Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a303a32303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          3k7BnzWYbY/X5Zux/cTNt3xfLtt45unkMUe/ieIzS1A=
Subject key identifier:   94:8B:39:B7:55:01:05:C7:3B:43:59:1C:78:43:D2:BE:8E:31:A3:A7
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       57AD1FF7B256D6F35DEAF0CA490083FF26584BA0
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 02 Apr 2024 19:25:00 +0000
ROA not before:           Tue 02 Apr 2024 19:20:00 +0000
ROA not after:            Tue 01 Apr 2025 19:25:00 +0000
asID:                     27947
IP address blocks:        2801:0:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ad:1f:f7:b2:56:d6:f3:5d:ea:f0:ca:49:00:83:ff:26:58:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Apr  2 19:20:00 2024 GMT
            Not After : Apr  1 19:25:00 2025 GMT
        Subject: CN=948B39B7550105C73B43591C7843D2BE8E31A3A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:4e:a2:03:d3:c0:f8:4c:1f:56:e7:ab:ae:
                    8a:70:ee:a4:c0:06:a6:e5:89:2c:b4:c2:37:13:06:
                    10:1b:99:cc:ba:3b:12:03:e9:97:ec:e2:29:dc:c3:
                    fd:a9:f1:94:c6:9d:35:1c:63:d2:5c:c7:df:f3:bc:
                    78:ed:2f:d7:aa:da:5b:b7:02:7c:bb:0c:82:01:32:
                    7c:36:a8:cd:36:23:15:ae:91:a1:35:d8:3e:77:93:
                    01:ab:bd:d3:74:41:48:35:12:97:d0:04:28:fe:00:
                    59:13:f1:c6:90:18:58:08:bf:81:51:c5:f4:02:48:
                    46:6f:57:df:c7:79:06:1f:10:90:a9:d8:66:46:6d:
                    d9:4d:1e:d9:04:c6:c6:ee:84:d2:21:db:aa:15:bf:
                    e7:0c:92:56:86:69:53:9e:7f:fa:41:c2:96:d2:8a:
                    81:a9:9f:a3:3f:ec:f4:e5:df:41:fc:a6:cc:07:00:
                    11:36:54:bc:7b:4d:90:a9:14:a2:b8:e5:2d:ad:99:
                    06:e1:c1:ee:bc:7e:d5:2b:4a:c8:9e:1f:6d:5d:3b:
                    d0:e0:bd:d1:44:37:f6:84:ec:fd:54:d0:12:76:ee:
                    95:77:dd:84:71:c6:40:9e:21:66:33:36:b4:7a:1d:
                    68:b7:09:50:93:9b:f4:c4:54:13:57:3b:7e:b8:ec:
                    0e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8B:39:B7:55:01:05:C7:3B:43:59:1C:78:43:D2:BE:8E:31:A3:A7
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:67:bb:19:f8:02:ac:54:25:3e:54:05:d4:ac:51:41:bf:fa:
         af:eb:ff:0a:c0:bb:1b:86:c3:28:a6:a4:af:ef:22:22:0f:2f:
         3e:59:ce:2b:1b:5f:7e:bf:d7:1c:9e:a5:4a:ab:40:98:0f:3a:
         92:62:f8:88:91:7d:a9:31:2f:60:9f:2a:d1:04:f9:d6:fc:f5:
         9d:1d:98:00:68:0a:fd:ec:94:b4:78:fb:bb:46:88:9f:8b:47:
         8c:4c:b9:0b:1e:f2:f7:87:40:6f:56:0a:aa:fb:05:a1:83:9a:
         28:da:af:81:99:48:fa:57:70:bf:86:9e:91:90:85:8c:69:c2:
         1c:6d:94:b9:eb:69:ef:3c:c9:ee:72:33:86:ec:8e:3d:b6:9f:
         69:c3:67:c4:76:40:d2:9a:ad:7a:bb:16:fe:df:23:f9:50:70:
         38:db:c0:85:04:eb:b1:df:18:49:93:1a:82:a8:1b:de:ee:bf:
         b6:fc:c1:8f:4e:52:8e:e5:93:7a:50:19:96:bf:7f:5d:22:93:
         13:38:ed:14:99:db:48:10:37:aa:2d:2b:16:09:41:0c:0a:ef:
         ba:b2:b4:4f:1e:36:ca:63:5e:cd:84:ad:68:f8:43:3e:15:b9:
         c9:0c:ad:8a:81:15:a4:51:34:77:af:8a:6c:00:67:fa:d0:06:
         9d:ea:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:14 2024 by rpki-client on console-ams.rpki-client.org