Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/323830333a613230303a3a2f33322d3438203d3e203237373735.roa
File:                     323830333a613230303a3a2f33322d3438203d3e203237373735.roa (raw, json)
Hash identifier:          VAHcxnW2+ehyyc/JqO5YmmoChqVyTCvJr6jdjIdsw0w=
Subject key identifier:   FA:00:6F:32:4D:CC:57:80:57:9D:C8:00:0E:9B:87:5F:D0:A4:00:97
Certificate issuer:       /CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Certificate serial:       3C3931CE8CC311C881226EA32F72403E689953C9
Authority key identifier: E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/323830333a613230303a3a2f33322d3438203d3e203237373735.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     27775
IP address blocks:        2803:a200::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:39:31:ce:8c:c3:11:c8:81:22:6e:a3:2f:72:40:3e:68:99:53:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E448655A46C905154A46DF19D5CADDB20B5D1153
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=FA006F324DCC5780579DC8000E9B875FD0A40097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:27:2e:1f:16:e4:ec:59:a9:32:e3:ba:a6:
                    fc:77:93:3c:e7:98:85:3d:4a:b5:24:88:2d:ed:8a:
                    f8:76:3a:60:a3:e5:53:80:30:41:80:48:83:a0:b0:
                    14:8d:08:76:84:e0:41:34:a8:67:96:03:ac:e4:6f:
                    5c:ad:04:a5:0c:56:d3:3f:ac:98:f4:fd:6e:a4:3e:
                    09:5d:0c:ca:c3:0e:c4:64:ac:dd:cb:10:ed:e1:87:
                    75:71:16:be:37:fe:6c:2b:53:74:d3:28:be:bc:36:
                    d4:ea:e7:81:ff:e4:3e:54:ab:b8:be:51:2d:65:8c:
                    a3:31:17:97:7e:76:03:b8:30:70:70:97:26:b3:ae:
                    46:da:dc:fe:7a:3d:fb:fd:6f:42:58:ad:44:e8:bb:
                    a7:cc:6b:49:fe:f3:4c:f4:6d:9c:38:6c:7b:91:b3:
                    52:ae:ab:b6:c3:24:da:88:e5:cc:c0:3f:f7:f8:6b:
                    ef:ac:71:33:26:5c:8b:66:66:d0:c7:53:8a:1f:a9:
                    f8:d4:5b:fd:6e:ad:43:2d:94:0d:49:a8:26:1d:55:
                    c7:45:99:17:34:fc:fa:69:33:ae:1b:d2:b8:67:ca:
                    52:6d:ee:34:71:3e:07:72:99:46:b0:45:71:7d:da:
                    2b:ae:f0:b1:8b:65:89:23:0d:40:bb:2f:08:9c:bf:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:6F:32:4D:CC:57:80:57:9D:C8:00:0E:9B:87:5F:D0:A4:00:97
            X509v3 Authority Key Identifier:
                keyid:E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/323830333a613230303a3a2f33322d3438203d3e203237373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:eb:bf:43:9b:34:80:5d:bf:de:06:1c:46:9f:b6:1c:e9:
         11:76:6d:64:11:b7:f3:44:fa:b2:35:21:ab:95:b6:4f:9e:3b:
         ff:58:c4:91:af:29:bf:fa:ab:8b:30:87:af:b2:0c:c9:a2:3b:
         30:03:1c:a2:75:c1:c8:5e:3b:bb:70:ae:6f:b6:02:56:0e:de:
         8f:c4:cd:0c:c0:a2:3a:32:f4:d0:97:4a:e1:76:cc:9e:0a:90:
         05:20:6b:ec:d6:3e:4b:3c:a5:63:af:b6:35:52:69:73:4e:ad:
         b9:a4:f9:aa:d1:11:e7:60:b3:dc:71:a2:dc:41:52:79:08:f2:
         4d:cc:c3:63:17:46:09:c0:4d:f6:d3:59:ce:5e:32:77:62:92:
         bc:e5:eb:5e:c2:62:7d:f1:8e:cd:24:67:73:2b:02:0e:89:9e:
         95:b9:59:66:1f:0d:ff:c7:6f:f8:0c:67:27:29:61:5c:10:27:
         aa:18:51:fc:72:7e:6a:b3:d8:a6:fc:7e:b4:98:3c:19:09:42:
         a7:73:6d:98:ad:71:5e:97:bb:bc:99:f5:1e:5b:2d:92:76:de:
         6b:56:3f:f4:3b:04:0f:43:4e:57:fc:fb:38:49:eb:6e:cb:7f:
         ff:ff:3d:c5:14:19:8d:19:24:77:f5:08:77:52:53:78:8d:16:
         43:d4:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org