Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6230303a3a2f34302d3430203d3e20323732373939.roa
File:                     323830333a356365303a6230303a3a2f34302d3430203d3e20323732373939.roa (raw, json)
Hash identifier:          Nzb8IPCSzJTtpvYA+cN7xauojHuQCtGtHHEXbeacupM=
Subject key identifier:   42:CF:28:C2:7E:F4:C6:92:41:C1:9F:52:F8:A1:31:C6:39:87:DA:3A
Certificate issuer:       /CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
Certificate serial:       228FD4480C08E40399C3FE83960C80B022D720ED
Authority key identifier: 52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6230303a3a2f34302d3430203d3e20323732373939.roa
Signing time:             Tue 05 Mar 2024 18:06:59 +0000
ROA not before:           Tue 05 Mar 2024 18:01:59 +0000
ROA not after:            Tue 04 Mar 2025 18:06:59 +0000
asID:                     272799
IP address blocks:        2803:5ce0:b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8f:d4:48:0c:08:e4:03:99:c3:fe:83:96:0c:80:b0:22:d7:20:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
        Validity
            Not Before: Mar  5 18:01:59 2024 GMT
            Not After : Mar  4 18:06:59 2025 GMT
        Subject: CN=42CF28C27EF4C69241C19F52F8A131C63987DA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:0e:a2:e5:3b:60:a5:18:1c:6a:06:32:5b:
                    f0:05:4b:16:7d:9a:4e:6b:92:67:3f:f6:9a:9c:09:
                    f3:72:2f:4d:41:c1:68:48:eb:0b:2d:ed:b0:c4:56:
                    97:27:00:91:1d:3d:e6:e9:54:5f:63:a6:77:ae:66:
                    e6:d8:f1:90:0f:4e:a0:6f:06:3f:5a:23:f3:16:ca:
                    10:93:b0:3b:51:39:75:bd:3a:04:d5:f7:cf:0d:1b:
                    76:32:5d:19:30:f8:36:24:4c:51:b5:a5:e1:9e:d5:
                    3d:94:c1:ce:13:ac:88:64:8e:8e:ec:19:60:bc:e8:
                    4b:23:0a:b2:31:8f:23:58:54:16:98:dc:a2:e8:2d:
                    39:3c:80:0c:e3:c8:84:99:7b:9a:bc:ba:1a:75:f6:
                    c8:c3:a0:4c:7b:01:7d:56:b6:be:b8:eb:a9:0d:28:
                    c2:c3:bc:58:66:a6:e6:f7:c4:04:dd:8c:40:42:a1:
                    55:7d:c9:33:90:6e:96:81:40:a0:c2:e7:ce:fa:6c:
                    7a:fb:a1:bd:76:5b:02:4e:eb:fe:f3:90:3c:8b:f8:
                    e3:58:36:e2:05:37:42:9e:ba:d1:d8:b1:e3:50:f3:
                    3e:89:b0:76:77:d1:d4:04:7b:6e:2f:5d:00:f7:08:
                    bd:a2:ed:7e:a9:35:f2:65:3b:74:b9:d8:67:4d:e1:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CF:28:C2:7E:F4:C6:92:41:C1:9F:52:F8:A1:31:C6:39:87:DA:3A
            X509v3 Authority Key Identifier:
                keyid:52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6230303a3a2f34302d3430203d3e20323732373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:30:9b:51:b9:e9:eb:2f:f5:fc:b5:a4:37:6d:ff:2f:08:
         f5:ea:f7:ed:17:0a:de:18:62:bb:18:56:c0:a7:3c:5e:25:a8:
         68:45:83:a2:3d:2e:c8:38:fc:0d:94:fa:30:4b:b0:76:50:a0:
         8e:34:25:8f:ab:d1:59:60:aa:4c:4b:28:c0:f5:3f:3b:2f:80:
         56:85:82:b2:43:ca:76:69:cd:a4:f9:e3:73:88:9c:dd:5e:fa:
         cd:dd:eb:49:d0:ff:4b:13:12:12:4e:0a:89:76:e5:43:6b:04:
         9c:6d:58:96:d9:32:ea:4f:ff:de:64:5a:0e:e6:c8:6f:99:76:
         7f:1e:10:cd:84:50:5e:a3:3c:c7:9f:9b:a2:8d:24:ce:45:42:
         a7:ae:5a:7a:5a:9f:7f:0f:99:fa:ca:ad:f1:53:61:59:0e:3f:
         18:f2:b5:24:70:47:cd:7e:39:ba:4b:58:ba:d2:20:f3:52:bb:
         66:1a:42:e5:12:79:18:94:1b:70:7e:3b:1d:a6:06:dc:45:6e:
         04:9e:7c:d1:a8:f8:f3:2c:fe:75:29:d2:90:00:e8:d3:87:a0:
         07:74:c9:fd:fa:7e:ef:ca:a3:52:4e:09:4a:b1:a2:96:b9:44:
         aa:53:88:7d:86:a4:38:2b:c8:fc:4a:f2:a0:d3:c4:3a:9a:eb:
         29:b3:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org