Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/323830333a383930303a3a2f33322d3438203d3e203532343133.roa
File:                     323830333a383930303a3a2f33322d3438203d3e203532343133.roa (raw, json)
Hash identifier:          gqqmQK4OM1O9NNNw7SNh7ixPKi/w6p+XYn+cLBMSnBQ=
Subject key identifier:   D0:C1:1D:22:02:71:CF:64:F4:63:A2:0D:A9:5C:A3:56:78:F0:23:77
Certificate issuer:       /CN=0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C
Certificate serial:       7450F487E676C586076FC92C3687C9AF8C7541F8
Authority key identifier: 0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/323830333a383930303a3a2f33322d3438203d3e203532343133.roa
Signing time:             Tue 05 Mar 2024 17:54:28 +0000
ROA not before:           Tue 05 Mar 2024 17:49:28 +0000
ROA not after:            Tue 04 Mar 2025 17:54:28 +0000
asID:                     52413
IP address blocks:        2803:8900::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:50:f4:87:e6:76:c5:86:07:6f:c9:2c:36:87:c9:af:8c:75:41:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C
        Validity
            Not Before: Mar  5 17:49:28 2024 GMT
            Not After : Mar  4 17:54:28 2025 GMT
        Subject: CN=D0C11D220271CF64F463A20DA95CA35678F02377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:48:d2:8c:e3:96:f4:bf:a9:47:3e:7b:14:
                    35:06:50:e0:cc:74:e5:e9:a5:3e:72:5a:7d:bb:0f:
                    c2:4a:28:e2:25:57:f1:ac:48:58:df:2c:e0:c2:e8:
                    c5:4e:24:30:cb:c5:32:a8:73:2e:a1:d1:9e:a9:e0:
                    42:a3:63:b8:6c:b3:4a:ce:72:db:1a:9f:3a:58:41:
                    c3:5f:9a:04:c0:f6:77:94:60:48:8f:eb:c8:b4:5e:
                    7c:39:d8:88:c6:48:a1:7a:a1:e5:7b:47:02:fc:4a:
                    41:4d:33:10:6b:ca:24:5a:00:1b:40:ee:fe:07:0f:
                    c5:bf:df:10:f3:dc:da:c8:fc:b3:2d:18:6c:6f:fa:
                    19:55:03:e8:a9:cc:b3:87:d7:b9:9e:de:5d:41:95:
                    9f:65:07:03:a6:63:c1:72:95:28:7a:7f:e8:0b:dc:
                    8e:16:74:be:6c:90:fb:19:4d:e0:3c:78:43:9c:7d:
                    ff:b8:a2:c4:2a:51:61:94:99:4f:90:37:dc:33:f4:
                    99:54:fb:b7:be:a0:54:bb:cd:82:a8:40:a8:ab:a8:
                    8c:40:09:de:88:a3:48:58:e3:e0:04:49:8f:7b:54:
                    9a:8f:a3:1e:5c:0c:b0:1a:33:f0:92:cd:f6:b6:f4:
                    2d:ba:4d:cc:64:9c:fe:12:4b:9d:ea:d1:1c:5b:d6:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:1D:22:02:71:CF:64:F4:63:A2:0D:A9:5C:A3:56:78:F0:23:77
            X509v3 Authority Key Identifier:
                keyid:0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/323830333a383930303a3a2f33322d3438203d3e203532343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8900::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:bd:98:a8:3f:bf:b8:fd:f5:0e:9a:83:08:e1:6f:d6:70:
         fb:85:1f:16:be:8d:18:b2:2d:cb:5a:ef:fd:2b:40:5c:a8:39:
         50:e5:86:05:5d:b4:90:af:8f:b5:b5:fe:94:0a:14:23:0e:d2:
         5b:01:43:ff:58:64:7b:f8:f6:84:a8:4e:87:9f:f8:f6:2d:de:
         a0:9e:59:be:01:17:c8:78:11:c9:d7:5c:41:ab:0c:15:e5:85:
         95:a0:69:e6:f8:90:8b:6a:9a:e2:38:05:56:72:5b:c9:de:59:
         f5:2f:3b:7f:a6:15:53:60:c3:a1:ce:31:a2:56:36:a8:bf:e6:
         df:ec:8b:ee:b5:af:75:bb:a1:02:84:b2:d1:dc:f0:c9:8a:97:
         9c:45:84:0b:c6:9f:a6:ae:16:76:5e:f0:90:fe:90:db:51:f8:
         20:56:00:72:ac:74:c1:b9:61:75:0c:2c:4f:f6:bf:ca:51:89:
         c7:10:77:35:15:03:b5:2d:bc:18:70:a9:2e:c4:3d:8c:2c:26:
         63:4b:99:78:cf:11:68:00:2b:43:3e:5d:88:07:ba:5b:ec:03:
         cc:c0:bd:24:92:40:ee:01:81:e3:aa:34:c2:68:c2:01:c3:34:
         f8:41:c4:74:12:55:08:2f:df:1b:71:07:5a:6c:98:5c:30:20:
         9a:03:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org