Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203238303237.roa
File:                     323830313a303a32303a3a2f34382d3438203d3e203238303237.roa (raw, json)
Hash identifier:          K3HrbdNPhzpbFWO3fDRbRpFbSLWElwGoZv356AGsQQU=
Subject key identifier:   48:FA:E0:F4:A2:0F:14:88:C8:75:A8:25:C6:7D:8A:FE:CB:DE:F9:92
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       14FCDD5BFE55271FB5F0B1923403F4B9AD6907FA
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203238303237.roa
Signing time:             Tue 05 Mar 2024 17:51:37 +0000
ROA not before:           Tue 05 Mar 2024 17:46:37 +0000
ROA not after:            Tue 04 Mar 2025 17:51:37 +0000
asID:                     28027
IP address blocks:        2801:0:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fc:dd:5b:fe:55:27:1f:b5:f0:b1:92:34:03:f4:b9:ad:69:07:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Mar  5 17:46:37 2024 GMT
            Not After : Mar  4 17:51:37 2025 GMT
        Subject: CN=48FAE0F4A20F1488C875A825C67D8AFECBDEF992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:ce:83:47:66:f7:9d:a0:58:94:93:92:d7:
                    3f:f5:2d:c9:93:24:94:e5:4a:1b:e2:76:04:c8:c7:
                    2c:3a:21:3c:e2:4e:b6:20:f2:b9:00:d6:55:43:dd:
                    41:79:6b:e3:98:e8:32:e5:52:6a:4d:ae:29:ab:43:
                    c3:30:b0:82:bd:b7:05:86:02:a4:3f:66:28:3a:cd:
                    d5:19:f4:d2:48:04:e8:b0:52:aa:f4:34:a8:2e:bc:
                    68:b6:85:e8:e1:7e:fb:1c:60:f2:e1:03:11:20:30:
                    06:e0:32:40:5b:22:d8:9d:b4:33:48:26:2b:6d:07:
                    3c:0c:cf:38:29:f1:84:b6:1d:97:15:4b:29:bb:eb:
                    35:62:5a:95:8d:58:1e:8e:10:83:a4:a4:5d:d0:f9:
                    4c:8b:15:fa:95:aa:30:f4:c6:e0:53:2a:05:3c:88:
                    c4:c7:96:0c:a8:90:10:7f:37:a4:11:eb:03:74:fc:
                    89:05:55:8e:af:16:70:7d:3b:8c:87:2c:77:67:5c:
                    f0:9f:35:c3:6c:c7:1d:89:01:4d:38:51:3a:f2:ac:
                    f6:39:c6:5f:f7:d4:9e:0a:c2:4c:90:c4:f6:32:26:
                    65:9f:8c:3b:66:df:25:cd:b6:26:9d:81:ae:72:25:
                    88:ec:da:e6:96:da:3f:c8:33:de:fa:eb:13:31:7c:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:E0:F4:A2:0F:14:88:C8:75:A8:25:C6:7D:8A:FE:CB:DE:F9:92
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/323830313a303a32303a3a2f34382d3438203d3e203238303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:ea:3a:19:c0:5d:3f:49:97:10:23:32:62:8b:d1:cb:11:
         8a:eb:40:f0:fa:77:93:be:8e:0b:0f:12:8e:7b:28:bb:cd:87:
         b6:07:84:92:b9:5a:8b:58:ff:71:16:e5:35:5e:15:5e:ca:1b:
         c6:35:bc:fd:ff:3e:ce:ab:48:23:4f:19:2f:30:a6:e8:60:2f:
         6b:2f:4e:de:5a:cb:fa:d1:54:5a:a7:27:d0:39:54:04:ab:8f:
         7a:ce:88:3b:35:d6:cb:1a:a8:8b:4a:17:90:70:90:59:ae:ff:
         e0:2c:68:e9:ef:a8:ae:48:49:ee:8f:71:ff:7b:69:d9:14:e6:
         62:3c:0d:48:e9:e5:71:ec:9b:07:d2:22:fb:d4:3b:95:5b:9e:
         20:11:6a:17:35:be:57:a1:95:80:70:ac:c2:20:9b:40:70:a7:
         75:56:47:99:c5:af:68:f3:dc:45:ad:10:ac:5c:14:b7:44:e1:
         8d:d4:3f:d6:ab:9d:05:45:2c:4f:5e:ca:83:16:52:5f:ec:5b:
         26:64:c0:8a:cc:51:44:a2:36:80:23:e7:5e:11:a1:91:f3:03:
         9e:fc:de:bf:b0:da:c5:e3:98:17:97:84:f2:98:03:87:96:64:
         77:b9:47:f9:7c:9e:87:dc:38:1b:76:de:c0:08:3c:9d:2f:7a:
         70:55:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:42:25 2024 by rpki-client on console-ams.rpki-client.org