Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          8XRsgs2NQDsHYHR9K8O82xXpRB/2F3uFgU+nlNUQsxM=
Subject key identifier:   76:4D:56:16:8E:8B:0C:AA:95:ED:7F:6C:51:CC:7F:6B:2C:C0:AE:D5
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       7CE8B6ED0B6CB2A61041A14297D2D587E122400A
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 05 Mar 2024 17:52:10 +0000
ROA not before:           Tue 05 Mar 2024 17:47:10 +0000
ROA not after:            Tue 04 Mar 2025 17:52:10 +0000
asID:                     271927
IP address blocks:        2803:ea10:1aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e8:b6:ed:0b:6c:b2:a6:10:41:a1:42:97:d2:d5:87:e1:22:40:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Mar  5 17:47:10 2024 GMT
            Not After : Mar  4 17:52:10 2025 GMT
        Subject: CN=764D56168E8B0CAA95ED7F6C51CC7F6B2CC0AED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:b9:34:57:98:ce:e6:9f:72:70:9b:6f:bc:
                    61:3f:81:1c:82:10:05:0d:98:8f:50:ce:4c:0e:63:
                    62:5d:67:5b:a0:10:6d:44:99:d9:8b:5f:dd:56:7e:
                    57:6d:dc:94:ea:30:35:21:3d:ad:e2:b7:b8:a6:f8:
                    41:92:d5:88:62:b2:34:21:d6:91:67:fa:ee:74:bb:
                    b1:30:eb:d9:31:72:28:46:b7:89:69:70:59:bb:c7:
                    ea:a6:87:1f:62:b2:3e:df:e6:22:7f:6b:46:df:4a:
                    4f:e0:38:a8:1c:27:91:d4:d1:86:3c:53:7d:90:f9:
                    2f:23:48:f6:a4:6d:25:79:07:36:92:c0:ed:a7:bb:
                    0c:61:92:0c:d4:42:eb:ce:3a:4f:84:4c:d7:ba:85:
                    c6:de:dc:d1:19:f8:25:5d:b7:42:5d:be:5a:dc:1b:
                    91:eb:50:94:be:5e:ae:0d:c7:2a:2e:18:62:81:b9:
                    f8:99:c3:2f:67:c8:a2:1c:1a:3c:b2:90:32:cd:3c:
                    ca:45:c8:d3:69:c7:84:38:2e:0b:47:93:28:f2:df:
                    47:a9:a5:d4:3e:4b:7e:14:d0:5d:ec:93:2a:46:b5:
                    39:d8:2f:65:b0:43:bc:25:0e:55:21:a7:9d:73:22:
                    dc:d0:d1:82:34:e9:f7:f3:b6:26:26:ce:c9:2b:4e:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4D:56:16:8E:8B:0C:AA:95:ED:7F:6C:51:CC:7F:6B:2C:C0:AE:D5
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:1aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:ad:3f:b8:68:0c:d6:6a:b5:21:49:e4:36:83:4b:9c:a6:e9:
         79:03:64:03:f5:fb:58:8a:b2:50:83:d1:c0:8f:24:ee:fb:9b:
         59:cc:25:0f:c4:8d:b4:bf:09:46:8f:d1:d5:ea:df:1b:49:f6:
         01:4d:db:6b:77:a9:41:d0:9c:52:f6:52:6a:18:91:cc:d0:36:
         78:54:2f:0c:2a:2c:9a:78:4a:40:3a:a8:84:3c:67:f4:2a:0d:
         ca:93:d8:00:54:60:e4:db:97:a4:c7:44:08:b4:51:1e:c6:f5:
         11:96:1b:dd:b0:0d:79:3f:87:c8:84:ea:63:38:6e:c8:76:59:
         42:79:89:1d:80:70:25:d3:79:44:cc:49:49:07:50:5c:42:54:
         f4:17:ff:e8:27:30:99:66:a3:84:ff:9d:7e:76:30:07:ef:6e:
         75:41:e5:cd:11:f3:94:f7:b6:f1:73:bb:e1:89:ab:a3:55:44:
         44:d9:11:3f:bd:a3:68:c9:46:df:03:17:22:07:ae:9c:63:19:
         46:57:5e:50:29:c8:37:d1:fd:2b:61:3f:30:7d:3f:02:48:b3:
         59:6e:68:c2:8f:50:8a:72:8d:0a:13:2e:e4:27:e5:f5:1b:e6:
         c0:5b:2c:4c:59:44:e3:93:84:cb:46:86:a6:b2:96:3a:ee:ca:
         61:bd:33:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:46:18 2024 by rpki-client on console-fra.rpki-client.org