Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316130303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a316130303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          eQUDhKJVkl1FvCY7v0Egb258QfqA1drUMHMuthhq+2Y=
Subject key identifier:   76:49:F3:94:42:08:F7:F5:E1:49:A8:38:2C:54:78:A7:02:6F:93:3F
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       393C60C5722E0F6C24D3489947556A1E202B593C
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316130303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 17 May 2024 02:30:03 +0000
ROA not before:           Fri 17 May 2024 02:25:03 +0000
ROA not after:            Fri 16 May 2025 02:30:03 +0000
asID:                     272869
IP address blocks:        2803:7290:1a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3c:60:c5:72:2e:0f:6c:24:d3:48:99:47:55:6a:1e:20:2b:59:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: May 17 02:25:03 2024 GMT
            Not After : May 16 02:30:03 2025 GMT
        Subject: CN=7649F3944208F7F5E149A8382C5478A7026F933F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:cd:8c:1f:e9:d8:1b:13:ed:71:2f:30:cf:
                    81:c4:e9:0a:d6:d3:7f:4d:2c:23:20:81:4c:bf:27:
                    58:0e:d1:28:67:41:f2:8b:9b:dd:62:ad:7b:83:00:
                    69:62:d9:75:1d:86:9c:58:9a:ed:e3:15:b7:ae:5d:
                    67:64:6c:4d:26:39:25:05:5e:f8:93:d1:35:37:c7:
                    0e:f5:75:de:88:b4:cc:ad:f9:fd:e8:97:af:9d:61:
                    dd:60:dc:c4:14:4d:32:2b:97:0b:71:a5:7e:96:bd:
                    83:04:30:52:bb:96:82:f3:98:52:b3:4d:01:f0:69:
                    c6:02:33:32:88:e5:b7:7e:03:8f:ef:1a:85:83:a2:
                    e5:c3:bf:a6:1b:7f:9c:05:ec:5e:fd:50:44:e7:56:
                    31:9b:f9:95:91:89:0f:e3:03:be:80:b2:64:7d:ef:
                    34:c5:c4:de:d7:d3:4e:e0:0f:97:52:34:48:10:f2:
                    06:d5:54:55:09:5c:10:b0:5c:93:37:ff:ec:3f:93:
                    5c:9c:c4:ef:d9:2f:cb:3a:2f:bd:51:9a:50:10:b6:
                    96:e8:4d:a3:e6:b5:62:8d:68:90:0c:5e:66:6b:a1:
                    4e:39:1a:2c:69:cd:e8:e9:14:74:fe:af:74:40:89:
                    5e:a5:d8:ed:74:f5:9f:ea:52:cd:3d:8e:63:f4:33:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:49:F3:94:42:08:F7:F5:E1:49:A8:38:2C:54:78:A7:02:6F:93:3F
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a316130303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:f3:1f:50:65:47:39:8a:18:75:b2:88:05:8d:3f:c7:05:53:
         06:a0:f9:21:76:aa:29:0a:0f:c6:75:0d:b8:f3:b8:29:6d:33:
         48:9f:aa:f8:3a:c0:1d:c7:e2:ab:9b:84:46:9a:ab:a0:a7:4d:
         68:bc:1e:bc:b1:e0:d6:35:ec:cd:d0:35:4e:6c:04:7a:34:d0:
         c9:cc:4c:6c:63:e2:e7:2d:94:30:b7:5b:cb:0e:c7:ca:07:46:
         b9:ad:40:71:16:41:35:98:5d:96:81:dc:f4:23:75:0e:37:10:
         2e:8c:8e:22:d2:2d:51:1c:18:aa:f8:f6:6e:62:ba:76:f2:17:
         99:c0:4c:65:e1:cf:4a:96:00:65:45:d1:d5:51:67:c3:20:2d:
         3d:41:7e:92:fb:a7:a2:c4:08:87:54:ae:0c:30:cb:ca:6c:2c:
         ac:0f:ba:ee:a3:81:c8:9b:92:fa:18:99:96:f8:b4:0e:b5:0c:
         01:a5:49:10:97:45:07:bd:6c:79:00:9a:d8:32:bc:a0:62:c4:
         d4:93:0b:12:23:44:74:7d:23:9a:8e:ba:b7:ac:1a:bc:95:7a:
         50:d9:04:97:86:b6:fa:d0:92:0e:94:ff:c4:eb:13:40:34:23:
         53:30:e2:3b:21:f7:ef:0b:58:aa:f0:98:b7:7d:bb:f2:12:06:
         39:0c:56:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:20 2024 by rpki-client on console-ams.rpki-client.org