Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/323830333a323739303a3a2f33322d3332203d3e203135383330.roa
File:                     323830333a323739303a3a2f33322d3332203d3e203135383330.roa (raw, json)
Hash identifier:          JD5bn5Oo6tDrf3+c4VXMeGTDiUkkvxA9OlLzB98S+E4=
Subject key identifier:   B8:F4:68:81:0A:89:0B:4F:C6:17:31:89:BD:77:F4:05:EF:C6:2A:CB
Certificate issuer:       /CN=4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378
Certificate serial:       39B4F17312A28B18B116124FF276461D31AB0EA1
Authority key identifier: 4C:48:E6:BE:82:DE:76:71:F0:F9:5D:C8:F5:FE:39:EF:AE:1A:63:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/323830333a323739303a3a2f33322d3332203d3e203135383330.roa
Signing time:             Tue 05 Mar 2024 17:59:30 +0000
ROA not before:           Tue 05 Mar 2024 17:54:30 +0000
ROA not after:            Tue 04 Mar 2025 17:59:30 +0000
asID:                     15830
IP address blocks:        2803:2790::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b4:f1:73:12:a2:8b:18:b1:16:12:4f:f2:76:46:1d:31:ab:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378
        Validity
            Not Before: Mar  5 17:54:30 2024 GMT
            Not After : Mar  4 17:59:30 2025 GMT
        Subject: CN=B8F468810A890B4FC6173189BD77F405EFC62ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b2:2c:22:b4:2f:32:9e:2e:4f:fa:9c:54:74:
                    43:73:46:6d:f1:49:17:dd:6a:d3:ec:73:9f:ba:3a:
                    bc:98:69:d9:73:1d:f7:39:bf:7d:3f:43:9d:e3:7a:
                    45:12:be:75:92:91:09:d0:cc:6d:5b:b1:5f:74:9c:
                    7f:64:ec:fb:6b:84:45:61:49:d6:97:19:cd:44:70:
                    ed:b0:b1:a0:d6:37:4a:be:0f:8c:f0:e0:4a:4e:28:
                    16:77:83:c0:0c:d2:72:62:bf:fc:34:04:b8:56:2b:
                    27:15:48:e0:41:ec:8a:dc:8d:3d:75:fd:60:f2:38:
                    e9:99:bb:d6:0c:19:f0:6e:5a:05:6e:e0:91:5c:67:
                    7f:50:04:05:d5:af:18:2c:46:3a:9c:d6:66:40:56:
                    f3:a7:a4:e5:bc:7c:d2:83:ce:52:76:c0:8c:c4:b1:
                    9a:50:63:b3:64:6d:1e:ae:df:6a:a2:9e:b1:77:af:
                    c5:b5:86:a1:59:18:5e:1a:1c:e9:9c:20:a1:2c:5f:
                    28:7f:62:1e:4b:56:6d:04:34:da:a6:a2:a0:66:8b:
                    f5:92:0c:88:b0:39:69:fb:95:09:1c:83:92:e2:54:
                    f9:19:99:e5:d7:f3:83:91:07:4e:aa:82:c4:71:00:
                    8b:e1:5c:ae:dd:89:73:ad:a9:b0:52:fd:02:87:2a:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:68:81:0A:89:0B:4F:C6:17:31:89:BD:77:F4:05:EF:C6:2A:CB
            X509v3 Authority Key Identifier:
                keyid:4C:48:E6:BE:82:DE:76:71:F0:F9:5D:C8:F5:FE:39:EF:AE:1A:63:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/323830333a323739303a3a2f33322d3332203d3e203135383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2790::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:1d:de:4a:e5:d4:1b:9f:87:d4:2a:ca:d5:78:07:ac:20:
         18:36:29:50:e8:b8:03:1a:dc:04:3f:51:40:ab:3b:77:01:10:
         e3:80:c7:58:f3:b9:66:70:de:92:7b:58:ce:31:03:60:12:ab:
         48:5c:81:a5:20:8b:a2:6a:d2:8c:c1:5b:8d:8c:89:a8:ea:9f:
         eb:1f:79:d7:dc:f2:08:9e:9d:bf:ab:29:71:f0:f5:c4:d2:03:
         bc:84:0b:fb:20:e7:50:ff:02:a3:fc:99:8a:a6:de:07:12:4c:
         7f:6d:5a:32:c0:53:ca:a7:11:e1:ec:35:4d:d6:4d:54:12:39:
         a9:f4:54:b0:82:94:4b:79:61:9a:e7:49:17:2e:0b:4a:b9:ea:
         f2:17:cc:51:13:2c:47:b8:ac:b9:da:dd:bf:c0:e9:43:88:76:
         23:41:1e:6e:6a:93:21:06:1a:f8:63:52:a0:61:f9:19:0a:d0:
         bd:f6:b9:93:e9:cc:94:e3:a9:f4:05:42:19:93:20:21:e2:1a:
         55:2c:58:c2:c9:24:4d:08:5a:af:c2:a5:23:1d:bd:19:14:45:
         8d:7c:50:04:71:a9:12:1a:ac:db:c9:c0:0f:9a:b3:7c:bd:b9:
         bf:57:36:dc:c5:49:b7:96:08:07:44:ef:85:3e:24:40:74:28:
         46:5e:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org