Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a643130303a3a2f33322d3438203d3e203532333632.roa
File:                     323830333a643130303a3a2f33322d3438203d3e203532333632.roa (raw, json)
Hash identifier:          WbJK+li72UovH4LiL9/g978cpKlzamZQUG/C0t/RH3U=
Subject key identifier:   4A:9E:41:47:67:85:8D:4E:4E:41:6C:2D:60:42:9B:ED:0A:0B:5F:34
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       2F41C9F2CEA3BF8CF62056EEBCF1208CFD349587
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a643130303a3a2f33322d3438203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:02 +0000
ROA not before:           Tue 05 Mar 2024 17:51:02 +0000
ROA not after:            Tue 04 Mar 2025 17:56:02 +0000
asID:                     52362
IP address blocks:        2803:d100::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:41:c9:f2:ce:a3:bf:8c:f6:20:56:ee:bc:f1:20:8c:fd:34:95:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:02 2024 GMT
            Not After : Mar  4 17:56:02 2025 GMT
        Subject: CN=4A9E414767858D4E4E416C2D60429BED0A0B5F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:52:89:a4:e6:0a:aa:c0:1b:cc:71:16:23:
                    39:2e:08:97:5b:6d:3e:3f:4d:b7:5c:db:6d:77:a3:
                    c0:97:47:db:4c:28:25:bf:50:93:bc:bc:25:a0:89:
                    29:1b:b9:d9:ac:44:81:6d:8b:0c:79:d2:98:c8:9b:
                    9a:6d:fb:b7:7c:39:74:c5:97:c9:35:d5:0c:88:43:
                    c9:66:b3:04:f4:3b:0c:8b:2a:93:63:09:cf:5a:85:
                    bb:c6:aa:cf:86:b4:7e:8f:b4:cf:66:98:df:0f:15:
                    08:c8:91:cd:56:ea:22:87:9a:72:ff:f7:ec:6d:b8:
                    78:9b:48:6e:3e:cd:8b:45:5a:d2:e7:b0:00:09:43:
                    ee:5e:9f:1e:3d:eb:f3:e7:60:3f:b4:ca:bd:db:b1:
                    6f:b0:02:8e:43:94:8b:ed:de:b8:47:00:3e:db:1b:
                    a5:89:bb:9d:90:54:18:5c:20:aa:a8:41:69:27:9d:
                    ab:44:14:24:ac:75:64:e7:7f:f8:b5:9c:54:ed:62:
                    fd:97:df:58:ef:32:6b:2f:80:5f:90:c5:fe:3e:99:
                    a4:eb:dd:49:e3:94:42:4a:1c:b1:34:bb:2f:9c:ec:
                    38:b4:c3:d4:32:96:c5:97:32:0f:1d:63:22:91:ef:
                    38:be:01:56:6a:08:dd:0f:26:76:69:36:10:40:e2:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9E:41:47:67:85:8D:4E:4E:41:6C:2D:60:42:9B:ED:0A:0B:5F:34
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a643130303a3a2f33322d3438203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d100::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:88:a6:ec:e5:16:39:eb:03:fd:32:ce:60:52:63:f0:e7:cf:
         db:03:d0:dd:96:4a:c9:5b:5c:7b:9a:02:22:d2:b3:f2:02:9a:
         4b:1e:f7:33:f1:39:2c:15:ad:b2:13:7b:95:6a:24:68:31:d2:
         9f:8a:63:96:0a:0e:28:83:1b:16:b8:1c:f6:94:78:da:33:68:
         e5:50:e3:70:55:00:b8:6c:64:6f:f4:8c:4c:78:e6:97:8c:68:
         b1:38:52:3e:b5:99:35:85:6f:f1:7d:59:b2:66:20:65:5c:8a:
         c9:0c:7b:81:e4:e4:1c:e3:92:70:4a:b0:c1:26:95:a4:15:c9:
         b8:b7:25:87:d8:0b:4e:f6:d8:ec:66:7b:6a:8a:0a:69:75:09:
         c5:b6:8f:fb:1a:7b:44:fc:d6:af:8a:97:67:1f:7d:db:68:88:
         55:9c:da:88:c5:2b:8c:ea:e5:3f:6e:2a:0f:d8:7b:12:82:fa:
         36:f8:53:b9:a9:df:0e:06:3b:4f:92:02:86:e5:46:00:39:94:
         45:9a:9e:95:ba:26:ac:37:e1:7a:97:60:fe:81:fd:08:8e:e4:
         fb:d7:f4:69:09:1d:4e:04:e0:cd:ab:0c:26:85:48:da:b7:05:
         a8:ac:dc:b0:74:cf:52:c0:01:a4:3a:17:a9:7e:1a:3f:07:c5:
         95:8f:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:03:52 2024 by rpki-client on console-ams.rpki-client.org