Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3330303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a3330303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          Hj3BPh3zbLdPEND0OPL9CSnrws6sw+XV4XTgBqDKyuo=
Subject key identifier:   8F:6D:0E:3B:12:9A:A1:B1:99:B5:3D:27:3A:CE:58:31:C8:C1:0B:5C
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       36E4675CA672DBD0CAACB596DA7A21952830BBA9
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3330303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 05 Mar 2024 18:09:08 +0000
ROA not before:           Tue 05 Mar 2024 18:04:08 +0000
ROA not after:            Tue 04 Mar 2025 18:09:08 +0000
asID:                     273127
IP address blocks:        2803:2450:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e4:67:5c:a6:72:db:d0:ca:ac:b5:96:da:7a:21:95:28:30:bb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Mar  5 18:04:08 2024 GMT
            Not After : Mar  4 18:09:08 2025 GMT
        Subject: CN=8F6D0E3B129AA1B199B53D273ACE5831C8C10B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:94:77:3b:e1:c2:32:02:08:4a:db:9d:1b:
                    c2:28:51:91:53:49:85:3c:55:20:09:55:f7:87:ba:
                    0d:06:a3:df:a4:3f:7e:12:25:17:00:5e:6c:fa:2f:
                    87:8e:90:3c:e8:cb:01:bf:57:f4:50:dc:15:09:b5:
                    d6:d4:3c:70:c9:f2:24:91:39:07:27:25:1f:35:4a:
                    3a:a1:45:11:23:e8:44:8a:a4:c0:e0:74:3b:06:72:
                    ee:e4:0e:cf:49:ae:fe:ca:f7:b9:77:7e:0e:14:19:
                    07:82:7e:bf:fc:03:41:4d:40:79:8a:25:cf:93:8a:
                    f8:40:38:50:9a:62:d2:48:d2:ea:02:59:13:ab:9a:
                    7b:1f:c4:b9:eb:94:7f:32:e4:63:be:26:97:1b:2b:
                    6e:f4:4f:6e:5b:41:5d:21:9f:16:89:cc:de:25:f6:
                    fc:5e:9c:07:1d:91:36:15:23:05:bb:e1:29:f7:04:
                    92:a6:98:df:65:25:7f:32:f4:c5:c6:70:6f:3c:a0:
                    97:3d:31:29:e8:6a:5b:e2:bf:40:78:69:4f:2c:0d:
                    9e:f7:0a:cd:cf:6b:0b:ac:0d:64:b4:65:81:18:26:
                    06:73:cd:8d:04:40:d6:37:27:3e:bd:f8:3a:39:de:
                    0d:4d:38:54:88:a1:d2:51:0b:a6:6c:9e:17:9b:0a:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:0E:3B:12:9A:A1:B1:99:B5:3D:27:3A:CE:58:31:C8:C1:0B:5C
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3330303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:cf:e6:f9:41:dc:81:ec:c7:79:96:5d:a5:a9:64:52:f3:23:
         f2:91:ab:23:be:af:0d:4d:a1:eb:a2:95:53:00:49:74:a6:9d:
         3c:0e:b2:6d:c9:e2:f9:36:9a:46:a7:93:50:de:80:a8:8d:18:
         6f:e5:2e:30:fc:e1:74:39:83:c2:2a:e2:5c:0d:c1:3d:7b:b7:
         c8:32:b3:94:f0:1d:dd:38:cf:c4:8e:20:0e:65:6e:d8:1b:68:
         b1:28:7d:63:73:1d:48:cd:83:11:d2:29:f6:e8:51:c2:98:4a:
         a3:74:19:89:ac:b5:9b:dd:64:af:2f:b0:b9:2b:5f:8e:c6:8e:
         cd:e9:dd:aa:0b:d9:80:36:cd:c9:4b:d6:4a:af:13:86:33:08:
         69:df:1d:eb:0e:02:da:f1:6a:39:a5:60:34:09:1a:e7:2b:9b:
         a1:4c:5a:52:8b:37:bf:ef:d0:a2:de:b1:b1:c0:5e:97:2e:c7:
         48:d5:52:2e:36:be:f4:a5:ed:65:5d:f2:96:e5:eb:3d:ac:18:
         16:a9:03:53:5a:5b:83:f9:3b:6f:ec:ce:45:c4:eb:bd:f0:ac:
         e6:89:78:7e:39:43:81:c0:aa:8d:ac:d3:44:04:37:bb:cc:f7:
         38:5b:13:37:92:fc:94:33:de:ba:6f:70:32:83:eb:86:da:9b:
         77:35:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org