Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3230303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a3230303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          P3cLb1aYkVbXiozSN61NGY2YIBZfu9fGqP71eazSsKc=
Subject key identifier:   70:20:5F:11:13:F8:82:A5:D7:E7:60:19:C3:14:67:0F:4F:3D:33:13
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       4513A048CA7C840C9831ED20DC237661F78500FE
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3230303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 05 Mar 2024 18:09:07 +0000
ROA not before:           Tue 05 Mar 2024 18:04:07 +0000
ROA not after:            Tue 04 Mar 2025 18:09:07 +0000
asID:                     273127
IP address blocks:        2803:2450:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:13:a0:48:ca:7c:84:0c:98:31:ed:20:dc:23:76:61:f7:85:00:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Mar  5 18:04:07 2024 GMT
            Not After : Mar  4 18:09:07 2025 GMT
        Subject: CN=70205F1113F882A5D7E76019C314670F4F3D3313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:76:b1:0e:46:f1:6f:a0:76:c3:ae:57:da:
                    00:29:1f:7f:c7:d4:0d:6b:11:6a:c4:3a:4b:e3:32:
                    86:b4:1b:38:70:c7:53:72:95:06:0b:95:fb:27:a7:
                    2e:d0:be:ab:e0:2e:80:8b:2a:57:4e:ff:f3:e5:60:
                    51:b6:2f:9b:c5:ab:04:67:46:96:de:c5:2a:2c:2b:
                    c3:a6:5a:51:9a:73:85:07:7c:21:df:72:1e:d4:fc:
                    3a:e7:62:89:09:02:24:a2:f7:93:ea:22:01:3c:44:
                    78:bf:92:ee:aa:0b:8c:66:7e:a2:28:dc:ec:39:d3:
                    27:cf:7b:1d:65:f5:c2:60:db:dc:4c:6e:44:06:12:
                    73:0e:cb:00:9d:d8:cf:67:91:d4:af:cc:2a:d7:a7:
                    5c:25:0a:3d:7d:1b:84:09:b7:b5:a7:80:92:ff:b3:
                    68:16:5e:ae:54:db:55:13:ad:c5:99:f6:27:52:fe:
                    aa:46:ad:31:29:73:77:a0:c8:14:c7:fe:a9:a8:6c:
                    ab:af:c8:fa:76:08:30:5c:e3:14:7b:7c:66:c5:d4:
                    04:f5:51:0b:84:5f:0c:91:9b:f9:12:76:81:0f:e6:
                    6c:2e:fa:d8:d6:fc:2b:51:cf:ce:28:c3:2f:15:25:
                    78:24:4f:0d:ab:11:35:a6:c4:24:be:49:6c:1e:55:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:20:5F:11:13:F8:82:A5:D7:E7:60:19:C3:14:67:0F:4F:3D:33:13
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3230303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:45:9e:b5:6a:8e:1b:81:57:fd:b6:5b:80:e5:87:97:c5:34:
         fb:12:84:e8:6e:39:1c:59:56:5f:eb:f3:94:ae:07:f1:49:30:
         e0:69:e4:21:e5:52:0a:86:65:ba:38:8c:b0:d2:d4:07:09:94:
         11:07:6a:bf:88:fc:7e:2d:54:fe:4c:c1:d6:d6:53:68:71:45:
         55:37:65:07:0c:5e:c7:fc:c4:fd:7f:15:c7:c4:37:b5:43:1f:
         b3:ab:32:7c:2c:c5:81:21:5c:a0:6b:ee:7b:60:b8:0b:46:d3:
         23:14:c7:72:31:dc:93:72:2d:d2:5a:1a:71:db:fe:11:71:1a:
         0e:4f:89:96:a9:95:b5:96:b9:04:8d:70:ce:1a:88:60:1a:30:
         61:d9:02:a4:06:ac:de:e7:43:4d:2c:2e:71:d3:15:6d:ee:59:
         7e:47:60:d8:46:74:a1:25:50:41:27:8f:16:8f:e3:a4:9d:fa:
         e4:98:7d:76:b2:a6:d2:96:c3:25:d2:5a:6e:83:94:e6:4c:ae:
         90:3f:cd:47:4d:4d:32:3a:64:55:30:68:e0:59:fc:6f:ae:90:
         60:1c:c2:ac:fe:f8:be:15:15:8f:a7:8c:c1:30:67:38:f8:1a:
         74:4f:d0:36:be:8d:7c:80:3b:c1:a5:30:8d:60:29:4e:62:4a:
         70:f9:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org