Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/323830313a31633a663030303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a31633a663030303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          SkWJlKkGLZnIF357UFlSj4udomdRdwhe1+rOssVSvwQ=
Subject key identifier:   5A:04:0D:92:C1:FE:59:45:35:7F:EC:40:A4:3D:85:E9:65:F3:D0:21
Certificate issuer:       /CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
Certificate serial:       38BE697E2CE2CB90086AF0B672A20BDA3D6F8DD9
Authority key identifier: 46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/323830313a31633a663030303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:04:02 +0000
ROA not before:           Tue 05 Mar 2024 17:59:02 +0000
ROA not after:            Tue 04 Mar 2025 18:04:02 +0000
asID:                     27947
IP address blocks:        2801:1c:f000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:be:69:7e:2c:e2:cb:90:08:6a:f0:b6:72:a2:0b:da:3d:6f:8d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
        Validity
            Not Before: Mar  5 17:59:02 2024 GMT
            Not After : Mar  4 18:04:02 2025 GMT
        Subject: CN=5A040D92C1FE5945357FEC40A43D85E965F3D021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bd:85:99:bd:d6:5f:8b:00:18:b9:1c:f7:d2:
                    85:15:0e:3a:65:b4:73:02:79:0d:b7:94:e8:c5:27:
                    e2:22:fc:94:a8:9f:fd:3b:9f:14:60:21:5e:04:22:
                    18:d4:b9:cf:aa:ed:a7:ba:34:98:6d:2b:1e:f3:ef:
                    93:61:0e:de:95:ae:bb:84:c3:3e:e8:36:df:3e:3b:
                    f2:5f:20:b8:7f:51:b9:ac:1a:0c:b6:b8:6f:64:15:
                    8b:75:61:5e:76:ab:81:89:a6:ba:08:b0:40:0b:55:
                    48:ae:c5:f1:eb:f6:92:da:e4:c4:c4:dd:5c:8b:96:
                    98:96:75:18:3c:8e:8a:b4:6b:24:03:c7:6d:9b:28:
                    ac:5e:15:4e:5f:39:34:86:26:fb:20:72:1e:5f:09:
                    07:90:f3:e0:4f:33:4f:ba:07:97:b6:94:56:51:c6:
                    45:cb:d2:64:ac:b3:84:8d:84:99:e4:00:c4:a6:45:
                    05:59:87:b5:f6:db:f6:5f:83:ff:b6:24:e9:2f:0c:
                    7c:ea:42:6b:3e:f0:99:75:bf:f4:14:e2:64:e5:39:
                    a8:ca:4b:c4:36:ff:38:26:58:38:94:35:c8:c7:9f:
                    c6:b1:86:29:5a:9a:22:12:50:43:76:86:a8:91:d2:
                    4d:e1:99:0c:4a:ff:7f:44:ac:54:8b:ea:f3:b5:b6:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:0D:92:C1:FE:59:45:35:7F:EC:40:A4:3D:85:E9:65:F3:D0:21
            X509v3 Authority Key Identifier:
                keyid:46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/323830313a31633a663030303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:b0:9a:1d:d7:3e:fa:92:0d:30:eb:dd:98:84:78:48:3f:0c:
         15:d2:f4:2b:38:64:38:ff:4a:dd:f8:9c:8a:d8:d7:7e:da:1c:
         e6:40:42:6b:47:44:50:44:89:b7:c6:d4:1e:84:05:a8:a2:0d:
         dc:c9:03:17:78:f6:47:b7:e5:d1:2f:01:bf:dd:0f:cb:30:6b:
         01:a7:f3:f9:be:2c:1b:cb:78:6d:36:2f:3d:28:26:69:4e:7a:
         26:6a:75:fb:7d:3b:aa:96:96:e9:7b:c6:e8:a4:8b:4b:0a:46:
         e0:59:2d:58:a9:1f:42:d2:aa:bb:4b:c9:0f:9e:24:3d:d5:e5:
         97:0b:57:6e:21:56:f9:ae:b7:96:3b:18:12:27:86:ad:d0:ec:
         cb:15:8f:cb:3d:9e:3d:a3:dd:9e:5e:95:c8:e6:d0:d2:23:ea:
         61:22:bc:e0:72:92:9f:89:b3:9a:85:9a:54:d3:05:65:8d:b4:
         5b:c3:f6:eb:9d:a5:7d:eb:4f:2c:a7:72:9d:97:25:91:f2:9f:
         0a:32:37:56:78:1e:d1:a6:17:53:4b:9b:91:54:b6:28:96:d2:
         66:a2:5d:0d:b9:37:8e:8f:d7:d1:b4:71:e0:ca:14:fd:2e:72:
         f7:25:2e:e0:6d:a4:73:df:9c:30:fb:2c:a1:c8:5d:7c:52:11:
         94:95:28:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org