Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa
File:                     323830333a626330303a3a2f33322d313238203d3e203532343338.roa (raw, json)
Hash identifier:          Kg+tgjcWIuZ2xIDDMLN2AzD3b9o4t8U0oPBa4Kc/JAQ=
Subject key identifier:   C2:3A:EB:9E:2F:27:3E:03:F4:40:91:9F:D6:E5:FB:DC:C0:0E:4E:66
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       2DBF7FCDD3FE8319DF30119C946846B703E537F6
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa
Signing time:             Tue 05 Mar 2024 17:40:35 +0000
ROA not before:           Tue 05 Mar 2024 17:35:35 +0000
ROA not after:            Tue 04 Mar 2025 17:40:35 +0000
asID:                     52438
IP address blocks:        2803:bc00::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bf:7f:cd:d3:fe:83:19:df:30:11:9c:94:68:46:b7:03:e5:37:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Mar  5 17:35:35 2024 GMT
            Not After : Mar  4 17:40:35 2025 GMT
        Subject: CN=C23AEB9E2F273E03F440919FD6E5FBDCC00E4E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:5f:81:24:ed:50:eb:14:80:14:4d:13:cf:
                    56:38:8a:09:94:ac:cb:c8:96:88:d8:17:ec:48:a7:
                    7d:cf:ac:d2:59:80:40:8c:87:c4:9d:5e:43:9e:60:
                    5e:61:8d:82:33:fb:03:a9:f1:e6:25:f8:ba:88:fa:
                    78:be:ce:24:18:ff:44:a9:ca:ee:dd:22:ca:5d:c4:
                    c1:13:1d:b8:fc:f0:3d:cd:a2:ab:2d:a2:44:a8:5b:
                    70:7a:49:74:5d:60:62:f5:c1:64:d2:ba:92:c8:70:
                    9e:be:13:13:e9:12:3d:b5:79:e4:20:2b:b1:1c:59:
                    da:e7:7e:03:f6:38:19:b3:e6:ab:9b:a8:20:61:98:
                    78:b9:57:4e:cf:43:0e:21:cd:0a:72:a7:b6:4f:60:
                    56:8c:3b:5e:df:ac:61:f2:59:ee:fb:f6:4c:99:39:
                    3e:16:ee:10:58:6b:ae:ea:3f:6a:e5:68:5a:b4:cf:
                    27:25:da:a7:8f:6d:9a:a9:cb:f3:e1:7a:8c:22:0e:
                    e1:11:6d:ef:44:bf:0c:3f:ca:db:32:c3:77:5f:6d:
                    da:28:bd:be:09:72:70:c5:1b:df:26:26:a6:6b:32:
                    a2:f4:30:98:5e:48:e7:ec:89:b4:a9:f4:8c:b8:c8:
                    63:d4:71:19:b0:af:e1:ef:a2:07:c2:f6:90:44:f9:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3A:EB:9E:2F:27:3E:03:F4:40:91:9F:D6:E5:FB:DC:C0:0E:4E:66
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc00::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:50:3e:60:99:fd:de:4a:2d:1a:e5:94:98:2c:06:4f:7d:
         3e:1c:ba:b3:23:67:40:ac:82:40:db:50:5f:4b:14:d5:f8:53:
         4d:be:54:1f:86:39:02:76:40:3e:d4:a3:d9:f7:83:a0:a0:f4:
         0c:9d:d9:5d:a0:c5:75:b2:3b:6f:66:5d:26:ca:8c:b0:4a:22:
         88:ad:64:35:14:ca:e4:38:48:92:34:19:ea:f1:7b:86:ad:0b:
         f1:94:71:6b:06:c0:ff:79:67:94:70:55:b0:b2:7d:b2:7a:0c:
         0a:a0:50:3e:6a:d3:3c:32:9d:72:81:fc:df:dd:2c:0c:47:c1:
         e1:47:fc:6d:27:fd:07:45:9d:d6:43:06:d6:e0:ec:4a:f5:e7:
         27:16:25:f9:56:26:7f:73:4b:f6:d6:b5:35:69:0e:1d:df:7d:
         e2:35:72:f7:b9:ca:c5:a2:e0:7b:af:ab:33:81:9e:65:16:49:
         22:e6:e4:e5:af:a4:59:fe:20:a3:d9:9a:d8:ea:8b:6d:7f:6e:
         03:41:59:05:db:9a:4b:2d:7b:f0:e3:eb:79:78:c8:30:fb:e7:
         cf:16:3b:b1:38:50:de:d2:bd:05:8f:b3:41:ef:39:a6:88:11:
         8d:ee:64:32:2b:4c:d1:17:97:90:95:37:38:9f:ce:da:7d:3e:
         0a:bf:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org