Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203532343039.roa
File:                     323830333a656365303a3a2f33322d3332203d3e203532343039.roa (raw, json)
Hash identifier:          cwTMrII/I0DwL8JFZsftW2PxkfWoix4GLjBPe2AZTV0=
Subject key identifier:   B0:32:59:1E:A1:91:20:DE:B8:83:68:0C:FF:E4:29:09:85:B4:13:34
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       2A2D0008FEC5BFA1DF736D00E9325B0862FC5DAC
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203532343039.roa
Signing time:             Tue 05 Mar 2024 18:23:20 +0000
ROA not before:           Tue 05 Mar 2024 18:18:20 +0000
ROA not after:            Tue 04 Mar 2025 18:23:20 +0000
asID:                     52409
IP address blocks:        2803:ece0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2d:00:08:fe:c5:bf:a1:df:73:6d:00:e9:32:5b:08:62:fc:5d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Mar  5 18:18:20 2024 GMT
            Not After : Mar  4 18:23:20 2025 GMT
        Subject: CN=B032591EA19120DEB883680CFFE4290985B41334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:f1:fe:34:2b:b3:23:18:88:10:d8:01:de:
                    96:68:dc:05:65:0f:75:76:fb:23:1f:98:64:1d:ee:
                    e9:96:56:86:b4:cc:a7:b4:cd:d3:93:30:92:7d:57:
                    60:20:ce:e1:d2:94:70:b5:5d:a3:94:18:a5:18:88:
                    06:18:06:34:9b:51:04:06:f3:b3:27:be:67:6b:19:
                    37:77:78:10:4c:e5:3a:08:c7:28:9e:57:38:52:b7:
                    8e:a7:1f:1b:bf:eb:95:45:2a:b4:94:ba:72:8f:b8:
                    ee:3f:b9:ba:6a:4e:1c:b6:30:ad:50:aa:1c:29:1c:
                    16:96:11:17:df:33:f4:28:d3:cd:54:c4:10:be:b7:
                    fc:b1:06:73:28:ad:95:c2:4d:c6:eb:89:a6:e7:fd:
                    8a:cc:d6:9e:a1:b2:7c:f8:7b:1d:2d:e8:32:69:90:
                    6c:05:c8:45:43:55:9f:ea:bc:bc:9f:78:9a:bd:52:
                    51:b6:49:a9:8e:47:a7:da:c9:ca:b2:3d:03:67:99:
                    62:cd:ad:d4:1a:83:23:ab:3a:ec:1e:cb:c0:4f:f0:
                    1d:26:63:df:93:0d:9e:77:b9:81:05:eb:36:e0:2e:
                    a8:6e:b1:44:d4:dd:d5:1c:16:f4:58:fd:ba:8a:e4:
                    22:d9:8f:94:40:e9:39:ad:8b:c5:0b:4f:21:1c:95:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:32:59:1E:A1:91:20:DE:B8:83:68:0C:FF:E4:29:09:85:B4:13:34
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e203532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:de:f5:7e:0e:9c:58:95:af:d5:c1:8d:38:b3:69:04:eb:51:
         83:39:41:fb:65:7f:f0:b8:26:6f:b4:a5:56:1d:ca:1e:5b:1e:
         da:da:3c:48:80:aa:ae:97:29:08:75:ac:3a:1d:84:ae:d5:3c:
         04:bf:e4:54:97:39:fb:0b:5c:b1:53:88:9a:2c:ba:b6:2e:2b:
         42:10:39:80:70:c0:f9:0f:fe:b1:a4:7e:99:61:d0:5d:25:27:
         ef:c4:0e:0c:51:40:cd:8c:0b:3a:9b:b5:b4:c2:0c:78:c4:ef:
         79:2a:ca:17:10:49:68:cd:85:85:96:20:3d:b6:f4:88:ed:b5:
         29:ba:25:13:26:2b:ff:38:26:41:11:99:55:85:78:a1:0e:26:
         e4:a5:ea:77:7e:52:40:47:94:74:f1:08:b1:6d:de:0e:3a:a7:
         14:bf:d3:a5:2d:34:94:67:26:75:84:e5:60:d2:62:9b:28:73:
         d6:2f:d0:a2:92:d4:74:7d:13:90:01:5f:c5:dc:95:07:61:2a:
         03:2f:1b:97:1e:73:7a:2f:85:b2:cb:fe:b2:2f:c1:b9:4f:8b:
         8e:39:f2:39:5c:32:90:43:30:77:48:9a:97:57:7a:38:14:a9:
         6e:86:35:9e:72:20:6b:1f:af:9c:09:ec:d0:86:ec:5a:a4:70:
         13:f0:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:51:20 2024 by rpki-client on console-fra.rpki-client.org