Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a343030303a3a2f33342d3334203d3e203237393431.roa
File:                     323830333a323138303a343030303a3a2f33342d3334203d3e203237393431.roa (raw, json)
Hash identifier:          JiwwAPVlOAFQYAn7/0rtSaZwEcgtXS5UAf8ZVjyZ7u0=
Subject key identifier:   E0:B7:CE:F7:15:AA:11:80:4F:2A:88:72:4D:F0:D8:13:14:1B:CE:E4
Certificate issuer:       /CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
Certificate serial:       47F34D9F805D586F02F7ABE4C1F8A7885C21E2A4
Authority key identifier: 4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a343030303a3a2f33342d3334203d3e203237393431.roa
Signing time:             Tue 05 Mar 2024 17:55:46 +0000
ROA not before:           Tue 05 Mar 2024 17:50:46 +0000
ROA not after:            Tue 04 Mar 2025 17:55:46 +0000
asID:                     27941
IP address blocks:        2803:2180:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f3:4d:9f:80:5d:58:6f:02:f7:ab:e4:c1:f8:a7:88:5c:21:e2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
        Validity
            Not Before: Mar  5 17:50:46 2024 GMT
            Not After : Mar  4 17:55:46 2025 GMT
        Subject: CN=E0B7CEF715AA11804F2A88724DF0D813141BCEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:83:7c:83:50:ea:4f:41:9c:85:a2:f1:b1:
                    95:6e:ec:f2:51:d8:f3:80:db:49:94:18:1d:e3:3d:
                    40:7d:31:63:53:8d:e1:80:b5:0f:97:04:fc:02:b7:
                    28:f2:92:4d:1b:5e:3e:56:75:21:dc:39:94:bf:38:
                    58:32:55:26:d1:84:74:a1:8e:df:69:90:01:32:44:
                    31:07:58:fd:9d:04:f3:f1:10:1e:6b:13:3c:80:f1:
                    07:93:eb:22:df:a1:8d:fa:fa:ea:20:83:78:5e:aa:
                    4f:ad:71:26:da:c1:54:71:2a:83:68:38:bf:4f:89:
                    13:3a:bb:cd:37:b8:63:db:81:be:ca:8b:76:4b:36:
                    c5:6e:be:7d:7a:b2:b3:41:82:be:27:60:34:f9:ff:
                    df:f8:e7:e0:a2:2e:dc:ab:f5:f7:88:cc:6c:87:7f:
                    0f:b4:82:51:c4:90:25:ce:46:36:07:b1:c2:99:15:
                    cf:33:27:6d:e7:c2:e5:01:4e:5a:e9:87:91:a4:21:
                    f0:0b:4f:7c:c1:b4:b5:58:91:39:33:a3:ca:67:91:
                    1e:c7:6b:64:7d:9d:d3:81:41:2c:ed:7f:27:0b:9a:
                    ed:37:8b:d1:48:8e:44:9a:05:c3:8b:2c:11:1b:df:
                    59:c7:19:73:d7:73:e7:2b:b8:f5:39:2c:90:9e:53:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B7:CE:F7:15:AA:11:80:4F:2A:88:72:4D:F0:D8:13:14:1B:CE:E4
            X509v3 Authority Key Identifier:
                keyid:4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a343030303a3a2f33342d3334203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2180:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:26:75:26:37:78:38:52:6b:38:e7:94:c5:c7:a7:a9:9e:
         4a:f1:b5:39:09:72:3a:18:c9:9e:56:33:99:6b:b4:8d:01:48:
         c1:4e:6a:26:1b:df:d5:c8:e1:e2:8e:ad:d0:b0:41:ac:bd:d6:
         88:56:fd:d9:2b:bb:f4:af:0e:f8:a4:ef:52:c4:45:7b:71:a2:
         18:d4:d7:4a:29:1c:8d:da:70:d0:37:47:61:bc:07:bf:4d:0c:
         0b:e3:cb:fc:be:ae:e4:e4:7d:d2:b5:63:80:77:d5:f8:b5:24:
         ab:af:59:74:02:a0:08:13:8a:74:d9:5f:57:94:5b:3c:b3:16:
         33:86:41:61:92:ad:22:c4:3f:8e:fd:95:c3:91:11:22:44:a7:
         e8:08:f0:7a:cc:b7:3d:31:41:5a:a1:d1:65:6d:a0:ac:9d:84:
         9f:d4:93:b2:d0:e2:ad:ec:30:c3:34:b6:4a:66:80:b3:5a:91:
         7c:36:e4:ed:57:d0:1b:d6:5c:fd:2e:69:ec:f5:cd:b3:e3:fd:
         29:a7:13:78:85:48:e6:ba:ea:56:ad:b6:c8:38:e4:e0:be:75:
         10:fa:a4:95:a1:0a:72:0a:e4:aa:fe:aa:a7:44:af:b2:85:e2:
         84:e3:3f:67:85:37:0c:78:3d:7a:c9:ce:30:58:75:9c:36:d1:
         7b:7c:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:06 2024 by rpki-client on console-ams.rpki-client.org