Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          RyH4PwNaZOgsTvNn53behm5R8V19D4l/0I7CEIqTkmY=
Subject key identifier:   6E:3A:80:B9:D4:37:4C:39:4D:55:87:C4:42:C5:FF:9D:37:4B:E5:F2
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       1E2600762AC424F67903BA208013821D63D8E015
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 05 Mar 2024 17:50:06 +0000
ROA not before:           Tue 05 Mar 2024 17:45:06 +0000
ROA not after:            Tue 04 Mar 2025 17:50:06 +0000
asID:                     272869
IP address blocks:        2803:7290:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:26:00:76:2a:c4:24:f6:79:03:ba:20:80:13:82:1d:63:d8:e0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar  5 17:45:06 2024 GMT
            Not After : Mar  4 17:50:06 2025 GMT
        Subject: CN=6E3A80B9D4374C394D5587C442C5FF9D374BE5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:ed:d4:5b:1b:77:44:51:cc:4f:b8:a6:0a:
                    2a:27:4b:04:cd:b4:58:56:88:88:52:d6:85:ae:88:
                    9b:69:ba:63:a5:87:0e:b9:e5:f9:b3:79:63:1b:8b:
                    f9:46:47:f9:e5:81:49:92:4c:a1:53:a8:64:5b:c3:
                    66:f4:40:4b:74:48:9f:9f:f7:4d:29:42:68:c9:9b:
                    8f:42:c5:af:f9:62:7c:4d:d1:a5:ea:fa:43:37:9a:
                    e0:48:63:3e:c8:e5:62:1a:d0:b2:5a:ac:be:9d:21:
                    af:3a:0c:14:c5:85:53:fb:f4:31:34:52:61:1e:dc:
                    55:63:a0:4d:79:81:31:f5:3a:02:a9:31:f3:d1:60:
                    2a:69:e1:d4:f9:96:7d:33:87:6f:90:6d:2a:17:17:
                    88:c2:38:22:6d:5d:b0:ab:3d:67:a2:03:e0:3b:70:
                    39:20:1d:7a:67:3c:f2:56:ec:7a:35:ec:31:a5:75:
                    19:7e:0a:26:73:e3:24:64:bf:09:87:84:10:2a:cb:
                    39:ec:6d:61:04:c7:f5:43:fe:51:a9:c4:d2:e3:cc:
                    1b:ee:b1:4b:c3:8f:75:32:46:6e:55:1d:8d:2b:c7:
                    c6:21:7e:0e:ca:5f:86:fe:e1:b4:48:b0:1d:65:9b:
                    e9:4d:32:4d:de:14:d4:34:8c:ef:59:26:bd:87:37:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3A:80:B9:D4:37:4C:39:4D:55:87:C4:42:C5:FF:9D:37:4B:E5:F2
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:69:bb:0d:c9:35:ae:9f:51:2a:65:f0:89:2a:8f:35:70:
         c9:c1:81:f8:9c:ac:9b:e3:ee:03:a9:14:b9:9b:68:ea:30:ee:
         36:0e:1f:8d:da:ca:9d:87:cd:c3:9c:7e:17:c4:6d:4b:c7:9b:
         9f:42:60:45:e7:2e:c2:b7:d4:88:55:2e:e0:80:16:a2:39:11:
         bb:d2:6f:83:1a:da:e1:72:2e:fe:0b:76:35:21:ca:d0:40:99:
         8a:9e:44:62:52:0f:bc:49:25:0d:ea:59:76:fb:62:ab:88:b2:
         2a:0e:e7:c4:14:e9:02:76:02:b1:6b:9f:56:dc:44:ef:52:77:
         6f:df:33:b1:bf:61:4f:d5:a0:2a:64:5c:5b:4e:6d:0e:d0:d0:
         a2:13:88:34:24:c0:da:2f:78:74:e5:ed:a9:b9:67:f6:70:ab:
         d7:fd:7b:f6:d0:bc:cb:60:6b:de:9f:b4:de:cd:33:ba:fa:aa:
         40:cf:e5:7d:4c:4c:69:81:af:1e:54:ee:dd:04:44:08:a7:ab:
         2d:1e:ad:02:74:7d:fd:fc:ab:b2:e7:c3:5d:31:60:e7:3c:89:
         8c:af:a0:ad:ff:2e:df:65:52:6d:41:ba:68:c3:3b:64:cf:4a:
         35:2a:4e:c5:ad:86:c0:7e:b0:94:e8:2c:dd:69:fb:68:1f:fc:
         58:1d:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:23 2024 by rpki-client on console-ams.rpki-client.org