Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a313a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a313a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          YRDMdJNpnAQBx5yYaoAodAh1PXFpQT3GUnc2NNC4mE4=
Subject key identifier:   B0:9D:1C:15:02:49:A7:AC:72:46:44:F6:50:45:E1:4B:35:7D:BB:F0
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       3BD626C7B6CAF201EDB7C7F8240DC6F56A954EC1
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a313a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 05 Mar 2024 17:52:12 +0000
ROA not before:           Tue 05 Mar 2024 17:47:12 +0000
ROA not after:            Tue 04 Mar 2025 17:52:12 +0000
asID:                     271927
IP address blocks:        2803:ea10:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d6:26:c7:b6:ca:f2:01:ed:b7:c7:f8:24:0d:c6:f5:6a:95:4e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Mar  5 17:47:12 2024 GMT
            Not After : Mar  4 17:52:12 2025 GMT
        Subject: CN=B09D1C150249A7AC724644F65045E14B357DBBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:32:68:ce:d9:68:5a:8f:b8:11:85:b5:98:
                    43:1a:02:b7:fd:de:cb:b5:61:ff:ad:07:fc:be:e0:
                    5c:fb:74:69:30:bc:f5:26:42:6e:33:23:d8:28:f8:
                    7e:c3:4c:24:81:7c:b0:4f:c0:31:46:3f:f8:4f:f1:
                    1e:b8:c3:26:fb:29:55:18:46:ad:8f:98:52:5c:1e:
                    76:bc:d9:ec:db:48:1d:ca:a1:1e:2c:45:f2:82:27:
                    10:22:77:b3:64:56:83:ad:2a:25:b1:31:d6:68:ed:
                    85:79:10:3f:58:3b:a0:97:27:b5:93:a0:7c:fe:b0:
                    21:e4:10:5c:68:8a:e0:67:c9:e0:8c:3f:9f:0c:e9:
                    bb:8f:62:8a:7b:37:40:90:97:79:33:87:9b:b5:18:
                    a2:21:18:a9:fb:a1:e5:ea:6c:3b:e2:fa:54:42:a7:
                    2a:29:48:7d:5f:3f:a0:f4:df:18:1e:90:1f:84:a7:
                    a4:ed:a5:a4:16:cf:98:9f:dd:a8:6e:22:5f:b0:79:
                    4f:a9:bc:86:56:cb:db:da:0d:e3:ae:65:2b:6e:2a:
                    f4:69:76:10:49:db:cf:2c:28:a5:2c:7e:2c:96:4f:
                    29:32:34:e0:66:cc:7f:8f:d0:32:89:8f:7a:f4:08:
                    1f:6f:a6:d3:cf:00:90:96:0b:8b:11:46:d2:cc:ac:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:1C:15:02:49:A7:AC:72:46:44:F6:50:45:E1:4B:35:7D:BB:F0
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a313a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:c6:31:1f:5f:97:21:72:12:57:6f:4a:f6:53:8f:a8:8a:
         8f:a7:cf:a2:cc:7e:d2:92:c8:d5:da:4c:29:f9:2e:5d:0b:c6:
         c6:00:8a:a5:de:d2:02:d2:f8:9f:80:41:70:35:38:3d:52:01:
         77:fd:a1:94:ab:b6:e8:72:5c:05:cb:b1:b4:e8:bc:d6:59:20:
         18:83:35:86:26:37:34:e5:91:85:f6:d5:05:49:12:ed:a9:df:
         c8:5e:47:9f:c4:12:a5:51:2b:86:dc:8c:ee:7f:82:bf:24:08:
         59:5d:23:64:79:c6:76:6c:ea:44:b3:91:e3:a3:a9:81:4f:86:
         f0:1c:f7:54:c9:90:fb:6a:d5:9f:95:c9:f8:0e:72:b3:92:43:
         f1:5c:72:fc:9e:e5:eb:05:44:f1:66:59:fa:2a:9f:43:d6:b7:
         e2:a5:d6:42:ee:25:f5:a1:29:7c:ea:50:d8:c8:dc:66:3a:83:
         68:be:01:2f:38:0c:8d:a5:96:ea:9a:58:32:00:fe:b2:9b:3b:
         a6:1d:c8:d5:2f:0f:5a:b6:50:53:66:da:d1:e2:d4:95:2e:e9:
         41:e3:9d:b9:2a:1c:e7:06:af:f9:ce:16:c5:32:af:80:30:de:
         eb:52:35:c6:9b:95:b3:e2:73:82:89:6e:e6:67:19:af:ca:5d:
         96:9f:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org