Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/323830333a3965303a3a2f33322d3438203d3e20323731383838.roa
File:                     323830333a3965303a3a2f33322d3438203d3e20323731383838.roa (raw, json)
Hash identifier:          c18WxestpulHnp+0ggTq2y3wxN+bktEQvYzTXbdyOwo=
Subject key identifier:   26:7A:23:1B:98:B9:D3:79:15:65:30:13:3A:F8:29:D4:73:0F:21:8F
Certificate issuer:       /CN=A1E12285090E8FA250FB58E4DF42D3BC08A60EDD
Certificate serial:       270A8D8D5AEA1B9760F2AA2707E7E99046E6FCCD
Authority key identifier: A1:E1:22:85:09:0E:8F:A2:50:FB:58:E4:DF:42:D3:BC:08:A6:0E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/323830333a3965303a3a2f33322d3438203d3e20323731383838.roa
Signing time:             Tue 05 Mar 2024 17:42:35 +0000
ROA not before:           Tue 05 Mar 2024 17:37:35 +0000
ROA not after:            Tue 04 Mar 2025 17:42:35 +0000
asID:                     271888
IP address blocks:        2803:9e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0a:8d:8d:5a:ea:1b:97:60:f2:aa:27:07:e7:e9:90:46:e6:fc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E12285090E8FA250FB58E4DF42D3BC08A60EDD
        Validity
            Not Before: Mar  5 17:37:35 2024 GMT
            Not After : Mar  4 17:42:35 2025 GMT
        Subject: CN=267A231B98B9D379156530133AF829D4730F218F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:4a:d2:95:f2:57:ba:ae:43:9d:88:78:41:
                    b0:e4:bf:bd:16:5b:b6:03:fb:84:88:dd:01:1f:66:
                    8c:93:b8:0e:15:eb:76:fb:ad:55:16:9c:c1:bb:1b:
                    43:62:c5:1b:66:3f:26:a7:57:d5:60:9f:a3:40:e5:
                    17:71:38:b8:c7:ba:a4:18:7c:ca:f0:a9:a2:35:12:
                    90:59:9d:37:c4:dc:5a:bc:f4:a5:de:93:ad:0f:88:
                    33:c0:79:7f:5c:cf:7b:d3:66:f0:27:3f:bf:c4:b1:
                    a5:bb:0a:bc:9b:04:e8:82:b0:d7:5a:b5:fc:11:da:
                    4c:cf:61:79:3c:5c:e8:ae:34:ca:24:89:b7:db:3d:
                    2c:8e:b0:c6:c5:0e:69:9c:d8:e6:12:5c:94:76:e6:
                    c4:43:f0:27:8b:b6:98:7f:11:c1:18:4e:6b:22:ee:
                    f4:23:9e:3c:b0:ac:44:d8:46:ea:b1:77:cf:44:22:
                    7a:3a:bf:2d:7f:3b:55:89:06:9a:dd:8b:af:1b:b3:
                    66:61:f6:73:a4:d1:1c:4d:bd:5e:f8:ac:13:8b:29:
                    6e:88:0c:97:61:1a:3c:df:d8:5d:a2:3e:af:ce:2a:
                    66:bd:8c:23:a7:d3:f7:9f:82:82:7f:b7:14:f0:a8:
                    2b:ba:9e:65:1e:36:0f:00:36:60:e6:86:19:7d:2d:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:23:1B:98:B9:D3:79:15:65:30:13:3A:F8:29:D4:73:0F:21:8F
            X509v3 Authority Key Identifier:
                keyid:A1:E1:22:85:09:0E:8F:A2:50:FB:58:E4:DF:42:D3:BC:08:A6:0E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/323830333a3965303a3a2f33322d3438203d3e20323731383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:d7:d0:05:d6:19:99:e8:9e:e0:f2:f6:f9:0f:5c:81:b6:
         f2:a0:0e:5e:09:42:b7:8d:18:1e:88:4d:06:50:66:44:47:d1:
         21:9e:68:c0:7e:cc:f6:bf:49:78:4f:f6:5f:81:c0:04:b6:c8:
         f2:79:03:5e:2b:5f:23:53:9c:c5:6f:59:37:e0:40:0a:26:af:
         7b:06:b4:00:45:ba:e9:f0:d5:d7:55:66:2b:33:f8:69:55:fe:
         f2:b0:f4:15:d5:b8:3f:79:5d:cd:36:9c:9d:3a:23:67:99:9a:
         fe:04:26:b6:29:74:92:44:90:df:7c:b3:73:84:db:04:b3:79:
         10:e4:9f:1d:c0:f2:84:de:59:95:14:d6:47:b4:0d:ac:55:7d:
         e5:ab:a2:be:c1:3c:d5:56:50:de:06:2a:46:9c:75:84:8d:89:
         51:ca:57:e7:cc:2a:81:aa:21:a5:94:13:d8:2c:cf:f0:f2:f5:
         5b:6a:03:c6:d7:59:1b:af:4b:80:64:09:2f:53:d6:e3:20:10:
         c4:3b:b4:19:a7:58:9d:1b:5a:59:1d:b6:91:c7:5a:66:4c:6d:
         83:12:c7:64:af:8d:b8:d4:cb:36:c7:dc:db:82:59:8a:e9:9a:
         72:ce:66:b3:47:9a:bb:ba:5c:76:64:f0:e1:6f:60:50:e5:8a:
         58:bf:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org