Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303134.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203131303134.roa (raw, json)
Hash identifier:          KZr9W0P6B8aFe/0lL2PDNCuGrNcAAJ777EM1yLcMNQM=
Subject key identifier:   8C:0A:3B:E1:38:39:D2:F4:F2:90:0F:4D:44:B8:53:19:F4:48:F3:4C
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       54F0497C9337E2328432E659060BDB98B6B27401
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:41:37 +0000
ROA not before:           Tue 05 Mar 2024 17:36:37 +0000
ROA not after:            Tue 04 Mar 2025 17:41:37 +0000
asID:                     11014
IP address blocks:        2801:0:440::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 06:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f0:49:7c:93:37:e2:32:84:32:e6:59:06:0b:db:98:b6:b2:74:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:37 2024 GMT
            Not After : Mar  4 17:41:37 2025 GMT
        Subject: CN=8C0A3BE13839D2F4F2900F4D44B85319F448F34C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:b5:a5:27:16:29:7e:e0:c6:e7:c2:da:d9:
                    ef:d7:54:68:61:27:7a:86:b7:bd:d1:91:05:cb:e6:
                    b3:86:f4:f3:09:64:e7:2e:4b:24:56:ec:4e:38:18:
                    43:05:9f:54:c5:ee:1d:91:d8:36:78:84:ce:6d:c9:
                    5d:94:0a:7a:4c:1b:67:4c:7a:8e:ee:e1:7f:c1:b7:
                    98:f8:51:ac:95:82:27:6a:a4:19:ac:75:25:3c:05:
                    91:8d:ed:14:d5:dd:e5:fb:89:f0:6f:70:8c:a2:e5:
                    e0:55:e8:66:99:91:e8:73:32:5e:36:04:a6:2d:85:
                    e5:bb:07:0f:04:1c:a7:da:c9:45:a0:05:ea:f6:07:
                    94:1e:ac:79:06:d2:ea:f5:30:c3:37:69:61:bd:04:
                    6e:b2:db:6d:0a:1a:7e:b5:a6:00:48:d0:8d:23:7e:
                    f2:5f:17:96:91:a3:9b:b5:31:d7:49:d7:aa:65:fd:
                    7e:43:b7:eb:a6:b3:f0:66:00:8b:86:20:07:de:39:
                    3b:b2:39:25:56:9d:da:e7:38:24:30:d4:4e:6a:e2:
                    65:1d:1c:57:9c:de:63:e9:1c:1c:11:50:1c:02:f1:
                    0e:75:c3:c8:fc:bf:95:d0:18:41:05:c8:f3:ed:23:
                    de:5e:64:29:95:1f:ca:a3:a8:5f:6c:cd:36:98:77:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0A:3B:E1:38:39:D2:F4:F2:90:0F:4D:44:B8:53:19:F4:48:F3:4C
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:44:67:f0:da:1d:c4:bb:2d:13:8c:e1:d3:df:cc:77:31:eb:
         f8:0b:ce:11:6b:9f:39:63:5c:e2:68:81:57:ce:1f:44:da:2f:
         25:f7:b8:d4:e4:4b:39:0e:af:24:89:e9:35:9b:ae:1b:b1:eb:
         06:b5:40:f5:20:73:27:d8:b1:28:32:f1:96:3c:0c:0b:25:37:
         c7:81:ee:80:d1:74:b1:f3:83:c2:dd:da:0b:96:a4:df:28:bb:
         7e:80:0c:d3:f7:0a:98:2d:c4:04:82:f2:72:86:25:d1:d1:7f:
         25:66:bd:43:2d:3e:4a:81:2e:b0:cb:f0:d1:a4:9d:05:1f:7d:
         c0:92:6a:17:03:bb:8a:60:31:f4:da:19:d1:b1:da:53:98:a7:
         53:94:90:76:5c:dd:c5:60:01:52:01:40:cd:57:8b:94:2c:14:
         25:bb:d0:28:9f:ab:73:9f:4a:7b:22:13:61:62:11:2b:e6:be:
         6b:ef:80:99:5d:42:6f:3d:23:87:62:65:47:9e:dc:91:6c:a6:
         30:fb:00:e2:2e:f1:43:22:ff:e1:02:06:95:c7:8c:08:d8:ec:
         25:c6:5e:93:ae:7c:5d:70:b1:9b:f8:3f:3b:de:00:80:ff:d0:
         b1:f7:3b:c1:07:8d:7b:57:d4:5f:ac:ac:d8:0c:e9:7c:90:6a:
         e3:ca:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:16:17 2024 by rpki-client on console-ams.rpki-client.org