Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3130303a3a2f34342d3434203d3e203532323836.roa
File:                     323830333a626130303a3130303a3a2f34342d3434203d3e203532323836.roa (raw, json)
Hash identifier:          +0c9Rza6OhYu3UPz1tsOMS8rIiVkdR42pVDlr73k+2c=
Subject key identifier:   98:1D:E7:FF:28:5F:AF:DB:CC:AE:71:87:9F:06:7B:BE:1E:54:C5:02
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       6AD0842AB61A46BFB8154E55B24FE25958387370
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3130303a3a2f34342d3434203d3e203532323836.roa
Signing time:             Tue 05 Mar 2024 17:54:34 +0000
ROA not before:           Tue 05 Mar 2024 17:49:34 +0000
ROA not after:            Tue 04 Mar 2025 17:54:34 +0000
asID:                     52286
IP address blocks:        2803:ba00:100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d0:84:2a:b6:1a:46:bf:b8:15:4e:55:b2:4f:e2:59:58:38:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Mar  5 17:49:34 2024 GMT
            Not After : Mar  4 17:54:34 2025 GMT
        Subject: CN=981DE7FF285FAFDBCCAE71879F067BBE1E54C502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:99:2c:3d:87:62:7d:2d:3f:d5:8f:a2:45:
                    6b:3f:5f:3b:25:39:51:26:66:47:85:a9:55:00:9d:
                    8a:06:d4:3e:d0:71:78:c2:b1:01:2c:85:1b:98:6e:
                    e6:e5:c4:1d:56:95:98:b2:a1:c5:e5:ed:0b:52:0d:
                    6f:11:b7:5d:46:86:b4:d3:45:fe:82:78:bc:b0:dc:
                    ef:a3:47:e1:ab:1e:dc:e0:31:d5:a5:ce:2b:be:ba:
                    9f:a4:f3:56:41:f5:21:bb:a6:e0:d9:a0:48:d7:c1:
                    89:21:7c:fe:e3:e6:b4:b6:5f:e8:3c:8a:40:d1:3e:
                    5b:b1:cd:5e:48:aa:d2:ee:ca:d8:8e:d7:db:49:6f:
                    9e:3c:d6:a6:74:58:2f:00:5c:63:86:f2:a5:38:48:
                    22:08:2b:4b:d1:21:49:68:52:c3:a7:ff:12:3c:4a:
                    21:28:40:ea:5a:1d:77:32:19:3c:64:4e:52:de:6e:
                    6a:9c:02:0e:f2:5d:a9:48:6f:e1:0c:61:01:64:ec:
                    e0:f0:a2:55:bf:6a:71:28:e4:16:d4:fa:02:41:54:
                    a1:4b:21:fc:82:6f:05:79:a5:fa:47:25:48:a2:d3:
                    23:34:a5:96:7c:35:55:dd:0f:1d:08:ec:a6:38:35:
                    c3:64:59:73:30:2f:76:45:d4:06:7d:30:ba:f3:3e:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1D:E7:FF:28:5F:AF:DB:CC:AE:71:87:9F:06:7B:BE:1E:54:C5:02
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3130303a3a2f34342d3434203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba00:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:f7:d8:16:aa:6d:06:58:a4:48:33:f8:e2:de:db:9c:51:
         a9:66:e7:4b:e7:7c:30:dc:4c:0e:d0:a0:e3:dd:48:c6:19:01:
         91:6d:d0:62:6a:d5:f1:8f:8f:55:61:bb:c1:14:9c:9e:54:9d:
         8d:2e:44:5f:eb:b8:ca:2d:df:ef:0b:1a:8d:72:9e:87:f2:d5:
         e2:09:a2:24:4b:23:35:ef:ed:ec:5c:62:ee:d4:f2:3b:20:7e:
         87:06:77:71:46:9e:34:32:86:10:a5:28:43:e8:0e:a9:6a:01:
         dd:2e:08:57:e6:db:9e:c4:e8:c5:66:d0:ae:61:28:00:b0:c8:
         b4:0e:42:3a:ae:5f:28:6c:b8:ae:32:36:48:07:88:10:07:b6:
         42:c3:20:c9:c9:52:1e:1a:ac:b7:ff:b2:d4:51:c3:b8:cc:de:
         e7:59:93:2d:c7:5a:da:4a:83:1c:8b:a4:8b:14:3b:61:e8:d6:
         4e:cd:42:d6:6b:de:9a:d4:df:e2:e1:72:c7:3f:da:06:67:64:
         83:f7:4e:4f:5c:b0:de:7b:c3:11:20:45:d0:4f:53:b3:08:73:
         ca:b4:bb:ec:04:d8:db:c9:cd:45:b0:02:80:3d:b7:e9:df:bb:
         50:de:8a:4b:f4:ed:67:c0:fa:95:a7:b2:39:5b:4c:6d:0b:f4:
         29:62:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 03:44:59 2024 by rpki-client on console-fra.rpki-client.org