Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          NYmyhVXJx36rN+HwO6r2eQQckKXnb8CWtGdVIcUzr3A=
Subject key identifier:   70:A2:3A:ED:F2:70:A4:84:2C:CE:8F:F4:F4:C6:12:59:DA:B7:A0:89
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       65AAE8A3299EDA15E119FDEF91B468F773103DFB
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 25 Oct 2024 02:50:03 +0000
ROA not before:           Fri 25 Oct 2024 02:45:03 +0000
ROA not after:            Fri 24 Oct 2025 02:50:03 +0000
asID:                     273196
IP address blocks:        2803:2650:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:aa:e8:a3:29:9e:da:15:e1:19:fd:ef:91:b4:68:f7:73:10:3d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Oct 25 02:45:03 2024 GMT
            Not After : Oct 24 02:50:03 2025 GMT
        Subject: CN=70A23AEDF270A4842CCE8FF4F4C61259DAB7A089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:bb:3b:47:59:20:f8:11:90:2b:c8:05:9f:
                    15:0e:f3:8e:f0:aa:3f:72:ac:14:37:06:d1:c6:0a:
                    7d:60:f2:8b:38:54:52:a3:c6:a5:be:dc:01:b0:24:
                    e7:c1:e3:ae:a1:33:06:e9:a9:6f:a0:4d:f2:45:05:
                    08:81:60:93:1d:5f:11:9f:e0:a9:a4:e6:71:4c:8e:
                    32:58:9e:11:3b:23:40:8a:6b:97:d9:82:43:f1:11:
                    7c:d3:65:58:bf:0f:91:c0:1d:e6:f5:8d:61:80:78:
                    32:c7:6b:74:ad:e2:63:58:03:ff:ed:0f:a2:5b:2a:
                    a1:f5:58:44:b2:09:ad:62:d8:1c:5b:03:8d:6a:7b:
                    1a:ea:2e:8f:b0:9a:87:cb:3e:da:ab:a8:5c:c8:3f:
                    c0:bd:d2:d1:42:59:a5:82:74:bc:3c:21:bc:86:6f:
                    7a:29:ce:d6:ed:2a:e2:13:d3:5f:48:69:7b:3b:23:
                    c6:a0:d3:50:34:78:3f:e0:4b:4d:30:75:44:05:8c:
                    14:e5:79:fd:67:da:71:80:2d:74:b0:57:7c:a0:df:
                    4a:0c:b1:34:57:97:ea:15:18:87:8c:d4:3e:3c:4f:
                    43:a7:9c:58:24:dc:8a:53:21:d9:05:05:5c:cc:17:
                    6d:7f:21:cd:a7:99:f1:18:c9:cf:bf:9d:51:be:1c:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A2:3A:ED:F2:70:A4:84:2C:CE:8F:F4:F4:C6:12:59:DA:B7:A0:89
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3530303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:32:8e:2d:4f:5a:a8:89:af:fc:ce:fc:2d:bd:a5:28:83:
         1f:5d:7f:80:48:78:fe:41:d8:c9:9b:b0:f1:1f:be:4e:66:b2:
         2c:a0:69:a7:09:18:5f:10:f4:01:6d:c4:07:93:ba:34:a9:c5:
         81:ea:19:98:b3:7f:e6:bd:d3:e1:f0:e3:8b:51:c3:f1:ec:3c:
         26:e2:fb:e4:27:21:a0:f1:4c:9d:a5:52:ac:4e:f0:95:70:79:
         4e:90:a5:98:f2:19:b0:58:3e:ad:b7:bc:95:61:0f:61:44:26:
         0f:2f:b7:a4:6d:75:6a:dd:5b:1a:52:62:2f:79:d6:ad:2c:46:
         54:f2:16:81:01:42:b3:1e:32:d8:26:2d:4c:de:62:1e:0f:a2:
         fa:ef:7e:6c:51:b7:25:e1:b3:00:61:37:ed:4c:06:8e:bd:9d:
         b6:df:52:34:a2:fc:2f:ad:b7:70:4b:9f:ac:11:df:d8:f9:0a:
         f1:2c:ec:1c:34:cc:40:1a:af:29:44:4d:7a:0b:b1:59:e9:53:
         60:9b:71:e7:c4:6e:f9:76:45:98:dd:0a:0f:03:5d:87:f7:7f:
         44:cf:f7:a6:f3:02:01:e8:82:b1:10:04:87:bb:d3:d3:45:21:
         d2:35:f2:d6:a6:47:b3:af:1d:03:d8:4e:a0:95:33:59:d9:fc:
         6f:15:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org