Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/323830333a396339303a3a2f33322d3438203d3e20323732383338.roa
File:                     323830333a396339303a3a2f33322d3438203d3e20323732383338.roa (raw, json)
Hash identifier:          j933El+pcsDdbSQiJG9ppMdcqCRJJcZ+D0Kl0avSVCk=
Subject key identifier:   90:48:92:98:0E:88:00:C5:96:60:32:98:CC:0A:9E:49:75:B5:90:B9
Certificate issuer:       /CN=C23C62029A23C1403C9359A3570A34E8A47D6452
Certificate serial:       54AEFFDE236088C764BC9D55EBC9E9B0D60D48A4
Authority key identifier: C2:3C:62:02:9A:23:C1:40:3C:93:59:A3:57:0A:34:E8:A4:7D:64:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C62029A23C1403C9359A3570A34E8A47D6452.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/323830333a396339303a3a2f33322d3438203d3e20323732383338.roa
Signing time:             Tue 05 Mar 2024 18:04:37 +0000
ROA not before:           Tue 05 Mar 2024 17:59:37 +0000
ROA not after:            Tue 04 Mar 2025 18:04:37 +0000
asID:                     272838
IP address blocks:        2803:9c90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/C23C62029A23C1403C9359A3570A34E8A47D6452.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/C23C62029A23C1403C9359A3570A34E8A47D6452.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C62029A23C1403C9359A3570A34E8A47D6452.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ae:ff:de:23:60:88:c7:64:bc:9d:55:eb:c9:e9:b0:d6:0d:48:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23C62029A23C1403C9359A3570A34E8A47D6452
        Validity
            Not Before: Mar  5 17:59:37 2024 GMT
            Not After : Mar  4 18:04:37 2025 GMT
        Subject: CN=904892980E8800C596603298CC0A9E4975B590B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:90:48:e8:40:1e:a7:f7:9a:7d:f6:26:dc:
                    42:37:3d:46:75:21:1d:fd:5b:97:25:59:0e:46:6e:
                    fc:09:58:36:5f:ed:85:95:a4:71:a8:b2:53:92:dc:
                    84:7d:ed:38:3a:09:28:af:c7:20:31:fe:50:99:78:
                    de:9a:e5:cb:6a:6e:b7:04:87:c2:61:92:e7:2d:ff:
                    8a:01:9b:20:15:4d:08:49:09:fb:fe:95:2b:d2:5a:
                    44:98:dc:08:9a:5f:01:fc:9d:0f:41:65:a0:59:35:
                    60:eb:96:c3:f4:19:6d:85:a1:13:b4:73:fb:6b:b3:
                    06:21:dd:c8:1d:6b:de:9e:b8:69:9a:0f:fa:a6:d8:
                    b5:2e:67:1d:d0:c4:41:be:1a:d1:c2:8c:8d:37:91:
                    92:2a:89:9c:0e:05:f6:a7:6e:99:05:ea:1f:e7:42:
                    a6:a6:e8:81:47:61:91:c5:29:b0:3e:7f:df:77:8f:
                    e9:dd:2f:a7:6c:a9:3a:02:db:45:06:28:a4:ed:bb:
                    13:85:1e:43:cd:dc:80:1d:5b:ad:65:7f:84:1d:8d:
                    6f:92:80:bb:c9:89:17:0a:02:eb:22:d3:ea:61:52:
                    bd:fe:c3:f4:a0:f4:da:d0:38:f9:f3:a8:a0:74:f9:
                    db:04:a2:ec:d5:2e:1c:ae:40:13:7b:18:5b:04:66:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:48:92:98:0E:88:00:C5:96:60:32:98:CC:0A:9E:49:75:B5:90:B9
            X509v3 Authority Key Identifier:
                keyid:C2:3C:62:02:9A:23:C1:40:3C:93:59:A3:57:0A:34:E8:A4:7D:64:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/C23C62029A23C1403C9359A3570A34E8A47D6452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C62029A23C1403C9359A3570A34E8A47D6452.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/323830333a396339303a3a2f33322d3438203d3e20323732383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:98:82:fb:23:c3:57:ba:52:5c:16:66:fc:29:a2:0e:37:7e:
         40:b1:90:0b:76:fb:7c:32:8d:10:52:2b:06:7e:e8:ab:2c:0b:
         ab:9c:18:e2:37:55:91:6c:be:91:e8:3e:5b:28:d1:82:46:23:
         62:ed:18:c0:ad:d8:ce:4f:f2:3c:a4:de:83:e3:1d:ba:94:3c:
         de:36:7b:4c:7d:4f:33:0d:79:cd:be:be:c5:84:6a:42:10:31:
         0a:51:27:f6:ab:55:53:75:31:88:83:13:f3:24:78:25:1f:64:
         e3:19:02:06:a7:b8:29:c2:48:df:3f:d5:ec:2a:c7:5e:ce:15:
         19:35:d6:71:ae:4d:56:47:22:ce:bc:71:2c:33:d2:c5:92:7b:
         3a:41:04:e7:97:45:58:7d:2a:63:8f:c8:da:c9:0e:57:69:7e:
         e0:2b:c1:69:4a:b9:21:2e:2d:14:f0:e7:7d:0b:07:f2:da:c2:
         e3:35:ef:d3:ac:9c:51:39:6d:b3:69:8d:c1:8a:61:46:04:c7:
         f1:5c:62:24:7b:26:0a:94:ae:4c:98:60:18:fe:24:0a:dd:bf:
         9a:f6:dd:5c:ff:b9:0e:20:03:68:17:98:f7:7c:11:9b:7c:42:
         a3:cb:98:0b:bd:a4:1a:5d:86:74:7b:3d:25:a1:c0:b2:d7:63:
         da:4a:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:39 2024 by rpki-client on console-ams.rpki-client.org