Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430343a3a2f34382d3438203d3e203134303830.roa
File:                     323830333a613831303a3430343a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          43H5qyRiq+Og0L7lcrvM8PKoYoQT14o8M+2ma71LYf4=
Subject key identifier:   34:13:9F:B1:C8:74:85:77:CB:56:AE:84:F1:BD:2F:CA:0A:4F:3C:9C
Certificate issuer:       /CN=E3981097C6AD233FEB99DF81E5FA8E3CE87579C3
Certificate serial:       2A353EBCA5F1461E907EBEDB2C80C0B56207F23C
Authority key identifier: E3:98:10:97:C6:AD:23:3F:EB:99:DF:81:E5:FA:8E:3C:E8:75:79:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430343a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 17:46:28 +0000
ROA not before:           Tue 05 Mar 2024 17:41:28 +0000
ROA not after:            Tue 04 Mar 2025 17:46:28 +0000
asID:                     14080
IP address blocks:        2803:a810:404::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:35:3e:bc:a5:f1:46:1e:90:7e:be:db:2c:80:c0:b5:62:07:f2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3981097C6AD233FEB99DF81E5FA8E3CE87579C3
        Validity
            Not Before: Mar  5 17:41:28 2024 GMT
            Not After : Mar  4 17:46:28 2025 GMT
        Subject: CN=34139FB1C8748577CB56AE84F1BD2FCA0A4F3C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:30:15:5a:26:58:4e:66:e0:95:4e:98:0d:
                    e7:ba:59:b5:ae:e8:84:c3:ae:51:e7:a5:14:05:1f:
                    e7:94:77:18:29:31:11:2a:7e:cc:c2:8d:14:e5:4e:
                    96:97:33:6b:b8:15:a3:aa:63:8d:7f:af:1a:1d:88:
                    75:f5:a8:d9:93:fe:59:8c:7b:ef:62:9a:55:cd:86:
                    c5:81:86:47:48:13:92:35:21:63:6a:12:6f:0d:a1:
                    c1:1e:cf:49:1c:65:5f:9e:3f:d0:83:61:ad:eb:79:
                    10:bc:70:6d:c9:85:70:fd:84:69:6f:8b:61:56:a2:
                    15:a1:e1:b1:b5:77:57:a7:69:e1:ab:2f:4b:e2:7a:
                    c4:79:29:bf:a5:83:c3:51:18:00:2e:44:fa:7e:6b:
                    51:91:ae:36:42:75:4d:dc:44:83:57:ad:15:67:a5:
                    c5:a8:f3:7e:2d:45:1e:21:c4:a6:02:d8:1c:f7:05:
                    78:4d:61:4a:69:b4:74:ed:12:10:ba:e3:38:e3:8f:
                    88:79:31:ac:6c:ed:28:43:c3:d0:c6:55:64:b3:9c:
                    39:52:34:36:fc:ac:74:44:d9:c4:93:7e:e2:00:32:
                    89:91:f1:46:53:ed:64:fb:90:62:6d:0c:88:bd:37:
                    f0:e7:2e:d1:21:dd:dd:b1:4c:19:62:0b:2c:46:e3:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:13:9F:B1:C8:74:85:77:CB:56:AE:84:F1:BD:2F:CA:0A:4F:3C:9C
            X509v3 Authority Key Identifier:
                keyid:E3:98:10:97:C6:AD:23:3F:EB:99:DF:81:E5:FA:8E:3C:E8:75:79:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430343a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a810:404::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:27:38:85:c7:34:77:9b:96:43:b2:d6:89:90:b8:bf:c9:4b:
         ec:08:9a:b0:9a:56:6a:2b:ce:6a:ad:44:91:dc:09:c4:75:83:
         a4:07:11:6b:f6:a3:cc:ad:6c:35:22:4a:b0:9e:ad:2b:67:79:
         21:d3:94:48:24:be:32:ed:6d:45:c1:42:ed:3d:b0:1a:60:25:
         11:eb:32:71:9a:2d:1d:b4:e6:2a:64:c1:84:1c:a3:18:4f:3b:
         74:6a:66:ad:98:ea:93:ab:de:c7:88:0c:b0:fe:60:24:0d:40:
         ed:ca:db:6b:a2:9e:c1:31:1c:c0:3b:9c:4f:98:85:01:96:7f:
         99:a9:97:50:c3:23:c4:bb:9f:c6:5e:8c:68:8c:6a:38:3b:ac:
         c1:99:72:2c:d4:f0:a8:7e:83:42:d0:68:3b:45:63:6e:f6:7b:
         03:65:72:27:d5:39:66:44:0a:04:76:b6:11:75:d2:f5:a3:6b:
         0d:a5:21:10:10:56:1d:a4:d7:80:05:4d:70:10:b6:ae:e9:4d:
         a6:82:a4:fd:c7:9c:21:c5:08:80:94:f1:25:ba:4d:3b:7e:b6:
         e9:51:0a:17:1f:af:a4:15:cb:ba:ee:0c:90:5f:c1:84:fb:55:
         9d:02:b6:be:17:ac:5e:c7:f6:d0:5a:d3:63:2c:55:df:75:a0:
         f9:40:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:13:57 2024 by rpki-client on console-ams.rpki-client.org