Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a343538303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          i0O8RgGz++83eBUcTr2PGnA27QLCewNY5WNbltop47I=
Subject key identifier:   15:95:24:2E:EB:8E:92:03:B0:44:70:CA:B7:EE:BC:55:5C:F8:C7:05
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       43F0229DA0CA2D4A2D4E44B4B2CE941945918573
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:51:20 +0000
ROA not before:           Tue 05 Mar 2024 17:46:20 +0000
ROA not after:            Tue 04 Mar 2025 17:51:20 +0000
asID:                     52468
IP address blocks:        2803:4580::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f0:22:9d:a0:ca:2d:4a:2d:4e:44:b4:b2:ce:94:19:45:91:85:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Mar  5 17:46:20 2024 GMT
            Not After : Mar  4 17:51:20 2025 GMT
        Subject: CN=1595242EEB8E9203B04470CAB7EEBC555CF8C705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:84:ae:b7:5b:0b:ef:7c:f8:0f:ad:90:e7:
                    cc:af:cf:61:c0:d5:9c:29:9c:65:d5:5a:3c:f2:f0:
                    e3:0f:62:8d:ea:de:9a:8a:02:a3:df:d5:e6:81:2f:
                    5a:56:be:4e:af:0c:5a:a3:ea:da:31:a4:34:9a:9b:
                    cd:08:e6:28:48:d6:f7:46:94:35:11:94:83:ce:8e:
                    7f:cd:e7:6b:f2:b1:30:21:95:c1:ce:98:c8:1a:f1:
                    d9:5d:34:a0:8e:f6:1c:23:8b:04:f8:a9:33:85:8f:
                    88:5b:5f:7d:93:0e:1e:63:34:33:a2:e3:e1:b1:32:
                    27:e7:e7:98:ec:14:b6:f3:4d:87:bd:2d:c0:5e:24:
                    7c:c9:72:1d:9e:9a:90:b0:50:bd:8a:70:f2:60:04:
                    d8:c6:83:c3:4c:95:c4:e0:30:81:eb:33:24:0c:24:
                    c2:bc:52:13:55:89:e1:b8:f4:dd:c5:06:50:79:45:
                    20:45:2a:93:6a:38:39:ea:b0:b5:01:06:39:f2:bf:
                    01:8f:c4:e4:ce:f8:31:d1:e7:1f:33:87:b0:24:a9:
                    c6:33:4f:4f:91:c2:b5:89:72:23:8c:d6:e6:86:db:
                    d0:23:b4:1f:65:3e:f2:e8:99:df:54:ad:93:ab:a5:
                    e6:97:9c:a7:3e:51:03:f7:1e:fd:59:1a:58:cc:54:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:95:24:2E:EB:8E:92:03:B0:44:70:CA:B7:EE:BC:55:5C:F8:C7:05
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:55:56:d8:27:e0:d9:3b:0a:e9:b6:3e:27:8b:c2:3a:92:07:
         a7:c1:7e:a0:15:4b:2a:ad:54:83:ac:f2:87:ca:aa:d6:11:5c:
         89:dd:cc:a4:f5:19:7b:f8:bd:5b:76:d6:9f:bc:03:35:71:ce:
         57:8f:c1:da:6f:71:a0:00:de:57:c4:dc:ae:ff:de:b2:df:57:
         a7:c1:67:1f:21:77:2c:a4:c0:41:45:77:35:f9:8d:62:d4:5a:
         86:92:87:8b:06:d3:3c:7c:fd:af:b3:2a:f5:5f:9e:0c:a7:75:
         cb:b7:ee:53:4c:3d:2a:e0:3d:4a:d6:0e:c8:cd:72:76:3b:cb:
         d8:d5:2a:0d:60:80:1f:32:fe:0c:86:63:e4:25:d2:46:c9:b9:
         a9:c0:aa:74:57:43:bd:89:be:51:b1:ed:c3:bd:3d:14:63:90:
         70:5e:e8:86:f9:45:b9:f6:31:5e:6c:b0:13:92:c6:be:27:51:
         2c:33:a9:74:b5:ab:f5:60:0f:b4:50:c1:54:e3:57:87:7b:e0:
         c0:a4:a8:68:70:19:0f:bc:81:06:9c:77:02:57:b9:76:2f:73:
         2d:06:b5:05:d9:57:0a:2b:26:74:0b:07:40:46:40:5b:b6:26:
         56:12:38:57:9d:2f:90:54:66:c9:aa:e3:48:cb:39:3e:dd:f4:
         f3:d6:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:47 2024 by rpki-client on console-ams.rpki-client.org