Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203131303134.roa
File:                     323830333a656365303a3a2f33322d3332203d3e203131303134.roa (raw, json)
Hash identifier:          oGcELzHhklDvGddePVVdrWiYtkROhe5Rkj5vL+zdhK0=
Subject key identifier:   93:FE:99:3B:27:88:79:D8:AC:62:BA:93:48:09:30:68:64:1D:46:AB
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       2AECEF2E404E77C53A88CAEAC071E3710EE8EB6B
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 18:23:19 +0000
ROA not before:           Tue 05 Mar 2024 18:18:19 +0000
ROA not after:            Tue 04 Mar 2025 18:23:19 +0000
asID:                     11014
IP address blocks:        2803:ece0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ec:ef:2e:40:4e:77:c5:3a:88:ca:ea:c0:71:e3:71:0e:e8:eb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Mar  5 18:18:19 2024 GMT
            Not After : Mar  4 18:23:19 2025 GMT
        Subject: CN=93FE993B278879D8AC62BA9348093068641D46AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:46:be:6d:2e:88:4e:98:10:01:d1:7c:fb:
                    aa:ad:66:4c:bf:1a:19:15:34:05:31:f8:a1:b6:4c:
                    1f:96:94:42:69:49:7a:f0:f4:6b:0c:af:bf:c4:af:
                    ea:c1:e6:fb:17:1b:30:c1:ae:ec:36:93:66:b8:ff:
                    53:2d:31:f0:c6:f0:ca:92:45:a2:8a:eb:5b:47:d6:
                    cc:6e:0f:85:3c:57:bc:de:b1:80:3a:e4:81:a1:fa:
                    12:56:ed:48:e2:da:51:0e:12:73:45:57:ef:e1:f1:
                    f3:a5:7e:e5:60:f3:03:4b:0f:c6:d7:76:9b:d4:35:
                    8d:44:9e:10:5d:17:91:c5:9a:e3:f7:7b:bc:fc:f3:
                    af:a6:bc:04:b1:a5:6f:a7:b5:f3:7b:8b:99:f6:59:
                    18:f1:a1:b3:e0:df:d8:54:a5:74:4d:78:76:aa:ab:
                    14:b8:72:2f:1d:f2:3d:1d:72:95:41:ab:37:62:36:
                    d8:e3:8f:6e:6c:5b:87:8b:92:f8:9e:7c:75:0b:a6:
                    df:e0:df:f1:14:93:ed:b7:ba:b0:c6:5b:a9:c4:92:
                    0b:a8:a7:e7:55:b7:7a:de:c9:53:ec:c2:87:4c:8b:
                    ba:c3:23:00:f9:b9:12:11:05:31:08:d9:29:3c:44:
                    2c:30:27:59:16:91:db:39:49:5e:90:ee:da:72:bf:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FE:99:3B:27:88:79:D8:AC:62:BA:93:48:09:30:68:64:1D:46:AB
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:34:3a:b0:81:89:41:91:cc:10:a8:7d:9e:13:3e:93:e1:
         15:02:92:89:7f:d9:e3:08:b2:4b:00:9f:3d:32:da:a8:52:e6:
         8f:ab:30:5a:46:3c:bb:6a:aa:37:86:c4:48:12:12:71:9a:b0:
         22:0b:2a:71:7d:27:bf:6a:9b:6f:f8:b9:6d:a0:91:6c:77:55:
         15:36:31:50:39:55:f5:cb:5f:be:73:46:58:2b:6f:f9:91:79:
         06:b5:5e:3c:00:ad:aa:13:28:e1:d2:be:dd:ac:50:06:08:cf:
         b8:6b:d6:34:f5:0b:d7:d6:d0:07:fa:2f:25:61:a3:ad:11:d9:
         0d:80:c2:8a:fe:d8:72:45:28:52:a6:e8:e0:fc:43:17:db:94:
         fe:80:ed:48:58:89:9c:28:36:2d:08:da:50:c9:c5:20:c6:1f:
         10:72:2d:f8:3a:e9:2e:4d:a7:cd:ea:82:fa:21:46:b9:ff:6f:
         0b:a0:46:bd:0e:6e:48:dc:30:06:ae:c9:25:be:a1:db:cd:02:
         b9:2b:6b:3d:a3:92:d6:57:b9:57:12:17:3d:5f:09:fd:4d:84:
         96:dd:85:0e:dc:e8:1f:5e:00:ab:92:d6:c7:77:50:dc:c7:43:
         b8:60:cc:73:e8:09:44:d5:72:2d:00:78:0f:ec:f1:fb:08:d6:
         db:c2:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:45:13 2024 by rpki-client on console-ams.rpki-client.org