Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a3a2f33322d3332203d3e203532333932.roa
File:                     323830333a623130303a3a2f33322d3332203d3e203532333932.roa (raw, json)
Hash identifier:          TAWj6DernnMgAoBFjxgRrSWpQaSGqjgVnJgyY/9uDxo=
Subject key identifier:   94:2D:AF:E9:01:1C:D8:E0:1C:72:A7:4A:47:5F:D4:B7:D5:9F:04:F8
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       7C49337302EB0574E184B4B553BF193B3048FB0F
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a3a2f33322d3332203d3e203532333932.roa
Signing time:             Tue 20 Aug 2024 21:20:00 +0000
ROA not before:           Tue 20 Aug 2024 21:15:00 +0000
ROA not after:            Tue 19 Aug 2025 21:20:00 +0000
asID:                     52392
IP address blocks:        2803:b100::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:49:33:73:02:eb:05:74:e1:84:b4:b5:53:bf:19:3b:30:48:fb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Aug 20 21:15:00 2024 GMT
            Not After : Aug 19 21:20:00 2025 GMT
        Subject: CN=942DAFE9011CD8E01C72A74A475FD4B7D59F04F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:3d:b9:bf:e0:c0:21:62:be:cc:72:24:0c:
                    df:5d:ce:a9:18:3f:35:fb:14:0a:60:e4:ac:8b:f8:
                    cd:46:76:d8:df:71:20:9d:19:f8:8b:6d:c4:40:33:
                    5f:1e:99:71:36:e8:39:66:4c:74:26:47:96:ff:c7:
                    89:2e:40:3e:91:06:09:7a:36:a9:fb:39:5c:18:55:
                    f2:6d:95:67:1f:e6:78:fb:08:21:61:e1:53:de:ee:
                    c0:06:a1:73:be:1d:ca:28:c6:6e:23:a5:d3:e6:a3:
                    61:ad:46:ad:2f:d4:48:0a:c8:36:37:0c:01:25:10:
                    49:e2:fa:7d:0c:74:77:11:03:a9:0e:23:4c:06:20:
                    a0:bf:72:2a:77:26:24:db:33:96:dd:cd:9c:bd:63:
                    ef:13:ff:b7:79:1e:9e:e5:de:31:10:f4:1f:b9:9a:
                    df:08:89:01:ad:98:3a:66:2f:1c:a7:b4:8f:a6:c8:
                    9b:c1:65:c2:14:2f:f8:c5:c2:74:18:c4:4e:91:91:
                    4a:d4:01:46:c0:1e:22:6f:22:8a:65:2f:72:67:09:
                    dc:52:ea:66:e7:ea:85:25:64:86:66:4f:de:d9:79:
                    ed:10:18:5f:a0:79:5d:04:a3:c9:c7:39:a7:b0:29:
                    20:b1:2e:27:d5:89:f4:3f:f7:c0:9d:f7:9f:78:04:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:AF:E9:01:1C:D8:E0:1C:72:A7:4A:47:5F:D4:B7:D5:9F:04:F8
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a3a2f33322d3332203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:b1:e8:a5:8e:81:ef:67:5c:19:5d:60:31:06:69:7b:12:bc:
         2a:29:c1:9b:53:4a:27:9c:4e:18:4b:06:bb:08:73:c8:1f:37:
         dc:59:d2:76:fc:f9:ed:ec:1f:e4:c2:6a:c2:80:c9:b6:71:03:
         a1:a2:c9:94:89:4c:e9:2a:a5:c4:e8:c4:3f:aa:01:f1:69:71:
         ae:5b:ee:6e:3e:68:cb:ce:3b:a4:58:15:e7:d9:65:46:73:98:
         be:0a:d8:bf:7d:65:09:b1:0c:b3:cd:34:92:5b:9f:ff:e6:76:
         26:d4:cd:ad:05:ea:2b:8f:8a:ce:b8:10:15:80:a4:d8:4f:10:
         ef:b8:16:3b:c4:e8:9d:ea:67:b4:5f:31:14:c7:ce:94:d7:de:
         57:ed:73:f2:74:48:a7:5d:89:fb:51:d1:28:c7:6b:e2:08:64:
         76:ff:82:bb:cf:63:d6:09:e5:ed:a7:5c:86:4c:d5:91:00:50:
         c2:1d:4c:79:c6:59:dd:66:69:16:6a:89:84:53:14:30:aa:77:
         6c:54:be:cd:4d:3a:d4:6f:9c:33:28:7a:29:74:00:b0:52:b5:
         59:2e:4a:29:f1:92:13:33:ba:78:10:ce:d0:94:7e:cb:03:db:
         0c:a8:05:98:59:e3:a6:12:b4:16:83:e5:0d:f4:65:df:c9:bf:
         5f:29:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:40:22 2024 by rpki-client on console-ams.rpki-client.org