Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/323830333a656239303a3a2f33322d3438203d3e20323733303433.roa
File:                     323830333a656239303a3a2f33322d3438203d3e20323733303433.roa (raw, json)
Hash identifier:          C1GsHsUQZ3RkM2JNU5zExlMcpO0GU1EmkDt2QefEHIY=
Subject key identifier:   1A:82:3B:69:3F:F3:37:77:17:98:07:31:B9:D8:63:04:05:66:84:EB
Certificate issuer:       /CN=EA87016EC1BFCAE28788DCAC64E1F45D87C274C9
Certificate serial:       42440B071DA3E416EE79F4C3D2C88790C27CB50E
Authority key identifier: EA:87:01:6E:C1:BF:CA:E2:87:88:DC:AC:64:E1:F4:5D:87:C2:74:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/323830333a656239303a3a2f33322d3438203d3e20323733303433.roa
Signing time:             Thu 23 May 2024 01:40:00 +0000
ROA not before:           Thu 23 May 2024 01:35:00 +0000
ROA not after:            Thu 22 May 2025 01:40:00 +0000
asID:                     273043
IP address blocks:        2803:eb90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:44:0b:07:1d:a3:e4:16:ee:79:f4:c3:d2:c8:87:90:c2:7c:b5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA87016EC1BFCAE28788DCAC64E1F45D87C274C9
        Validity
            Not Before: May 23 01:35:00 2024 GMT
            Not After : May 22 01:40:00 2025 GMT
        Subject: CN=1A823B693FF3377717980731B9D86304056684EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:48:c2:1b:8e:b9:ca:b3:a4:3f:68:33:bd:
                    50:90:e4:ed:3c:4b:6f:a2:3e:34:66:52:2e:16:37:
                    e2:81:75:3e:06:df:de:8a:78:74:6a:4b:46:6b:4b:
                    41:e7:20:2b:a4:39:af:fc:f5:40:02:f2:c7:59:68:
                    31:3b:81:a9:46:2c:91:10:0d:9e:51:9b:2f:c2:11:
                    c5:1b:2d:d9:ea:a5:64:83:b7:54:ce:b6:90:c7:c9:
                    07:19:5e:e0:15:9e:73:a5:bf:8b:8c:c4:86:61:67:
                    ac:3a:3b:dd:59:3e:7e:a4:61:90:f8:f8:a2:ca:71:
                    2d:e2:cf:8a:75:a4:fc:ab:4b:f1:2c:0b:32:e0:a2:
                    3d:59:1f:e9:ed:50:2d:3c:79:ab:d0:2d:5e:de:47:
                    02:15:23:58:b9:f0:e4:04:43:4c:fa:a0:5c:cf:45:
                    ef:ed:89:9c:64:5e:e0:1f:8a:5d:2f:2e:f6:b4:bf:
                    f6:2f:d1:73:69:82:da:fe:03:6a:91:fd:55:1e:89:
                    61:65:2b:b4:7e:36:b2:91:39:9b:cb:06:50:01:39:
                    10:6e:83:0b:d9:1e:00:94:07:c1:5c:e1:93:8c:e7:
                    89:c9:89:88:7b:2b:ce:7a:81:fc:ec:6d:bd:dc:a4:
                    1a:d1:e3:8e:59:72:00:1b:23:59:23:4f:cf:9c:96:
                    59:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:82:3B:69:3F:F3:37:77:17:98:07:31:B9:D8:63:04:05:66:84:EB
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:6E:C1:BF:CA:E2:87:88:DC:AC:64:E1:F4:5D:87:C2:74:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/323830333a656239303a3a2f33322d3438203d3e20323733303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb90::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:43:78:b2:7b:3e:48:65:31:94:83:08:d7:0a:96:b5:2f:
         cd:ca:c6:b7:e9:9b:63:da:b6:29:78:4c:cc:52:5e:88:4b:e9:
         60:4e:54:0c:56:13:0a:2e:a7:f7:38:68:1e:3b:f9:cf:2a:f3:
         50:be:a3:31:89:1a:1f:7d:5d:71:92:70:90:e5:31:f5:74:19:
         60:a2:fc:de:bd:42:c6:6b:27:b9:73:93:29:09:ac:7d:b8:d1:
         2d:13:f2:d2:6e:05:ee:02:77:00:ff:64:d0:e1:3b:1f:eb:fb:
         cf:ed:1a:cc:8b:dd:bf:04:cc:1e:c9:92:5c:94:c7:e9:6b:f6:
         d5:e4:c8:50:b8:7d:76:36:88:e3:43:ea:5f:90:7c:95:0e:07:
         81:a5:ad:ca:52:ab:c2:fa:9c:5d:a6:e4:0f:c0:e7:f0:24:4a:
         2d:cb:d7:63:a7:01:e0:83:4e:d2:11:7d:80:cf:1d:a4:00:88:
         43:67:28:d8:a6:ba:71:91:12:ff:17:b4:9a:aa:88:64:5c:ed:
         2c:c5:e8:2b:85:a1:4b:e6:45:f9:0e:d6:f8:1b:5a:4b:df:c3:
         61:90:27:d0:31:0f:94:05:65:f8:3c:0a:67:e9:e3:bc:da:15:
         ef:0a:b1:ec:20:40:67:12:83:38:80:b7:44:1b:17:2c:5d:21:
         e6:01:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org