Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3332203d3e203634313331.roa
File:                     323830333a366131303a3a2f33322d3332203d3e203634313331.roa (raw, json)
Hash identifier:          Anyzud8rtQa3MBTh9vef3aTLUKNJAVJ3UgseYlQAeAY=
Subject key identifier:   03:CE:66:8B:39:31:4A:F4:0B:9D:27:9C:33:C4:9C:98:1D:BE:C6:03
Certificate issuer:       /CN=4F8BDA7981C17C999F0DEF92264319AC1A10CE1D
Certificate serial:       1CE177492B5D923F4B4DCA7BB0A402C1AF53E71F
Authority key identifier: 4F:8B:DA:79:81:C1:7C:99:9F:0D:EF:92:26:43:19:AC:1A:10:CE:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3332203d3e203634313331.roa
Signing time:             Tue 05 Mar 2024 18:15:02 +0000
ROA not before:           Tue 05 Mar 2024 18:10:02 +0000
ROA not after:            Tue 04 Mar 2025 18:15:02 +0000
asID:                     64131
IP address blocks:        2803:6a10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e1:77:49:2b:5d:92:3f:4b:4d:ca:7b:b0:a4:02:c1:af:53:e7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F8BDA7981C17C999F0DEF92264319AC1A10CE1D
        Validity
            Not Before: Mar  5 18:10:02 2024 GMT
            Not After : Mar  4 18:15:02 2025 GMT
        Subject: CN=03CE668B39314AF40B9D279C33C49C981DBEC603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:86:f8:90:ec:7b:64:cf:7e:41:b5:41:fd:
                    71:22:6c:f4:a8:61:9a:56:6f:dd:bf:69:a0:3d:89:
                    c7:4e:1a:c3:d3:db:1b:ea:a7:1e:c5:41:17:87:51:
                    5b:0f:81:c8:4f:6c:bc:0a:35:06:90:52:64:9a:52:
                    48:53:51:22:99:36:e8:7e:99:4b:e7:c9:d5:52:34:
                    b2:ee:08:7a:4f:8c:52:ae:04:3d:ef:8c:46:2d:b7:
                    c7:5b:03:6e:6c:2c:f7:66:11:b0:59:1c:f5:2e:17:
                    a8:a2:25:d2:41:5b:97:0c:5c:4d:3f:f0:f2:e3:41:
                    1e:da:9e:ac:06:85:9a:f9:a4:6e:e9:32:a0:c0:6e:
                    29:99:6e:77:3a:31:7a:39:df:3c:e4:69:7a:a8:d0:
                    76:55:99:ca:b6:08:34:44:6d:99:76:8e:1a:56:b0:
                    fd:52:48:a6:a6:84:f8:79:e8:6b:2a:cc:15:48:a6:
                    0a:68:ee:b0:3e:4b:cc:4d:21:b5:ef:1e:06:60:31:
                    c1:ca:8d:af:ea:de:f4:3d:03:e8:10:e5:92:97:7c:
                    e2:b2:55:1d:7d:0e:e4:90:7a:2b:7f:2a:6b:64:eb:
                    42:73:57:6b:69:1f:1c:f3:25:f4:29:d8:88:ca:75:
                    ff:91:3d:3b:0c:b1:09:bc:23:38:26:e5:29:56:cb:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CE:66:8B:39:31:4A:F4:0B:9D:27:9C:33:C4:9C:98:1D:BE:C6:03
            X509v3 Authority Key Identifier:
                keyid:4F:8B:DA:79:81:C1:7C:99:9F:0D:EF:92:26:43:19:AC:1A:10:CE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3332203d3e203634313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:53:11:a8:5f:ee:fa:25:a3:24:c6:e9:81:3b:12:aa:9f:bd:
         cc:7e:bb:1b:4c:a5:48:ca:d7:d4:b4:1c:ae:ec:35:34:09:9f:
         43:60:1e:fa:7b:99:ab:89:5a:f6:5b:a6:aa:4b:c2:13:6c:22:
         25:7c:cd:c2:73:32:1f:2a:01:09:72:6a:5f:72:58:c7:43:7d:
         00:db:a7:b3:da:75:a3:59:8c:fb:d4:e5:e2:a5:cf:2f:9f:58:
         e0:9f:30:2a:90:65:ad:7a:2c:c1:1f:fc:e7:37:77:84:10:f9:
         66:fa:db:04:96:da:64:02:da:32:77:f7:0a:6c:bc:9f:fd:9b:
         d2:11:28:31:14:f7:aa:74:f8:fa:3a:de:61:97:20:7c:7a:1f:
         68:3c:d4:f0:64:78:2b:09:3c:46:69:29:fa:5b:f4:bb:19:3d:
         ce:d9:a8:5d:1e:2b:0f:13:e2:8a:2f:a6:a3:29:e9:91:cf:15:
         af:f7:8e:37:fd:ac:bc:95:f2:b6:d1:f2:18:9c:86:a3:69:69:
         5b:ec:91:11:ed:64:74:24:45:ba:d5:4d:ec:54:94:0c:d6:4d:
         6f:77:55:9b:90:95:63:b0:7e:52:2c:18:d4:72:f9:d5:53:d1:
         4e:6b:f8:16:d1:c3:c7:bb:50:c4:85:fe:2f:6d:e9:88:4d:64:
         e6:3f:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:56 2024 by rpki-client on console-ams.rpki-client.org