Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3933303a3a2f34382d3438203d3e203134303830.roa
File:                     323830303a3830303a3933303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          aI5M6o+1ApIJzE8wfLMsyTUT2qGIU+JMyO6qJ91nlTE=
Subject key identifier:   49:FE:8C:3F:9B:B4:60:BA:A8:63:69:C5:D4:CB:16:28:E9:02:98:C3
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       282935DE7238B1A271525A63938AA0266FA1BF79
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3933303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 18:01:12 +0000
ROA not before:           Tue 05 Mar 2024 17:56:12 +0000
ROA not after:            Tue 04 Mar 2025 18:01:12 +0000
asID:                     14080
IP address blocks:        2800:800:930::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:29:35:de:72:38:b1:a2:71:52:5a:63:93:8a:a0:26:6f:a1:bf:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:12 2024 GMT
            Not After : Mar  4 18:01:12 2025 GMT
        Subject: CN=49FE8C3F9BB460BAA86369C5D4CB1628E90298C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:d3:c5:82:f7:df:77:f0:80:08:7d:20:4e:
                    fd:82:64:85:c8:bb:1b:a0:55:02:25:20:68:59:70:
                    57:6a:37:df:43:7a:d6:52:33:72:c1:5a:60:b7:d3:
                    4c:cd:30:de:e6:6d:24:40:06:f8:a3:02:5a:33:e6:
                    16:02:89:ff:0d:49:e0:19:e0:cb:2c:88:ec:b1:c0:
                    8d:e0:e1:86:f9:79:09:ec:3a:90:6d:e6:a9:99:7a:
                    d6:ec:23:48:9a:ed:88:54:ad:57:f2:8b:e9:6c:2a:
                    76:e5:85:e8:bd:66:81:4b:94:d6:0b:6b:3e:c0:a3:
                    15:24:a4:f3:72:7e:a7:f6:2c:4c:5a:ff:de:b1:b9:
                    ee:d6:67:9c:89:5c:bf:cf:1a:82:09:5a:e2:31:dc:
                    4f:1d:ff:14:00:da:9b:82:22:1d:0d:e5:f2:db:d9:
                    6b:7c:16:b1:07:5c:45:fb:37:24:3c:7c:b7:4d:70:
                    21:b9:60:1b:69:8d:5a:ba:1f:5e:e0:3c:c1:65:f4:
                    58:ec:83:4a:69:9e:a6:c6:72:77:d9:de:3b:16:cc:
                    99:04:56:98:f5:56:78:a3:87:36:8a:02:60:53:f7:
                    8f:4b:e8:9c:47:45:8c:14:80:11:b5:1b:c2:37:27:
                    4c:76:72:1a:fd:52:77:cc:b0:f3:df:64:52:82:45:
                    4e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FE:8C:3F:9B:B4:60:BA:A8:63:69:C5:D4:CB:16:28:E9:02:98:C3
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/323830303a3830303a3933303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:800:930::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:a5:8b:09:95:3a:eb:48:9d:fd:3f:e1:a5:50:06:ef:d9:
         af:8f:12:f4:70:c8:44:48:c5:8f:56:97:6f:ce:fb:a2:2a:f7:
         63:f8:2a:fe:63:19:7a:ac:d0:59:4e:2c:9d:7b:95:da:8f:a2:
         35:a8:57:55:f4:a6:47:a5:13:2c:6d:09:a4:da:bd:43:3d:e9:
         e1:92:bb:13:36:2f:9f:da:28:58:ec:39:62:7f:c0:e1:0a:57:
         c1:84:71:73:88:ee:ad:5c:b2:cf:6f:83:4a:3f:49:a5:00:0a:
         fe:6a:8e:16:99:bb:07:58:c2:71:42:3a:a0:ae:98:0e:70:95:
         54:75:38:29:0d:f8:62:05:9e:9d:66:a7:9a:97:86:b2:9c:09:
         48:80:99:3a:d3:5b:d4:03:df:dc:45:1c:fe:2e:22:31:c9:83:
         bc:84:4e:3a:7d:2e:c7:f2:fb:71:10:48:d5:61:c9:48:93:6a:
         51:e8:62:c8:b0:4e:fa:2a:29:09:65:39:75:7a:1d:8e:10:53:
         ce:e8:ae:2f:c5:70:d4:2e:cb:fb:89:ec:9c:20:cb:ff:2b:23:
         5f:b9:dd:cc:5d:3e:fa:8a:8c:2a:71:ff:f2:1b:0f:53:c7:b8:
         01:b7:4b:2e:16:d4:96:00:74:d0:0a:e6:e5:2a:03:c6:3a:01:
         61:68:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org