Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/323830333a3265303a3a2f33322d3438203d3e20323639393137.roa
File:                     323830333a3265303a3a2f33322d3438203d3e20323639393137.roa (raw, json)
Hash identifier:          Ko1xS7oLRxFcbeV0ZZBixOQ0UYFkCS3JgNTyfLvyafE=
Subject key identifier:   FD:A1:76:61:21:F7:BD:BA:D2:70:AC:21:5C:9F:5D:7E:E3:6A:EE:6D
Certificate issuer:       /CN=BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06
Certificate serial:       2EF007326B1DF5B5B2067ECCC6FB90BB93AB1770
Authority key identifier: BB:28:B6:37:F6:EE:7E:D7:74:48:EE:A8:BD:B8:44:1F:DD:54:DB:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/323830333a3265303a3a2f33322d3438203d3e20323639393137.roa
Signing time:             Tue 05 Mar 2024 18:07:27 +0000
ROA not before:           Tue 05 Mar 2024 18:02:27 +0000
ROA not after:            Tue 04 Mar 2025 18:07:27 +0000
asID:                     269917
IP address blocks:        2803:2e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f0:07:32:6b:1d:f5:b5:b2:06:7e:cc:c6:fb:90:bb:93:ab:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06
        Validity
            Not Before: Mar  5 18:02:27 2024 GMT
            Not After : Mar  4 18:07:27 2025 GMT
        Subject: CN=FDA1766121F7BDBAD270AC215C9F5D7EE36AEE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:ce:3c:4d:1b:c3:54:4f:cc:67:e6:97:7b:
                    cb:d3:c1:e1:5e:7e:06:c8:1a:50:7f:ec:bf:05:14:
                    b4:56:a7:5e:a8:8d:24:95:40:95:d8:33:33:f2:e4:
                    01:8d:85:62:bb:3e:7d:a4:d4:f5:0a:aa:bb:02:b8:
                    42:65:20:27:1c:30:98:88:ce:29:08:3d:8e:86:fa:
                    bb:6b:c9:5d:8a:7a:b2:cf:fa:f8:cb:77:71:ff:9a:
                    5e:64:2d:47:d3:f3:74:22:a0:79:58:5c:8d:21:4d:
                    fe:87:f1:73:75:82:2a:93:6e:0d:77:51:1a:45:99:
                    82:ad:b9:f2:72:8a:81:10:35:44:22:2c:81:32:96:
                    8c:27:68:68:9d:a7:89:db:e0:12:09:a2:42:00:e8:
                    0d:57:27:86:be:2d:39:c4:84:48:4b:ce:92:47:9b:
                    e4:94:e3:68:14:65:55:67:b7:67:77:bc:d8:d7:9e:
                    89:66:9a:ea:fe:59:fa:c3:e5:ab:d7:ea:26:a1:a3:
                    aa:c8:d2:1e:88:8a:26:54:24:85:04:26:f8:b9:43:
                    5a:b7:a3:0f:c2:dd:2a:b1:70:e6:2e:ab:12:8d:b5:
                    89:b4:e0:c5:e2:f3:c8:af:59:45:db:1a:ca:7d:7b:
                    cf:ff:ac:94:24:88:41:68:2c:59:95:04:77:df:93:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A1:76:61:21:F7:BD:BA:D2:70:AC:21:5C:9F:5D:7E:E3:6A:EE:6D
            X509v3 Authority Key Identifier:
                keyid:BB:28:B6:37:F6:EE:7E:D7:74:48:EE:A8:BD:B8:44:1F:DD:54:DB:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/323830333a3265303a3a2f33322d3438203d3e20323639393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:65:8e:03:d3:fe:9e:81:28:12:ab:40:46:25:4b:63:a4:e7:
         6f:39:80:86:10:b9:c0:a0:07:da:ed:af:fd:b1:01:59:75:c9:
         17:ab:5e:99:22:ad:05:cd:5a:22:0e:5b:f3:b3:3b:df:07:14:
         77:20:5e:6b:f2:2b:a5:e2:12:32:91:9d:26:63:4f:2b:cc:9a:
         ed:57:f2:6f:45:54:74:15:91:da:16:4a:fe:42:0f:77:4f:8c:
         c5:37:72:3d:09:25:42:a9:c0:1d:a2:ea:0e:71:58:3e:c9:01:
         54:e5:50:47:61:8e:3b:89:6f:f0:f6:cb:41:aa:cd:22:9e:9c:
         ea:fd:d0:9d:8f:74:ee:83:77:68:ec:9f:6c:5d:b8:7f:5c:6d:
         81:76:f9:12:f1:c2:20:4d:65:3c:70:1a:a5:0f:7e:87:3e:0c:
         c9:2e:37:1c:74:a6:dd:79:37:3e:27:59:6c:c5:c9:a2:d4:7e:
         65:8d:ee:4b:dd:48:e5:39:dc:4d:ee:d1:9d:a3:46:39:15:17:
         2a:31:91:1d:bd:96:97:6c:27:c0:f6:5e:73:69:b2:17:37:24:
         94:67:1a:2f:e3:d9:bf:4c:67:e4:ae:68:c0:a5:08:6a:ef:6f:
         8f:a3:d3:da:58:8e:8d:ff:7e:c6:13:e6:d0:18:a5:5c:03:b1:
         02:d0:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:44:39 2024 by rpki-client on console-fra.rpki-client.org