Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/323830333a646265303a3a2f33362d3438203d3e20323731383137.roa
File:                     323830333a646265303a3a2f33362d3438203d3e20323731383137.roa (raw, json)
Hash identifier:          latFkZ1qs++qCFm8cHf3SuCOCSzdeYvtZTriCsVhNj4=
Subject key identifier:   FB:39:17:D7:27:A7:85:AC:F0:5C:D1:61:9A:B5:BF:95:B2:8D:F3:2F
Certificate issuer:       /CN=4F552B32D5F869D8DBEF844D9523A2A5FBA57968
Certificate serial:       15EEFB329A8B566F0FCFE2450CCCAD177F78ED8D
Authority key identifier: 4F:55:2B:32:D5:F8:69:D8:DB:EF:84:4D:95:23:A2:A5:FB:A5:79:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/323830333a646265303a3a2f33362d3438203d3e20323731383137.roa
Signing time:             Tue 05 Mar 2024 18:16:14 +0000
ROA not before:           Tue 05 Mar 2024 18:11:14 +0000
ROA not after:            Tue 04 Mar 2025 18:16:14 +0000
asID:                     271817
IP address blocks:        2803:dbe0::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ee:fb:32:9a:8b:56:6f:0f:cf:e2:45:0c:cc:ad:17:7f:78:ed:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F552B32D5F869D8DBEF844D9523A2A5FBA57968
        Validity
            Not Before: Mar  5 18:11:14 2024 GMT
            Not After : Mar  4 18:16:14 2025 GMT
        Subject: CN=FB3917D727A785ACF05CD1619AB5BF95B28DF32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:ba:48:16:52:eb:26:a0:be:91:bd:77:11:
                    ee:31:bc:bd:31:1d:6b:20:db:38:4a:33:55:b7:e8:
                    75:a8:5c:f1:09:4c:c5:b5:d5:0a:67:a2:ae:1f:e1:
                    59:9b:de:e2:df:14:ab:1b:f2:ca:e0:47:ca:e3:54:
                    6c:ec:a6:13:cb:d6:7e:83:dc:8a:14:a0:3f:a2:39:
                    49:51:3d:38:f3:c6:ef:74:5c:67:a5:11:7b:31:d5:
                    76:80:89:26:85:b5:f1:bc:a1:c3:1f:af:19:8f:2c:
                    7c:ca:b3:95:f0:b0:c1:43:06:03:a7:53:da:3f:46:
                    ac:df:22:a6:b2:02:9f:1d:c1:ea:b2:5a:ad:48:5f:
                    80:b4:c6:60:81:d9:e0:fa:a7:36:1f:3a:19:66:59:
                    80:09:31:7b:4c:a4:80:15:d4:8f:ff:f9:4f:e5:45:
                    81:a6:95:bc:46:75:83:b4:6a:22:80:00:61:1e:27:
                    c4:2e:d9:f1:67:d8:c8:a5:70:9c:7b:86:90:fa:c2:
                    a1:c7:46:9f:7e:df:35:e6:d5:2a:27:c5:a4:f9:25:
                    dc:fa:e7:a2:aa:4e:6e:19:9b:0c:fa:d7:67:a0:53:
                    2e:96:c1:14:0e:66:41:2d:b2:0c:6e:4d:35:68:fe:
                    4c:48:89:b3:aa:ec:cd:d1:ca:5a:dc:bf:5d:3f:f2:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:17:D7:27:A7:85:AC:F0:5C:D1:61:9A:B5:BF:95:B2:8D:F3:2F
            X509v3 Authority Key Identifier:
                keyid:4F:55:2B:32:D5:F8:69:D8:DB:EF:84:4D:95:23:A2:A5:FB:A5:79:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F552B32D5F869D8DBEF844D9523A2A5FBA57968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42498B319994FB1CF99A565ABB24FD6553D4F33B43752C3238258B8AE49AE09B/0/323830333a646265303a3a2f33362d3438203d3e20323731383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dbe0::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:04:6e:c6:1e:d4:d4:26:39:18:58:25:86:01:7b:7d:d2:15:
         bf:3d:b0:ec:36:f3:f9:72:93:1e:d3:8a:11:00:62:a1:49:1f:
         94:2b:5e:9c:c0:be:b8:80:29:01:08:8e:b0:47:1e:52:7f:ab:
         16:ed:f5:bc:ee:a2:d0:f7:be:b4:18:86:00:81:f8:e0:29:75:
         61:05:71:91:e9:1f:c2:4a:ce:83:c7:b1:2a:83:3d:9f:e4:86:
         3a:6f:30:a9:4a:bd:b1:78:05:1e:56:e3:0c:0f:b3:89:63:54:
         f6:33:d6:db:c0:dd:dc:91:79:87:4f:a3:87:22:b9:0a:e1:76:
         8d:89:c4:31:f7:18:9c:b6:83:70:b7:ff:2d:41:df:e7:8e:b3:
         16:ab:fc:da:69:3f:45:d6:24:b9:1f:b5:ca:01:41:56:f4:b9:
         01:10:f2:fe:d1:90:74:8f:05:e0:70:c1:3f:45:9b:1f:cd:ca:
         0d:5d:97:39:66:eb:22:23:23:90:e3:b5:07:17:fb:12:c5:f1:
         be:a3:7f:82:bb:c3:79:3d:0f:a4:27:f4:97:75:60:24:f7:e9:
         18:59:c0:d8:c3:21:c3:64:1b:28:d5:a5:6d:d8:6d:d9:ca:4b:
         7d:a0:98:1d:83:b5:bf:42:2f:9a:cf:97:d4:ff:9a:ee:8d:42:
         07:5a:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org