Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a323a3a2f34382d3438203d3e203532333932.roa
File:                     323830333a623130303a323a3a2f34382d3438203d3e203532333932.roa (raw, json)
Hash identifier:          ndllNSFkXTXjTPS0ZTtiiQEmbgYPYgLdrKDPGuXokgk=
Subject key identifier:   33:B7:A8:9A:5B:3F:43:0A:55:66:4C:5D:95:94:8F:62:29:43:01:E7
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       6E0806E3F8CEA031EB331A853B8CB054AD01DA8F
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a323a3a2f34382d3438203d3e203532333932.roa
Signing time:             Tue 20 Aug 2024 21:20:01 +0000
ROA not before:           Tue 20 Aug 2024 21:15:01 +0000
ROA not after:            Tue 19 Aug 2025 21:20:01 +0000
asID:                     52392
IP address blocks:        2803:b100:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:08:06:e3:f8:ce:a0:31:eb:33:1a:85:3b:8c:b0:54:ad:01:da:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Aug 20 21:15:01 2024 GMT
            Not After : Aug 19 21:20:01 2025 GMT
        Subject: CN=33B7A89A5B3F430A55664C5D95948F62294301E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:e6:8e:c9:9e:8a:83:66:b0:7a:21:cb:69:
                    6b:dd:1f:0c:9c:ca:cb:eb:bb:d2:34:2a:ec:33:ef:
                    e1:c9:91:d4:5e:3e:34:72:bb:04:20:c4:0f:35:04:
                    81:8a:be:87:8c:0e:02:7d:d0:0e:1d:fa:02:4a:55:
                    cd:6d:43:03:74:1e:61:4c:fa:a8:59:1d:5a:7f:b6:
                    60:3e:99:71:76:b6:bc:d9:d1:36:49:bb:73:d3:0c:
                    1a:8c:03:53:bf:b3:be:74:2c:e1:4d:6a:1e:cc:e5:
                    cc:30:f1:70:19:b2:69:84:7e:88:53:7d:33:f9:95:
                    a5:09:8a:4a:09:c2:b4:ac:e8:96:27:20:32:53:44:
                    59:b8:43:86:c9:63:78:76:f1:bd:11:d3:d1:81:e0:
                    34:e9:aa:98:7b:7d:4c:5e:26:09:5b:db:6e:bf:63:
                    c5:d6:19:c8:b4:61:db:9a:e3:07:b4:9b:6f:f5:4a:
                    fa:6c:98:d0:b3:80:cd:0e:2a:0d:3d:46:e4:c0:b7:
                    50:08:38:6f:41:bb:39:a4:e4:10:9e:61:56:fb:19:
                    e1:6f:0f:6a:dd:84:a9:0e:ae:80:92:2a:90:53:d0:
                    d3:44:9e:33:c8:bc:ec:d6:86:c9:ee:d2:9d:54:b8:
                    af:a5:39:16:3f:ba:86:14:7a:b6:b0:53:f3:8b:3c:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:A8:9A:5B:3F:43:0A:55:66:4C:5D:95:94:8F:62:29:43:01:E7
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a323a3a2f34382d3438203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:65:3d:c0:1f:13:92:1c:d7:60:e5:90:43:ca:12:e9:66:
         b4:13:18:68:ee:0b:c8:6c:60:26:be:1d:d3:ba:0d:c4:40:36:
         1c:14:e8:12:08:7f:37:f5:58:c4:1d:5d:58:51:a6:98:08:88:
         bc:2f:e7:07:2a:b2:8b:36:dc:51:ba:0c:89:e1:17:35:3c:8b:
         4d:06:92:e0:98:c3:74:88:68:1c:02:cb:60:eb:db:dc:86:74:
         3f:17:06:94:44:c7:37:7d:84:64:35:ec:ae:a7:06:32:08:10:
         c4:24:d7:08:d9:00:7a:9b:51:e5:e0:77:53:dc:2b:f7:90:da:
         19:73:b1:f6:c5:65:8a:58:69:21:11:01:7e:c3:69:56:85:e5:
         e5:24:7e:88:e6:f3:4b:e7:16:a1:3b:99:2a:5a:a3:32:3d:66:
         6a:73:f6:76:bb:61:8e:cc:84:91:19:5a:14:b1:59:48:14:97:
         a2:51:90:92:c7:ca:9d:2f:55:43:f8:da:d7:31:cc:75:5e:04:
         dc:1d:88:23:9d:32:23:ab:e2:2d:f7:de:23:4c:d3:dc:d0:00:
         6d:71:6b:36:ae:33:4d:8a:a0:0b:f3:67:50:e7:cd:82:54:ed:
         80:a4:01:67:0f:07:11:4f:f0:ce:54:0e:7f:5e:e0:80:24:6f:
         f2:30:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:40:22 2024 by rpki-client on console-ams.rpki-client.org