Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3930303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3930303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          ZiPHRXExJQM85YS3qaIZ2RJyN7SHiAe+IhD6YwubznA=
Subject key identifier:   E7:90:74:13:1A:E4:F5:BC:07:64:D8:AF:C0:13:2E:03:A4:CE:2F:A7
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       23F676C10D5469D2558D3FB2BC5BE223F6F67B83
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3930303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 05 Mar 2024 17:50:04 +0000
ROA not before:           Tue 05 Mar 2024 17:45:04 +0000
ROA not after:            Tue 04 Mar 2025 17:50:04 +0000
asID:                     272869
IP address blocks:        2803:7290:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f6:76:c1:0d:54:69:d2:55:8d:3f:b2:bc:5b:e2:23:f6:f6:7b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Mar  5 17:45:04 2024 GMT
            Not After : Mar  4 17:50:04 2025 GMT
        Subject: CN=E79074131AE4F5BC0764D8AFC0132E03A4CE2FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:8a:50:ce:0a:86:c4:bd:f4:2a:fb:bc:04:
                    16:d4:b6:c8:61:10:23:6d:00:a8:f0:ad:83:96:38:
                    35:e2:1c:1f:9d:14:4e:3a:d5:03:0e:2a:a4:a7:77:
                    9a:51:89:62:f2:26:ce:2c:ee:a1:8e:e1:6a:8e:2b:
                    3d:d1:b4:cc:2a:25:12:4e:c8:27:80:75:67:5a:60:
                    fb:3f:9b:7b:01:59:7b:ca:26:9c:45:4f:0a:d7:16:
                    78:1d:d0:d3:29:76:b2:d2:32:23:a8:b0:7d:9b:82:
                    43:ab:87:9c:94:51:8f:fd:28:59:cf:ff:45:d9:13:
                    c3:7a:3e:2b:78:73:f6:3e:95:ba:ac:09:6c:22:36:
                    99:a9:21:b9:ae:4b:74:63:9f:d5:25:8e:c0:bd:52:
                    95:92:07:18:e4:9d:a7:82:e5:0b:cd:1f:0e:4a:15:
                    55:b1:3e:ec:0e:ab:b7:a4:48:40:03:3d:af:c8:b8:
                    72:60:ad:11:f8:e2:55:a6:49:89:88:26:57:bc:59:
                    b1:4c:ec:f6:07:f4:ad:1a:ca:f3:a3:69:b0:fc:d8:
                    4e:c4:b5:64:a9:1f:7a:c5:05:1a:34:13:9d:50:50:
                    82:ee:53:e1:2f:6c:fa:43:5f:c7:78:4d:ad:5a:97:
                    7b:8e:7d:9d:6c:46:ed:58:de:c4:90:d5:b8:e5:0f:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:74:13:1A:E4:F5:BC:07:64:D8:AF:C0:13:2E:03:A4:CE:2F:A7
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3930303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:07:5b:38:45:d0:b3:9e:32:b6:4b:52:88:f6:0d:90:8b:d2:
         80:5d:3b:08:d2:d0:0d:1c:51:05:7b:43:53:f4:92:bf:9d:49:
         84:15:c9:40:62:81:73:3f:b7:6c:4c:63:e6:f0:32:49:75:22:
         0a:e0:0a:c2:e1:57:a3:57:d7:87:f3:9a:65:41:c9:26:d3:d2:
         c7:0f:d8:cc:6b:de:48:14:12:ac:a9:b3:d8:46:c9:2c:9a:74:
         92:23:82:00:c5:f9:54:d1:0f:ad:1d:8d:d0:9b:15:45:ab:cf:
         1b:b5:88:fa:d5:cd:51:6d:ee:5d:90:88:49:b6:ff:90:1c:9b:
         9a:f2:7f:80:0b:f7:5b:10:89:24:91:a5:3b:b0:e4:e5:d2:67:
         69:2d:83:25:ba:7b:21:f5:44:0b:a2:44:ef:b4:d8:c8:73:07:
         9e:2b:91:b0:7f:89:14:a2:28:d6:27:0f:80:fe:d1:74:f8:7d:
         c6:f4:e6:01:0b:77:8a:56:73:a2:c2:f5:16:5d:31:58:74:d0:
         be:f5:24:a9:9c:c7:f8:3d:9c:8a:01:8a:28:ba:88:0d:91:b4:
         8c:80:ba:4f:60:87:b0:b2:f8:06:1e:61:af:42:90:ca:16:98:
         32:45:82:08:e6:ec:4e:62:24:25:07:d5:08:85:23:4a:8d:56:
         df:11:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:52:02 2024 by rpki-client on console-fra.rpki-client.org