Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313730303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313730303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          4NeIdE3ge2C91+DMmSpKAeUD94jvUMMX0lGMk0lHlcQ=
Subject key identifier:   8B:04:3F:BB:C1:8A:50:E1:9A:84:73:6F:3D:B1:15:19:17:F7:19:18
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       397533FCE8C0D9DA642DA5366A9E397E0A352BEA
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313730303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 17 May 2024 02:30:02 +0000
ROA not before:           Fri 17 May 2024 02:25:02 +0000
ROA not after:            Fri 16 May 2025 02:30:02 +0000
asID:                     272869
IP address blocks:        2803:7290:1700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:75:33:fc:e8:c0:d9:da:64:2d:a5:36:6a:9e:39:7e:0a:35:2b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: May 17 02:25:02 2024 GMT
            Not After : May 16 02:30:02 2025 GMT
        Subject: CN=8B043FBBC18A50E19A84736F3DB1151917F71918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:54:4a:b3:ed:4b:f7:78:85:82:0a:d6:b4:
                    99:f4:45:d9:91:31:40:19:c6:82:90:01:8d:14:51:
                    b4:1b:10:26:29:07:52:27:8a:d0:f3:09:52:0c:40:
                    50:57:26:07:9f:e2:ad:2f:3d:7c:7b:66:92:ca:fa:
                    49:81:60:8f:3b:3c:af:f3:db:c5:f8:1c:c7:b3:9e:
                    3a:c1:c4:5f:53:fe:6f:db:66:bb:3e:83:2c:d1:f9:
                    82:bc:90:49:41:f2:49:ae:d6:04:64:4a:64:4c:6a:
                    2f:a0:c4:51:c2:bf:65:8c:e2:e8:a5:1d:38:aa:79:
                    80:2c:38:89:d2:82:7f:68:ed:89:af:5f:89:26:ee:
                    07:7c:e2:29:28:36:3e:2c:02:03:a3:eb:b3:3e:37:
                    85:85:ec:2e:73:e8:92:f1:15:09:d9:bd:43:9e:d7:
                    fa:c7:6a:7c:b6:78:5e:3e:31:5d:ce:ab:e1:a6:e8:
                    08:9a:50:7e:e6:eb:b2:b6:0c:ed:62:c2:e2:63:ef:
                    b0:ee:f1:78:64:17:81:fe:dc:05:88:80:3e:a3:a6:
                    00:6c:46:ee:27:46:85:70:10:a2:1e:d6:2a:1a:5c:
                    42:26:a8:f2:a4:8d:be:a7:72:62:d2:a4:c9:e6:9a:
                    5e:0b:af:24:cf:02:b7:2e:a0:09:ca:0d:e1:05:dc:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:04:3F:BB:C1:8A:50:E1:9A:84:73:6F:3D:B1:15:19:17:F7:19:18
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313730303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:1d:d1:79:91:75:b8:6c:d4:a6:75:70:5f:45:e1:a0:83:57:
         ce:47:56:4d:1c:26:17:92:14:33:4b:95:ae:c3:52:75:a0:3e:
         cb:56:73:72:33:ef:2d:92:e1:64:8a:cf:bc:0a:41:a3:0c:01:
         cd:eb:74:80:7f:2b:6e:4c:71:32:b9:89:38:c7:58:69:10:09:
         77:c2:6f:15:7a:fd:1c:ae:4a:f7:7a:57:0b:a7:49:33:46:b9:
         5a:15:1d:90:d8:32:28:9b:6b:67:ea:76:e2:f8:42:74:05:d6:
         9e:0d:9e:ea:f6:87:56:f4:d6:e3:5c:9e:0b:fc:de:b4:8c:fc:
         f7:cb:b5:17:91:33:a7:41:44:45:9d:bd:4b:b0:70:d4:45:40:
         e0:fe:63:32:b6:bf:8a:fa:cf:f9:97:02:7b:61:75:25:d2:d5:
         5c:4a:6b:72:2e:81:af:ed:a2:3f:21:e1:0c:1a:75:27:33:41:
         0e:51:46:ad:d0:6f:ab:b3:d9:71:de:59:1a:a7:2a:ef:21:55:
         33:81:5c:02:4f:1f:5c:2f:c6:5c:bc:2a:80:c5:4d:e0:3a:95:
         62:1e:36:d6:ff:d5:b6:6a:89:3f:87:1e:40:68:f9:33:89:68:
         1c:f3:b7:92:d7:f1:68:48:31:1d:e1:83:03:68:14:60:db:8b:
         7a:45:e9:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:20 2024 by rpki-client on console-fra.rpki-client.org