a9:8c:a4:20:f8:c4:f7:7b:71:2f:
         95:de:18:19:68:df:e9:f1:8f:85:db:4a:de:04:93:1a:3c:78:
         17:2e:9b:4a:57:3d:5c:85:3b:d8:77:14:ad:05:25:a3:01:73:
         1f:be:f0:83:e2:3d:42:15:f9:aa:bc:04:df:38:5b:c8:b0:b2:
         2c:98:2a:74:4c:34:df:be:88:80:53:43:12:52:58:fd:37:39:
         dd:d9:6b:9c:69:26:57:15:b7:b4:08:cf:75:13:6e:45:9e:7a:
         4b:b4:3a:b7:6a:d7:66:5c:8e:0d:3c:bc:19:d2:24:9c:db:a7:
         71:38:73:8d:4a:67:f4:c0:a7:b2:63:b2:80:2a:f5:ad:40:2e:
         cf:5b:8d:19:9b:d1:0e:be:54:52:71:73:3f:70:17:8f:31:7e:
         54:ab:6b:ba:98:41:4e:83:85:c8:cb:e8:9f:54:36:ca:cf:37:
         6b:58:62:dd:58:c2:c5:e5:19:b6:73:37:3f:34:2e:b5:27:a4:
         f6:6d:d0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org