Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a313030303a3a2f33392d3430203d3e203134353232.roa
File:                     323830303a3961333a313030303a3a2f33392d3430203d3e203134353232.roa (raw, json)
Hash identifier:          4lbpCaN/n8B2EJlKxGtHf21JUl1RAbA0aeI8LZpA/Kk=
Subject key identifier:   91:E0:9F:4A:A6:ED:2A:C4:43:8A:64:7D:35:9F:A6:15:F0:AD:DA:B0
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       4A40384F25AF056B2A6F93A7B43BCB9FCA3C3F27
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a313030303a3a2f33392d3430203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:55 +0000
ROA not before:           Tue 05 Mar 2024 18:15:55 +0000
ROA not after:            Tue 04 Mar 2025 18:20:55 +0000
asID:                     14522
IP address blocks:        2800:9a3:1000::/39 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:40:38:4f:25:af:05:6b:2a:6f:93:a7:b4:3b:cb:9f:ca:3c:3f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:55 2024 GMT
            Not After : Mar  4 18:20:55 2025 GMT
        Subject: CN=91E09F4AA6ED2AC4438A647D359FA615F0ADDAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:c2:ba:c8:57:a9:ca:e5:e0:b3:ae:68:7f:
                    fe:c2:6d:78:58:da:dd:06:59:df:08:69:c7:63:fe:
                    48:19:d8:a6:e4:ac:bf:9b:76:39:d6:6d:1c:c9:ad:
                    48:e2:e3:3f:c2:36:6d:b3:dc:5a:3c:dc:50:33:c6:
                    be:90:23:96:eb:62:89:68:4c:76:bc:eb:73:c8:17:
                    c3:39:39:94:f3:e4:66:66:79:21:b9:c9:0d:4a:6a:
                    1c:28:fc:a6:11:e0:09:1c:35:c5:eb:db:07:eb:46:
                    dd:7a:15:51:98:45:86:97:46:49:90:a5:4e:66:b9:
                    bd:20:bb:51:9c:03:51:9d:f2:ec:70:4b:7c:2e:e6:
                    fb:30:c2:e4:db:73:de:d0:57:11:90:e6:de:54:e4:
                    85:d9:06:63:66:39:bd:ab:fc:50:2d:81:18:16:18:
                    aa:df:94:09:c8:8f:21:f3:6e:43:bd:22:e2:42:65:
                    50:5a:87:fe:c1:c3:d8:35:d8:2a:87:31:14:68:3a:
                    0c:42:e4:92:36:f1:b3:0c:14:40:73:98:84:a5:4f:
                    a6:f3:c9:97:55:d8:f2:9a:36:3b:6e:d1:43:b4:f2:
                    01:f4:d5:22:ae:0a:ba:27:41:0d:18:82:bd:78:4d:
                    47:4e:f3:df:66:b8:6e:b5:48:72:13:28:bf:ca:97:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E0:9F:4A:A6:ED:2A:C4:43:8A:64:7D:35:9F:A6:15:F0:AD:DA:B0
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a313030303a3a2f33392d3430203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a3:1000::/39

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:b7:be:46:84:7f:93:e8:78:39:b8:14:f8:21:ea:3f:7f:
         e6:c3:b3:69:6c:3d:40:e4:18:69:ba:eb:1e:97:1d:00:c1:d8:
         50:9d:0d:dd:7a:6e:61:7d:34:f0:f0:cd:17:9c:ae:22:bf:f2:
         80:dc:1f:c5:6b:21:5c:7c:f4:c5:50:9b:9d:d7:72:64:b2:65:
         ba:d7:aa:2c:0b:0a:62:fa:08:c4:d5:75:6a:5d:c3:2d:2d:98:
         82:f0:66:e2:04:6c:59:30:87:35:ca:68:7a:ef:d3:06:b5:db:
         a1:9d:35:a1:b7:5e:56:cf:6a:5c:6a:7d:cf:6f:95:e6:d4:4f:
         ef:b4:c1:1d:40:21:73:d0:ae:5e:d5:64:00:b7:22:16:3f:15:
         7c:c6:c8:5d:48:ca:3c:51:0b:f5:fa:ba:c0:aa:10:97:fa:7c:
         14:17:36:d2:67:20:df:e0:9b:39:fd:bb:5a:16:e5:5e:91:ae:
         32:97:12:f6:8c:25:38:e4:eb:2d:b1:c6:17:4b:0c:6f:36:2d:
         22:f6:82:17:65:ae:5b:52:af:53:5d:69:17:ee:88:0b:11:30:
         bc:11:b3:14:7d:04:dd:3a:e1:53:f4:38:ac:e0:56:dc:94:59:
         a2:f6:21:a2:b1:55:bc:92:e6:51:37:91:e6:cb:ab:e5:3d:2e:
         c9:3f:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org