Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3430303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3430303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          kTFq1UleyBAPz2XwKpoQN4md+9lAAPzsrG5A6YPZbCc=
Subject key identifier:   98:1F:24:72:CC:68:09:73:40:2A:C0:CA:0C:8E:2F:1E:E7:68:98:BD
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       2AEBB3BBDDC8B6C6E57352C63782C5F890AF4D57
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3430303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 05 Mar 2024 17:50:07 +0000
ROA not before:           Tue 05 Mar 2024 17:45:07 +0000
ROA not after:            Tue 04 Mar 2025 17:50:07 +0000
asID:                     272869
IP address blocks:        2803:7290:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:eb:b3:bb:dd:c8:b6:c6:e5:73:52:c6:37:82:c5:f8:90:af:4d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar  5 17:45:07 2024 GMT
            Not After : Mar  4 17:50:07 2025 GMT
        Subject: CN=981F2472CC680973402AC0CA0C8E2F1EE76898BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:1d:e6:6d:e0:b1:7e:54:86:a8:e6:ad:92:
                    2d:09:50:18:26:1b:0c:bd:c6:d8:f2:d2:65:7b:09:
                    94:40:7d:87:6b:15:06:09:38:c4:d0:70:67:10:8d:
                    c7:05:86:00:79:df:5b:88:27:50:55:a8:be:ef:ca:
                    d9:2e:f2:0c:fd:43:42:21:4b:d8:ad:5d:25:b3:28:
                    8d:29:43:c9:da:93:72:8a:6b:97:63:0f:2e:3f:eb:
                    07:75:8f:ee:50:8d:5e:14:6a:bf:a1:7c:53:dc:e5:
                    a5:80:47:fd:5c:7f:f3:b5:2d:05:af:36:c4:6b:21:
                    4c:02:e0:89:5a:8f:22:3e:7f:19:6c:75:12:6e:45:
                    72:ff:51:ec:7e:6f:74:61:e5:15:dd:39:e9:0c:a9:
                    48:6e:c3:45:2b:1f:b8:39:f0:03:a7:f3:e1:03:0e:
                    08:66:7b:4b:45:36:b3:fd:c5:06:de:40:8f:e8:b3:
                    6e:3d:31:21:95:35:40:0a:da:f2:d6:06:7b:53:8b:
                    1b:9a:cb:85:de:15:fe:73:22:03:43:e2:91:b1:cd:
                    cd:75:30:f4:b8:63:0a:44:f5:ec:1c:b3:5b:50:e6:
                    98:3d:86:b4:76:16:62:cf:05:38:93:bf:e5:ce:e6:
                    1b:92:5a:5e:30:92:77:48:92:6e:c5:2b:25:0e:a3:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1F:24:72:CC:68:09:73:40:2A:C0:CA:0C:8E:2F:1E:E7:68:98:BD
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3430303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:29:fb:7a:2b:e3:a0:18:ba:3c:74:eb:f4:8d:95:a7:b8:40:
         2f:3c:83:c9:18:8f:b3:2c:41:0a:56:e3:18:b6:d1:18:b7:3c:
         2a:ad:39:02:54:87:f9:0b:9a:59:4a:5c:36:07:c7:99:43:5e:
         49:e0:e0:f4:bb:0c:79:e4:36:88:73:a5:56:2c:ab:9b:7e:43:
         19:98:f1:67:f7:29:a6:ce:3b:92:71:41:b5:dc:f3:c4:6a:fc:
         f4:5d:3d:2f:8b:33:c8:a1:57:52:5c:91:0d:a1:15:2a:01:d7:
         a8:34:d3:05:85:70:c8:a0:07:c3:6b:c6:61:c1:c0:8f:8c:cb:
         b4:df:d2:32:2f:59:a6:61:6c:ad:36:80:7f:c8:6e:31:72:f0:
         2d:a0:de:5a:4e:18:e5:63:fd:07:6f:9e:0a:83:91:7c:f7:fd:
         48:12:62:a1:10:e7:92:07:30:3e:af:7a:45:b9:b6:70:ff:b4:
         b1:e8:72:0b:de:bf:35:e6:0b:c8:4a:11:95:f0:39:78:44:c7:
         bf:2d:dc:b8:9f:2d:3c:df:2e:f3:fd:66:90:83:d0:ba:49:12:
         66:69:3d:39:05:7f:62:85:7f:04:ac:e1:08:ec:75:08:14:98:
         a1:22:a9:14:16:6e:75:51:a7:5e:76:a6:23:57:82:00:9a:53:
         12:c9:a2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:23 2024 by rpki-client on console-ams.rpki-client.org