Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a383030303a3a2f33332d3333203d3e203237393431.roa
File:                     323830333a323138303a383030303a3a2f33332d3333203d3e203237393431.roa (raw, json)
Hash identifier:          JTZ1vMvkILH90+Fal7dTJgY18a00H4Vwo9f1KpQhfNE=
Subject key identifier:   D9:A0:44:0F:A7:A7:2D:6C:B3:20:61:E3:26:9E:30:7F:2D:00:57:BB
Certificate issuer:       /CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
Certificate serial:       35555AABEC2A95EC6D5A956B4C6F09C91B27491F
Authority key identifier: 4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a383030303a3a2f33332d3333203d3e203237393431.roa
Signing time:             Tue 05 Mar 2024 17:55:46 +0000
ROA not before:           Tue 05 Mar 2024 17:50:46 +0000
ROA not after:            Tue 04 Mar 2025 17:55:46 +0000
asID:                     27941
IP address blocks:        2803:2180:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:55:5a:ab:ec:2a:95:ec:6d:5a:95:6b:4c:6f:09:c9:1b:27:49:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
        Validity
            Not Before: Mar  5 17:50:46 2024 GMT
            Not After : Mar  4 17:55:46 2025 GMT
        Subject: CN=D9A0440FA7A72D6CB32061E3269E307F2D0057BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:79:39:a5:d4:05:03:e1:d3:57:f0:fb:a9:
                    65:aa:8b:8b:00:f5:f3:e9:04:17:1a:92:69:e7:e4:
                    ef:d2:77:45:9f:74:c7:7a:97:3f:50:f2:7d:84:55:
                    41:c1:ff:c3:1c:f2:2f:4d:50:5f:49:33:98:21:e6:
                    bb:2d:f9:b8:69:b1:6f:bd:5a:43:ca:3a:bd:66:6a:
                    7a:1f:ec:43:db:11:30:09:47:96:7c:99:f5:78:ed:
                    83:7d:4e:ae:92:bb:97:42:5d:f0:c0:df:4b:81:da:
                    1d:ff:36:51:cf:11:49:62:d2:7b:9e:e1:05:49:44:
                    e2:bc:58:bc:bf:48:09:81:eb:8f:91:b1:9e:b8:f0:
                    94:82:9b:81:ea:4c:bc:a1:40:fc:57:ed:4a:8e:f9:
                    27:d1:be:18:69:b4:f5:7d:04:f2:e2:6e:7e:4f:f0:
                    9f:e8:fe:74:85:e7:3d:e8:1c:67:58:a6:64:3d:e7:
                    d5:65:3e:7a:7d:9d:82:10:a1:08:ec:0e:5b:c1:b6:
                    dc:d5:0d:f8:6b:43:9c:85:a9:d9:e8:3d:05:fa:08:
                    e1:32:68:36:83:dc:54:73:cb:8a:75:c5:a0:f4:ce:
                    e8:85:b7:62:74:be:bc:90:77:ec:26:b8:0c:a1:7c:
                    9e:9b:5d:95:42:7c:df:18:cd:9a:b1:09:92:15:75:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A0:44:0F:A7:A7:2D:6C:B3:20:61:E3:26:9E:30:7F:2D:00:57:BB
            X509v3 Authority Key Identifier:
                keyid:4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/323830333a323138303a383030303a3a2f33332d3333203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2180:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:56:d7:3c:7b:c2:47:d1:34:14:88:19:a7:96:34:0f:04:
         98:bb:91:41:98:fb:b1:aa:70:58:e1:41:be:5e:d2:bc:c7:c0:
         34:c8:dd:b0:9b:76:ce:de:b4:dc:2e:4c:01:5f:38:0d:17:d1:
         b0:95:69:18:31:06:ec:97:fa:ea:2a:e9:50:7a:57:68:86:9d:
         a8:15:68:d9:b2:fb:7c:3f:a1:24:9b:3b:36:70:25:00:a5:11:
         aa:c6:c4:a9:c9:10:df:4d:7d:68:57:e2:b6:86:36:6e:e1:39:
         86:51:d9:db:a7:39:25:90:f9:4e:3f:e1:84:a8:b8:80:e0:d1:
         04:2c:1e:42:28:c2:9a:72:63:99:82:4b:4a:79:5c:b5:8d:d0:
         db:4f:fa:cb:4c:65:ce:f7:61:d9:f1:78:59:8b:7a:da:44:29:
         14:40:3a:39:28:aa:f8:f2:37:bf:1c:ec:04:17:4f:39:cb:79:
         08:6f:e0:37:57:bf:75:3a:80:42:86:27:8b:e5:9f:25:10:3c:
         11:90:db:4b:44:92:eb:50:30:a0:eb:74:e3:7c:f2:85:70:70:
         7f:50:9a:55:45:e0:f6:75:0b:d2:12:e2:f7:c8:57:1e:2c:ba:
         26:e0:c8:d6:f7:e1:f3:cf:5c:fd:e6:cf:c4:9d:01:0b:53:06:
         d2:d2:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org