Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/323830333a616430303a3a2f33322d3438203d3e203532333534.roa
File:                     323830333a616430303a3a2f33322d3438203d3e203532333534.roa (raw, json)
Hash identifier:          soMTa+XlGaGfIwDQHoxtS0ZugyyMihyaRX7CyR2HPcU=
Subject key identifier:   D8:9B:A6:06:9F:30:FE:CA:F5:47:58:41:F2:2C:26:CE:58:53:C0:A6
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       4FFC41F9AB2A8A14C3A3EB441633656EAE1DF2D3
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/323830333a616430303a3a2f33322d3438203d3e203532333534.roa
Signing time:             Tue 05 Mar 2024 18:10:00 +0000
ROA not before:           Tue 05 Mar 2024 18:05:00 +0000
ROA not after:            Tue 04 Mar 2025 18:10:00 +0000
asID:                     52354
IP address blocks:        2803:ad00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fc:41:f9:ab:2a:8a:14:c3:a3:eb:44:16:33:65:6e:ae:1d:f2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Mar  5 18:05:00 2024 GMT
            Not After : Mar  4 18:10:00 2025 GMT
        Subject: CN=D89BA6069F30FECAF5475841F22C26CE5853C0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:cf:19:70:bc:4f:af:89:63:2f:dc:30:c1:
                    a4:da:10:cb:f9:84:bd:15:37:78:8d:c6:5e:4a:86:
                    c5:58:68:fd:02:3c:30:4c:ca:21:83:91:e5:b1:1e:
                    91:41:31:f6:55:db:84:85:89:ce:90:91:34:31:f9:
                    9f:95:72:78:c9:88:53:96:42:48:42:16:f3:65:44:
                    4f:fb:9e:00:5d:d9:7d:39:10:4a:24:1f:fb:40:89:
                    29:ce:ae:7c:72:b9:5a:60:92:c3:42:11:1b:c0:c0:
                    22:4a:fe:8a:d1:55:e0:e4:4c:a6:2b:80:0f:3c:00:
                    26:10:1c:ed:58:ab:15:ab:ab:51:80:65:bb:62:9b:
                    24:bf:7b:38:a5:9f:91:94:4b:1f:7f:1d:c6:5d:1c:
                    8c:cb:f4:87:b9:1b:2b:ce:77:da:7a:31:bb:8f:ef:
                    ee:9d:68:da:ca:16:7e:01:99:fe:95:9f:40:6b:14:
                    bc:b4:c4:1f:a3:e1:16:8b:f7:06:1f:83:65:fa:e8:
                    3e:7f:17:35:67:21:28:44:67:c7:57:21:5d:1f:23:
                    ad:50:3c:18:ad:a2:dd:8d:fd:fd:63:e8:fc:4a:82:
                    4d:58:3c:d6:05:17:d3:10:3d:98:ce:7e:e8:1b:1b:
                    66:4e:14:87:db:da:45:51:11:36:f5:25:c8:3d:5d:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9B:A6:06:9F:30:FE:CA:F5:47:58:41:F2:2C:26:CE:58:53:C0:A6
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/323830333a616430303a3a2f33322d3438203d3e203532333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad00::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:c1:f4:c1:19:2d:cc:13:39:fe:94:12:5b:49:56:41:3d:80:
         0b:1f:4e:12:10:42:c2:ae:b9:13:04:2f:54:45:54:4f:5f:51:
         57:4b:04:e7:c9:97:81:5c:c2:9f:46:ab:d7:a2:27:7f:13:85:
         4f:83:c0:2f:5e:58:e8:42:cc:60:bd:b0:ce:cf:e1:2f:29:ba:
         c4:5d:89:bb:21:7f:52:0d:b5:f5:c4:7b:a4:37:93:e7:c8:23:
         7b:b4:76:54:c0:8a:5e:7f:56:81:c5:00:09:e2:80:e1:f9:35:
         9b:e7:f9:74:13:02:a9:c2:39:ba:64:a7:70:5a:b2:9a:21:b1:
         20:c3:77:3f:51:83:e5:0f:b1:d7:02:97:0e:26:86:86:00:57:
         82:34:8b:6c:90:a1:0e:73:bc:65:52:51:fb:dd:46:37:21:99:
         7e:bc:7a:50:8e:dc:45:c8:59:24:a0:43:72:20:bb:6b:df:f5:
         93:b2:b9:c2:a8:2a:bf:b7:44:63:a4:6e:94:d1:23:79:d6:86:
         7f:85:6b:e4:f8:e5:45:38:40:8e:93:d9:76:b1:ab:d3:51:42:
         97:5a:60:93:6d:c3:42:50:bf:bd:2f:fb:fd:b8:72:36:1c:7e:
         4c:4f:88:62:4e:36:13:5a:65:ea:dd:fa:35:8a:e2:78:79:d0:
         b7:0d:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:14 2024 by rpki-client on console-fra.rpki-client.org