Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a323a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a323a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          ABoWMW7gRGmzxJRv0WdSz71arpa/X+bJr7Kggy/CmEU=
Subject key identifier:   EE:54:8A:74:E0:37:A4:5E:16:9B:3C:5D:F4:8A:E9:44:C5:C3:8D:7B
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       7567E06144789DCC96142C998C93A6091F7D814E
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a323a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 05 Mar 2024 17:52:10 +0000
ROA not before:           Tue 05 Mar 2024 17:47:10 +0000
ROA not after:            Tue 04 Mar 2025 17:52:10 +0000
asID:                     271927
IP address blocks:        2803:ea10:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:67:e0:61:44:78:9d:cc:96:14:2c:99:8c:93:a6:09:1f:7d:81:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Mar  5 17:47:10 2024 GMT
            Not After : Mar  4 17:52:10 2025 GMT
        Subject: CN=EE548A74E037A45E169B3C5DF48AE944C5C38D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:4b:90:20:fa:a3:05:89:88:69:39:4f:8a:
                    cf:cf:f9:b7:79:30:06:2a:96:dd:f6:3f:6d:cd:1a:
                    43:cc:1a:23:a3:56:56:eb:8c:1c:84:ad:14:ca:9f:
                    88:a3:7e:18:d8:60:b7:89:da:fb:7f:e2:99:fe:d2:
                    39:03:cc:69:98:b9:b0:35:43:08:df:0e:da:79:6c:
                    f7:ee:18:8e:25:ca:2c:6d:64:80:17:25:23:c9:b0:
                    2e:f6:09:ba:42:54:fb:1d:8e:f6:ca:9e:63:24:e5:
                    88:7a:a8:e8:37:85:a7:ae:b8:4a:63:75:40:f3:2c:
                    a8:a2:22:19:55:be:b5:96:db:a7:8a:01:8b:7b:2d:
                    cd:d4:ac:9d:ba:78:e7:2a:fb:c0:d4:eb:80:d2:de:
                    36:3c:d7:57:a3:11:eb:a3:c1:b9:00:42:ae:d4:4c:
                    0f:50:f7:2d:fe:d1:40:a1:ee:ac:7e:85:bd:4c:2e:
                    ab:ba:96:4a:b0:46:b9:be:aa:2d:8c:ca:b9:95:d2:
                    47:33:dd:59:25:ea:cb:4b:76:f1:d2:98:bc:58:12:
                    f4:59:87:4e:83:1b:f6:29:0b:5b:3b:fe:a1:e2:cf:
                    de:94:1a:cc:97:18:3a:7e:5a:8a:f6:57:e6:54:2d:
                    45:83:20:1d:d8:87:6f:b2:d8:b7:27:26:95:d6:4f:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:54:8A:74:E0:37:A4:5E:16:9B:3C:5D:F4:8A:E9:44:C5:C3:8D:7B
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a323a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:60:bb:b7:6d:6e:1a:97:6f:35:4e:d6:30:96:44:67:19:
         a1:f4:2d:9f:98:ea:5f:ed:e3:e8:1d:97:eb:51:c3:a1:2c:a9:
         3a:bf:1f:97:d6:d6:75:de:db:11:88:1c:40:91:45:a3:36:76:
         fe:ca:f5:62:6b:74:a9:75:74:b1:3d:83:be:fc:0f:7e:b3:7f:
         8f:77:25:e7:72:81:70:de:44:81:7a:20:f6:88:41:37:a9:ee:
         ec:0e:62:0d:fc:48:52:43:80:4b:ba:d3:df:b5:05:69:f6:20:
         fd:1d:28:17:c1:92:2c:cc:7e:2b:15:eb:8b:1c:69:d7:76:15:
         1c:44:b3:2d:95:7f:05:b3:db:14:2d:b7:56:0c:1b:0d:7f:f3:
         05:85:63:64:2a:cc:37:f8:70:9b:93:a9:9d:83:dd:c1:1a:28:
         d5:c7:1e:34:1e:fd:64:35:d3:f1:72:25:27:65:9a:74:a4:52:
         37:e4:9a:de:c4:f2:fa:cb:39:58:c8:9b:65:51:6f:44:89:74:
         c3:5f:b0:b5:87:88:f5:d6:0e:f1:df:ba:95:01:67:79:06:5e:
         e3:0a:e3:ac:3d:25:8d:98:34:26:ab:fe:2f:30:3b:34:73:53:
         99:77:a3:ee:99:00:c3:ce:92:f4:f3:8e:28:34:07:82:21:03:
         79:e1:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org