Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0250F84FCF29BCB7D279EFD9ED409D7034EE47E39FD897D476BA005CA8DE5D5/0/323830333a616139303a3a2f33322d3438203d3e20323732383738.roa
File:                     323830333a616139303a3a2f33322d3438203d3e20323732383738.roa (raw, json)
Hash identifier:          YOMUHYdph8knCfIGqDi1ClCFkIdtHNms350s9pSwc8k=
Subject key identifier:   FF:74:38:6B:93:EA:BD:68:61:54:B8:74:67:6B:5F:CC:18:C9:8A:4E
Certificate issuer:       /CN=508901BD693F4B6C2D26161955B53FE570EB3FA9
Certificate serial:       24B70F5E84FCADC6DDC51F2E35A11BF236A00768
Authority key identifier: 50:89:01:BD:69:3F:4B:6C:2D:26:16:19:55:B5:3F:E5:70:EB:3F:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/508901BD693F4B6C2D26161955B53FE570EB3FA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0250F84FCF29BCB7D279EFD9ED409D7034EE47E39FD897D476BA005CA8DE5D5/0/323830333a616139303a3a2f33322d3438203d3e20323732383738.roa
Signing time:             Tue 05 Mar 2024 17:42:45 +0000
ROA not before:           Tue 05 Mar 2024 17:37:45 +0000
ROA not after:            Tue 04 Mar 2025 17:42:45 +0000
asID:                     272878
IP address blocks:        2803:aa90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0250F84FCF29BCB7D279EFD9ED409D7034EE47E39FD897D476BA005CA8DE5D5/0/508901BD693F4B6C2D26161955B53FE570EB3FA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0250F84FCF29BCB7D279EFD9ED409D7034EE47E39FD897D476BA005CA8DE5D5/0/508901BD693F4B6C2D26161955B53FE570EB3FA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/508901BD693F4B6C2D26161955B53FE570EB3FA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b7:0f:5e:84:fc:ad:c6:dd:c5:1f:2e:35:a1:1b:f2:36:a0:07:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=508901BD693F4B6C2D26161955B53FE570EB3FA9
        Validity
            Not Before: Mar  5 17:37:45 2024 GMT
            Not After : Mar  4 17:42:45 2025 GMT
        Subject: CN=FF74386B93EABD686154B874676B5FCC18C98A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:24:f8:aa:d3:bd:ce:c5:b8:d9:6a:c5:46:
                    c4:9d:58:9d:f0:3f:53:97:ab:c7:76:70:59:18:d1:
                    df:f1:94:0f:7d:a1:93:7d:cd:d6:73:21:c3:68:6c:
                    b7:98:50:4d:fe:26:00:9d:f5:c5:7f:89:c1:94:81:
                    c9:88:e1:b0:6a:b1:87:c9:d3:7d:44:03:74:f2:87:
                    c5:fd:3d:49:77:b0:89:6a:06:2c:54:8a:14:49:e1:
                    44:f9:bf:ad:15:ec:11:91:bd:ad:2f:ec:43:82:a1:
                    64:13:51:dc:1d:45:ab:e6:9b:0d:0c:66:f3:57:a2:
                    36:0d:8c:27:20:63:ff:c4:b5:02:29:2c:47:a6:9a:
                    81:56:dd:d9:d6:2a:31:18:01:77:40:23:47:ce:d9:
                    0b:a0:25:ff:27:84:5d:af:9c:90:6f:44:8d:92:cb:
                    ee:f6:01:d0:08:ce:cf:2c:fa:e0:b0:61:b7:a5:2f:
                    03:f3:d1:1c:74:b4:10:79:8c:85:a7:be:ff:f3:a1:
                    bf:55:63:72:7c:fc:08:55:5c:7e:f0:09:c5:f5:f3:
                    fe:3c:66:c5:84:41:3b:9f:99:1a:42:a9:67:5e:90:
                    58:86:0b:83:82:7e:5c:dd:83:07:ed:05:2e:ba:89:
                    94:ec:69:1f:61:ae:5d:e0:41:dd:70:c0:48:3b:ef:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:74:38:6B:93:EA:BD:68:61:54:B8:74:67:6B:5F:CC:18:C9:8A:4E
            X509v3 Authority Key Identifier:
                keyid:50:89:01:BD:69:3F:4B:6C:2D:26:16:19:55:B5:3F:E5:70:EB:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0250F84FCF29BCB7D279EFD9ED409D7034EE47E39FD897D476BA005CA8DE5D5/0/508901BD693F4B6C2D26161955B53FE570EB3FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/508901BD693F4B6C2D26161955B53FE570EB3FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0250F84FCF29BCB7D279EFD9ED409D7034EE47E39FD897D476BA005CA8DE5D5/0/323830333a616139303a3a2f33322d3438203d3e20323732383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa90::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:06:4d:76:b5:5f:eb:4f:b5:0b:d2:38:02:97:ef:66:87:c9:
         3e:15:53:a0:5b:c8:ac:ed:04:89:c8:ed:e3:9a:af:4d:c5:26:
         79:ef:de:8b:32:0e:da:75:8c:25:ca:9b:45:81:a0:1a:b0:8e:
         22:f9:3b:5a:22:66:40:c5:fe:c3:5c:d9:de:67:54:c9:d4:0c:
         f2:a2:47:0f:e7:a5:ea:e6:6b:60:3e:de:7e:57:30:c9:61:4e:
         6e:e6:60:81:4d:10:9e:91:d3:3f:bd:3a:5a:e2:0b:38:d3:3f:
         06:ce:f8:6d:b6:25:1a:df:6c:4d:46:ea:c3:70:5b:62:a8:fb:
         e7:d9:42:51:22:1e:ec:ba:43:2c:dd:6d:4c:e1:14:34:3c:10:
         fe:89:b8:f6:f5:b0:43:f2:de:7b:97:11:40:57:0e:de:6e:50:
         39:fd:eb:bd:83:7a:fe:21:4d:27:31:52:29:fc:52:7e:41:87:
         7d:c9:f3:a0:db:60:b7:97:c7:df:8f:02:69:bf:2c:c4:80:fb:
         97:75:47:cf:7f:03:3e:46:5b:71:4e:40:cc:2e:4f:7d:8f:79:
         52:13:5b:30:a2:80:e3:93:73:4b:7b:21:8f:fd:25:63:88:67:
         f7:42:d1:70:a7:9d:b7:3c:74:0d:88:01:c7:32:04:07:07:cc:
         5c:b5:a4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org