Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/323830333a333631303a3a2f33322d3438203d3e20323731393531.roa
File:                     323830333a333631303a3a2f33322d3438203d3e20323731393531.roa (raw, json)
Hash identifier:          xHSo3GWyVeQWJ8/AYZqc7TuaDMtcSzO+5OmX2hb7Sdo=
Subject key identifier:   FC:38:30:EB:70:1D:D9:1B:DA:C8:F8:74:74:BB:DC:33:CC:A7:5E:6B
Certificate issuer:       /CN=7F8154FBFA7869CE49F7C27290C85E6C51C47697
Certificate serial:       54F56E26562FE5B3952E7CAE1C28AD6E93CEED5D
Authority key identifier: 7F:81:54:FB:FA:78:69:CE:49:F7:C2:72:90:C8:5E:6C:51:C4:76:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/323830333a333631303a3a2f33322d3438203d3e20323731393531.roa
Signing time:             Sat 05 Oct 2024 03:15:00 +0000
ROA not before:           Sat 05 Oct 2024 03:10:00 +0000
ROA not after:            Sat 04 Oct 2025 03:15:00 +0000
asID:                     271951
IP address blocks:        2803:3610::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f5:6e:26:56:2f:e5:b3:95:2e:7c:ae:1c:28:ad:6e:93:ce:ed:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8154FBFA7869CE49F7C27290C85E6C51C47697
        Validity
            Not Before: Oct  5 03:10:00 2024 GMT
            Not After : Oct  4 03:15:00 2025 GMT
        Subject: CN=FC3830EB701DD91BDAC8F87474BBDC33CCA75E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:fd:dc:64:b6:2a:eb:3d:6b:05:e5:44:42:
                    5f:d9:77:dd:42:3f:42:70:e7:f5:5d:92:fa:fb:90:
                    11:a8:85:5f:90:45:da:06:1d:7e:0d:2e:83:b7:d0:
                    aa:14:3a:ff:8b:52:26:4a:4e:c4:73:35:d4:fb:5d:
                    a6:93:40:2d:9b:a8:14:e2:aa:a5:4c:f4:8a:34:43:
                    7e:11:8f:1d:92:49:f8:41:2f:5b:ef:e1:04:32:4c:
                    70:4b:82:6a:9d:9d:2f:be:43:77:f7:7e:78:64:ff:
                    ea:91:32:e1:c4:30:33:16:47:80:3a:92:16:04:8f:
                    af:4a:3d:4f:e5:43:5f:0a:71:fe:e2:53:62:76:c0:
                    fa:d6:c1:1f:cf:f4:7c:15:3e:da:c3:4f:33:51:45:
                    33:9b:07:36:09:cc:ec:2b:b6:f7:b4:ac:82:e4:c5:
                    ab:23:dc:d2:38:b1:13:9f:9a:40:fc:5a:e0:68:1d:
                    18:d9:5d:81:8e:6a:7a:bb:dd:02:4c:61:d4:e9:37:
                    bd:31:91:59:1f:93:33:0a:72:3a:58:ba:53:8a:26:
                    9f:c0:02:5b:08:e8:23:9e:24:d2:bc:06:40:e3:90:
                    58:50:06:53:07:e7:a6:fb:42:77:ac:2a:d5:bf:25:
                    25:f0:33:4d:c7:bd:70:0e:92:74:96:bf:ef:d7:03:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:38:30:EB:70:1D:D9:1B:DA:C8:F8:74:74:BB:DC:33:CC:A7:5E:6B
            X509v3 Authority Key Identifier:
                keyid:7F:81:54:FB:FA:78:69:CE:49:F7:C2:72:90:C8:5E:6C:51:C4:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/323830333a333631303a3a2f33322d3438203d3e20323731393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3610::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:cb:79:4b:7a:d6:f3:19:31:13:aa:c4:fd:34:4b:a8:10:13:
         c4:f9:d6:21:a5:4a:dc:cd:47:80:f1:72:ff:fd:8d:0d:65:8a:
         53:6e:d9:1b:9e:fb:09:e8:04:10:3a:bd:51:bd:72:36:c3:f3:
         fe:10:b0:93:2f:b7:12:a6:75:f9:28:9b:8f:64:5f:9c:41:dd:
         a3:e7:bf:78:8d:89:6c:1c:72:fd:b7:1e:55:8a:31:ed:99:fa:
         5b:53:07:4e:09:9b:03:c4:03:99:2e:39:18:31:5a:07:dd:75:
         a8:53:95:41:03:03:77:9e:33:2a:02:b4:aa:f2:32:d3:8e:c9:
         55:6d:30:25:49:a8:0a:fc:36:f9:f7:fc:16:97:6e:d8:8c:20:
         15:e9:3d:07:ee:45:79:c3:53:94:4b:66:7f:e3:19:94:86:74:
         1e:75:55:7c:49:82:7d:7c:29:4e:70:8e:4d:3b:4c:00:59:4c:
         c3:1e:cd:e0:0a:dc:c7:ad:4d:1f:6f:b9:63:35:c0:7e:bf:fc:
         a4:30:82:71:dc:7a:36:e4:ce:67:46:c2:80:63:c0:6c:23:1f:
         2f:36:14:b6:95:3d:a1:7a:cb:7a:cb:76:42:a4:a1:f2:38:c1:
         9a:39:9d:18:cf:ce:0d:f5:39:f2:f1:de:e9:68:3f:41:f7:81:
         57:a0:3b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:48 2024 by rpki-client on console-ams.rpki-client.org