Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa
File:                     323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa (raw, json)
Hash identifier:          QAZ2xDIQch4Rbj2VQK2qCqvX/dxRenseK7ryjRRXYJs=
Subject key identifier:   06:E8:4A:3D:C0:17:8A:EB:EC:03:22:55:7C:FE:84:FC:91:CB:35:19
Certificate issuer:       /CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
Certificate serial:       6CE3C3D9E27D0EB2393B34649CB4421716F408D2
Authority key identifier: 08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa
Signing time:             Tue 05 Mar 2024 18:03:26 +0000
ROA not before:           Tue 05 Mar 2024 17:58:26 +0000
ROA not after:            Tue 04 Mar 2025 18:03:26 +0000
asID:                     64135
IP address blocks:        2803:9910:8000::/34 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e3:c3:d9:e2:7d:0e:b2:39:3b:34:64:9c:b4:42:17:16:f4:08:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
        Validity
            Not Before: Mar  5 17:58:26 2024 GMT
            Not After : Mar  4 18:03:26 2025 GMT
        Subject: CN=06E84A3DC0178AEBEC0322557CFE84FC91CB3519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:09:c6:22:f9:07:c5:be:4b:a4:95:c6:63:55:
                    87:82:51:08:1d:ae:96:b0:81:82:98:47:7b:63:4b:
                    95:bc:67:49:04:0f:4b:d9:7c:e2:22:4d:9a:12:af:
                    06:31:34:67:02:38:81:db:7e:f6:63:87:55:de:b3:
                    40:67:72:00:d1:7a:d8:ae:8e:90:68:7f:73:af:0e:
                    32:eb:e2:c1:1e:de:5a:69:07:be:02:62:ed:06:e7:
                    a2:59:6d:2c:e5:94:91:81:69:44:e6:e1:62:7e:19:
                    5e:2e:58:44:fd:ab:30:3a:b1:fd:68:ab:d4:94:a3:
                    d0:e8:88:f7:74:f0:50:d3:8c:60:b2:8f:74:74:4a:
                    46:e4:7a:cf:e6:e8:ad:3d:a9:f4:0b:a0:23:b6:47:
                    a6:88:f6:eb:6c:69:1c:8d:71:d2:59:f6:cc:1a:54:
                    dd:10:e8:ce:88:03:a9:cc:59:ae:c0:6a:6b:8f:ea:
                    df:c0:0c:80:4c:bd:46:ca:f9:bd:2b:cb:25:2f:72:
                    20:73:38:49:d4:c5:59:d3:bc:32:1b:37:4a:a1:0c:
                    86:5f:c5:46:cf:d9:ab:ca:11:31:02:70:fe:55:d7:
                    30:ef:46:83:20:b8:ef:50:c3:56:de:05:77:ed:d8:
                    f3:d0:72:2f:e7:06:00:a6:7c:e6:0b:c6:2d:79:dc:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:4A:3D:C0:17:8A:EB:EC:03:22:55:7C:FE:84:FC:91:CB:35:19
            X509v3 Authority Key Identifier:
                keyid:08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:36:a4:d8:3d:3b:bf:69:ed:46:2f:b2:14:d3:33:4e:06:
         a5:35:4c:da:ca:70:87:41:11:5b:fa:57:da:fe:ce:df:a2:c5:
         74:68:89:d9:f6:04:61:f0:93:30:90:a3:09:1b:b0:98:52:a7:
         a7:8c:79:5b:c6:99:67:06:92:d8:73:57:f3:65:69:4c:73:50:
         b7:16:15:cd:89:27:b4:61:a7:aa:17:9c:06:b5:11:9b:ea:9d:
         90:f8:11:07:3a:00:8d:37:fa:f4:e8:57:99:f5:70:78:99:9d:
         de:10:78:62:56:c3:8b:a4:9d:78:60:b2:0e:74:bb:21:2c:c8:
         25:84:ea:4f:9e:f7:79:6f:02:a5:bd:34:df:ab:7b:4a:25:98:
         42:4e:72:3a:9d:6d:ac:56:b6:e6:5f:31:24:ce:15:7a:44:d6:
         d4:9b:16:a1:a0:6c:1d:d6:db:42:6b:ce:56:79:ae:32:ec:3e:
         97:32:cb:6b:7c:91:eb:c8:8e:71:28:a7:04:bf:20:6a:3c:62:
         c7:2b:f5:16:38:a9:c0:15:1e:50:98:f4:7f:e8:1d:8b:10:26:
         90:8c:75:aa:6d:df:11:f4:54:9e:39:3a:54:c1:da:03:7b:17:
         5f:de:38:9b:72:d0:1d:66:3b:f5:15:9e:4e:16:39:e1:b2:db:
         b2:95:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org