Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a313a3a2f34382d3438203d3e203532333932.roa
File:                     323830333a623130303a313a3a2f34382d3438203d3e203532333932.roa (raw, json)
Hash identifier:          pcwhfoZakeNt2kGt59DrObVge0/Gc1S6fig0iKpP1Fo=
Subject key identifier:   47:1A:C6:F6:58:29:D6:86:E9:9B:14:C1:BD:F0:24:95:2F:12:A3:D3
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       4DE7972D5C843A23545FA4927B87B848A7EA9618
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a313a3a2f34382d3438203d3e203532333932.roa
Signing time:             Tue 20 Aug 2024 21:20:00 +0000
ROA not before:           Tue 20 Aug 2024 21:15:00 +0000
ROA not after:            Tue 19 Aug 2025 21:20:00 +0000
asID:                     52392
IP address blocks:        2803:b100:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:97:2d:5c:84:3a:23:54:5f:a4:92:7b:87:b8:48:a7:ea:96:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Aug 20 21:15:00 2024 GMT
            Not After : Aug 19 21:20:00 2025 GMT
        Subject: CN=471AC6F65829D686E99B14C1BDF024952F12A3D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:76:fb:7f:e3:e6:c9:4a:24:9c:77:76:b9:
                    ed:06:2c:86:b8:30:c6:5f:70:f1:30:46:ea:15:dd:
                    bb:95:0a:13:9e:a6:9c:7f:28:17:5a:bf:ca:e4:b3:
                    94:71:65:17:b4:44:6d:3f:83:40:18:82:07:cb:bb:
                    e8:d1:de:e1:bc:f1:6e:34:97:32:0b:29:f0:cd:93:
                    4d:cd:c7:65:80:97:e5:8a:f5:bf:e0:54:ca:a4:15:
                    bf:37:b0:ea:69:ea:af:4e:51:40:c6:6a:aa:03:d7:
                    77:53:3f:6c:54:6a:5b:ae:7b:56:49:45:9e:25:df:
                    d0:1b:64:ed:c0:53:e6:63:c4:97:36:f4:cb:6e:a2:
                    3f:8e:f8:64:18:8c:47:4d:dd:ec:20:5f:6a:26:96:
                    f0:de:91:eb:8f:a4:2c:f4:4d:ba:36:3c:62:85:9c:
                    4b:e3:0e:8c:c7:55:08:36:b0:22:0d:08:39:9e:44:
                    a6:9a:9c:43:7a:55:86:24:2e:32:54:1f:9d:6c:96:
                    5b:0a:59:b2:44:34:86:c9:17:57:e7:4d:2b:a2:e3:
                    fa:6a:d7:89:b2:f1:75:37:6a:81:f5:ae:30:23:7d:
                    68:96:72:49:97:18:a9:a0:d2:c1:90:21:ee:f8:a2:
                    43:d2:a9:0e:b8:69:44:e9:22:90:1e:11:3d:f5:df:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1A:C6:F6:58:29:D6:86:E9:9B:14:C1:BD:F0:24:95:2F:12:A3:D3
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a313a3a2f34382d3438203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:ea:99:0f:99:6d:be:36:b0:ef:3e:4d:82:a9:8f:d5:14:12:
         a6:ce:b3:71:cd:4a:2a:96:eb:9d:65:9d:99:55:77:18:59:75:
         c7:ae:fc:ba:4b:3e:6e:c4:43:71:21:f2:14:15:f7:0e:51:74:
         1c:42:0a:37:df:64:ec:51:86:e8:4b:d2:e5:28:60:14:36:20:
         d0:fd:38:58:11:a6:f9:41:cd:b5:2c:6a:d8:7b:de:13:ba:42:
         f5:29:fd:df:16:7c:4e:3c:40:8e:f5:af:f5:2a:0e:e6:be:bf:
         d5:0c:9c:36:ef:76:5e:48:ee:60:8b:d0:e5:29:89:da:89:f2:
         a8:79:8f:81:24:47:9e:ea:12:44:36:4e:c9:6e:bd:58:8a:61:
         68:5b:97:ca:2a:f2:16:d5:ea:e2:d3:92:6d:48:c8:d7:4d:fb:
         79:7e:62:3f:3a:61:24:bc:65:3a:2f:50:c8:21:28:25:d2:e1:
         a2:1c:61:a2:1c:62:9d:a0:1d:1d:f0:9c:d3:c3:50:32:33:e6:
         05:d6:a3:b1:1c:20:b0:02:85:a7:b7:3c:15:dc:fd:2c:6f:62:
         ba:b5:da:72:7c:8a:83:12:28:af:e6:02:80:8b:9c:46:3a:dc:
         d4:66:a7:35:75:e4:7b:6a:d0:bc:0a:07:31:b1:8a:71:e8:71:
         73:aa:85:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:47 2024 by rpki-client on console-fra.rpki-client.org