Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313630303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313630303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          URU46tWUzZS7aSgYt4QrE3oUpZiU/K5g8vxEwyo5mVE=
Subject key identifier:   DA:F5:3C:E6:7E:92:CC:27:EC:25:66:DE:68:EC:6A:C8:4A:A6:50:7D
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       526A3C3F1F41500ACC81780E669EDB1CC9383F6F
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313630303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 17 May 2024 02:30:03 +0000
ROA not before:           Fri 17 May 2024 02:25:03 +0000
ROA not after:            Fri 16 May 2025 02:30:03 +0000
asID:                     272869
IP address blocks:        2803:7290:1600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6a:3c:3f:1f:41:50:0a:cc:81:78:0e:66:9e:db:1c:c9:38:3f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: May 17 02:25:03 2024 GMT
            Not After : May 16 02:30:03 2025 GMT
        Subject: CN=DAF53CE67E92CC27EC2566DE68EC6AC84AA6507D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:20:59:14:aa:b5:21:5d:de:a0:71:10:08:
                    a5:ec:a9:c5:7a:78:53:bc:3f:09:e0:a3:53:24:da:
                    24:ab:59:be:82:f1:13:0a:a7:4f:bc:b2:29:45:4d:
                    a7:32:1d:90:59:d4:7e:f8:f3:8f:34:a8:cf:17:9d:
                    bf:d2:b0:d9:74:be:13:d0:5b:90:dc:9f:a0:20:9b:
                    df:78:e2:ed:46:d6:33:e4:1b:0e:93:9b:89:90:67:
                    f9:95:f0:f0:3d:82:6f:8d:63:35:14:6e:a3:e2:6f:
                    43:e7:64:10:cb:b6:76:88:c5:2a:c3:2f:4f:38:36:
                    fc:84:e4:cb:72:07:76:82:32:83:bd:10:21:12:e5:
                    a6:6a:79:d2:0d:94:01:1b:0f:40:a8:d7:48:c8:ac:
                    7d:3b:e3:b3:32:18:9a:40:25:78:36:9c:53:a9:69:
                    de:d4:72:3b:cf:a1:a1:15:51:e9:3f:27:e9:9c:6e:
                    90:d4:1f:66:79:a1:ba:66:8c:d2:78:7a:82:5e:ab:
                    05:ab:24:54:f4:97:a8:eb:c7:8d:29:ba:44:eb:b8:
                    50:ef:9e:82:b5:41:e3:bf:a0:6f:f9:4b:24:83:8d:
                    9c:54:b8:fb:b3:db:c3:73:38:86:ec:c1:cc:cc:b3:
                    37:1b:4d:c1:19:36:4a:90:f2:a6:a5:84:77:5c:f3:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F5:3C:E6:7E:92:CC:27:EC:25:66:DE:68:EC:6A:C8:4A:A6:50:7D
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313630303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:01:81:68:76:9f:f1:f1:fa:ec:4b:f2:51:c8:65:ed:0a:
         d1:2e:2d:97:28:c4:61:55:b3:de:6f:03:7e:f1:d5:31:cb:f2:
         65:e4:fc:86:b0:bf:19:e2:d7:cc:c9:e7:a1:1e:d4:0e:bb:75:
         41:e6:d1:a2:35:bf:7b:28:a4:2b:63:38:93:a4:1b:23:97:ba:
         d4:97:01:86:b3:1e:3c:4b:d6:f9:3a:b4:3f:d6:06:83:65:c0:
         2f:23:e9:a9:d1:3e:8f:03:b5:26:e8:65:1c:da:86:71:f7:b9:
         4f:60:f0:a6:43:9b:d9:26:73:83:3a:f4:43:56:e9:55:80:24:
         4e:d4:56:3b:c5:00:23:3b:77:d6:c1:59:ac:a5:f6:a0:8e:ac:
         3e:1f:24:ae:7e:dd:54:6f:81:00:d9:f7:4b:d1:3f:6d:8a:8f:
         85:fa:bc:ee:e6:dd:cb:5b:38:9c:65:29:9a:db:bf:d0:f1:fe:
         73:9e:f0:0f:81:57:07:bb:40:9c:4e:5d:6d:45:a3:a9:7d:c3:
         40:2a:96:97:0c:29:32:d9:24:d2:e9:6f:28:a4:22:6b:7a:81:
         a8:13:ba:84:95:db:70:2e:50:db:30:bc:01:96:dc:b5:6a:d2:
         21:25:20:56:73:e6:ea:1f:fd:58:fa:87:0b:53:c9:d1:dc:db:
         3a:14:d5:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 18 21:02:39 2024 by rpki-client on console-ams.rpki-client.org