Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/323830333a336430303a3a2f33322d3332203d3e203532343439.roa
File:                     323830333a336430303a3a2f33322d3332203d3e203532343439.roa (raw, json)
Hash identifier:          bhNHS6J98XITmsOeiAgMb2IFqwFqb9MEQI2yjN4g9ps=
Subject key identifier:   A9:B4:D0:85:D0:CA:0E:17:A6:2F:60:57:6C:9F:9C:55:55:D4:04:4E
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       66B3ECC9056E5A7370234A40147AC9D886A68EA3
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/323830333a336430303a3a2f33322d3332203d3e203532343439.roa
Signing time:             Tue 05 Mar 2024 18:06:42 +0000
ROA not before:           Tue 05 Mar 2024 18:01:42 +0000
ROA not after:            Tue 04 Mar 2025 18:06:42 +0000
asID:                     52449
IP address blocks:        2803:3d00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b3:ec:c9:05:6e:5a:73:70:23:4a:40:14:7a:c9:d8:86:a6:8e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Mar  5 18:01:42 2024 GMT
            Not After : Mar  4 18:06:42 2025 GMT
        Subject: CN=A9B4D085D0CA0E17A62F60576C9F9C5555D4044E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:bc:c6:f3:99:42:c3:ee:70:e5:90:15:6a:
                    02:59:b9:bb:59:85:d5:8d:e8:39:88:cf:f2:15:33:
                    06:5b:90:85:9a:24:0d:3f:e4:42:90:02:96:e9:ed:
                    c6:bc:87:60:eb:23:e4:8e:4f:f3:5a:2d:97:d0:c0:
                    80:1e:95:29:c7:d3:58:51:06:e4:bf:58:d1:00:b2:
                    73:4c:90:b1:b5:d7:c0:30:96:01:ad:a8:4b:0a:29:
                    53:db:44:f0:5f:7c:38:91:18:1d:91:30:70:00:de:
                    9d:3a:bb:ce:28:c3:2a:ce:02:04:23:92:e9:c6:14:
                    b7:34:48:90:a2:d2:87:39:ca:b6:18:2b:a1:a3:7e:
                    3c:6f:30:b1:3d:44:88:0c:f0:ab:be:ce:14:79:ea:
                    a1:b6:56:96:c9:2a:07:bb:15:64:c9:c4:88:6d:6b:
                    0f:aa:83:b9:15:3a:ad:97:5f:f2:2b:7b:73:c5:06:
                    16:d0:cb:22:b3:9d:6a:3a:ce:02:25:a3:a5:eb:a9:
                    91:b0:63:26:bb:ea:ae:36:81:27:b2:9a:af:79:4f:
                    3e:b8:ce:f2:8a:2f:0b:da:76:80:03:d8:f8:69:91:
                    01:79:3f:a6:0c:70:1f:a2:cc:68:c7:6a:55:dd:c2:
                    a2:23:7e:04:98:84:8c:fc:43:c2:ee:86:82:19:aa:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B4:D0:85:D0:CA:0E:17:A6:2F:60:57:6C:9F:9C:55:55:D4:04:4E
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/323830333a336430303a3a2f33322d3332203d3e203532343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:3a:4a:23:73:a7:77:3f:9f:d1:e1:23:a9:a9:26:53:e6:d5:
         2b:4e:6a:c9:f2:45:0c:24:c8:4f:b5:fb:e0:b7:8f:3e:da:2f:
         7f:a8:09:f4:70:29:60:7c:1c:f5:53:21:f5:04:b4:19:53:5e:
         e9:88:87:39:64:1b:0a:a0:65:0c:14:95:75:f8:7a:6e:10:46:
         60:b3:a5:7d:0e:0e:28:96:76:ea:0a:22:65:2f:f7:88:b2:6c:
         d8:e7:c5:f0:42:b9:4c:78:7b:56:3b:8d:91:b2:16:ef:fe:e2:
         62:b9:64:f3:2b:f4:d4:d7:3d:7b:d3:9b:f1:e2:60:5f:98:e9:
         19:6e:12:da:53:06:75:a9:fb:68:86:d8:22:df:b3:e9:a0:47:
         d6:49:46:34:5c:11:8e:a0:10:26:44:7b:65:69:2b:78:49:65:
         65:c6:27:9d:bf:2f:d9:91:b4:bd:9b:7c:62:f6:8d:fd:42:d7:
         55:0c:61:4b:a0:a0:8f:22:7e:ed:c9:28:27:65:ad:b1:43:b5:
         a9:62:c4:c7:24:7b:ad:1b:6d:25:73:76:8c:c3:eb:ac:25:6b:
         b5:f4:a5:66:af:1f:9c:ee:b8:c9:7b:76:51:81:c0:a6:8b:d1:
         46:73:70:eb:d1:38:b1:2b:ef:0a:00:a1:3b:71:7b:41:b1:fc:
         ab:b9:4b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 11:19:41 2024 by rpki-client on console-ams.rpki-client.org