Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35323a3a2f34382d3438203d3e203133333335.roa
File:                     323830333a663830303a35323a3a2f34382d3438203d3e203133333335.roa (raw, json)
Hash identifier:          ORa5Y0z4oDEG8367v3IkGbltJqf1eB3VTVm3sH+Q5TM=
Subject key identifier:   E5:B0:84:5F:1F:36:EE:FF:BC:0B:CA:73:A2:20:F7:03:3F:6D:A7:E8
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       1FBCC2C98305DF0CAF1827FB28D780E23DE7ECE5
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35323a3a2f34382d3438203d3e203133333335.roa
Signing time:             Tue 05 Mar 2024 18:17:52 +0000
ROA not before:           Tue 05 Mar 2024 18:12:52 +0000
ROA not after:            Tue 04 Mar 2025 18:17:52 +0000
asID:                     13335
IP address blocks:        2803:f800:52::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:c2:c9:83:05:df:0c:af:18:27:fb:28:d7:80:e2:3d:e7:ec:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Mar  5 18:12:52 2024 GMT
            Not After : Mar  4 18:17:52 2025 GMT
        Subject: CN=E5B0845F1F36EEFFBC0BCA73A220F7033F6DA7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:0a:52:ee:6a:80:18:ac:fa:50:c0:c4:3f:
                    f7:c1:7a:47:d9:f7:ae:1f:ea:af:d9:fc:28:74:03:
                    76:e6:bf:be:cb:00:65:9d:5b:84:2e:8d:f2:72:cd:
                    73:9d:bc:86:e0:d7:57:8d:e1:7b:ae:0e:37:4c:81:
                    e1:88:d2:d2:35:db:73:c2:5f:27:72:79:75:fb:1b:
                    f3:a6:7c:89:ac:36:86:98:ea:09:43:c7:cc:48:d6:
                    51:bc:a2:29:65:e9:bb:30:9f:12:4f:ce:36:56:c3:
                    e1:c1:88:b6:b9:b2:45:2c:9a:3e:28:15:d1:df:ac:
                    3c:12:b6:45:e2:92:a6:de:01:49:24:2a:9c:fa:7d:
                    d4:7a:ef:98:61:09:82:0e:4e:bc:e8:1e:67:8f:91:
                    78:75:ca:22:19:19:d2:17:89:32:b1:43:34:3c:40:
                    e4:8b:28:93:16:01:d3:ad:c8:ec:49:45:f1:c2:93:
                    48:43:17:58:a6:68:86:f7:fa:f7:85:4b:25:d7:2f:
                    a0:42:79:d4:b6:82:4c:53:ec:00:96:58:e8:48:6c:
                    5f:11:44:9a:ec:8f:64:51:9f:9d:1a:04:a8:0e:eb:
                    4b:fd:42:46:00:8f:d9:90:e1:da:73:39:f5:43:e5:
                    96:fc:66:ef:b1:a9:5d:af:b2:01:fe:64:74:e5:ab:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B0:84:5F:1F:36:EE:FF:BC:0B:CA:73:A2:20:F7:03:3F:6D:A7:E8
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35323a3a2f34382d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:52::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:32:95:12:be:87:22:be:69:34:aa:63:8d:45:3c:17:b8:e1:
         de:e8:85:5e:ae:8f:e6:56:36:75:e0:f9:9d:2f:e5:fd:8f:96:
         b5:e9:7f:cf:3e:33:87:3d:0e:96:87:02:36:3f:d1:9e:68:f7:
         ca:98:22:5b:6f:c3:29:56:aa:53:23:30:0f:7a:ee:30:fe:06:
         02:9a:20:34:70:f3:40:99:40:3a:04:52:2a:19:ab:db:95:aa:
         33:ad:8c:e7:bd:f3:ac:e4:d0:f7:74:1c:86:43:58:b2:2a:b4:
         18:82:9c:08:f5:56:83:eb:6c:79:55:1b:dc:2e:e4:12:ec:05:
         d6:b4:72:36:74:a7:4c:9b:c0:1a:d2:6d:04:0e:4c:13:5c:1d:
         49:73:99:57:c9:ba:f3:4f:0c:90:ee:95:7e:aa:44:67:c0:db:
         ca:5c:67:de:c0:2f:5a:dc:ea:65:08:57:97:26:dc:8e:af:b3:
         b6:5c:b0:b2:4d:74:17:4b:18:8f:29:72:3a:6a:ba:ab:95:e7:
         de:1f:48:98:2a:9c:ef:cf:e8:4a:29:b9:f8:a3:e1:b6:e7:89:
         c7:36:7f:5c:40:9e:31:0a:b2:72:9d:6b:0d:d6:60:e5:7e:28:
         c0:37:95:31:20:53:47:4f:6c:ea:a9:cd:e5:2a:1b:ca:f2:ce:
         e5:3f:29:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org