Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/952422C499C188B9C7B218A0B51C4966BE3821580A3546C37801A3F9D9BB0736/0/323830333a343661303a3a2f33322d3332203d3e20323636383837.roa
File:                     323830333a343661303a3a2f33322d3332203d3e20323636383837.roa (raw, json)
Hash identifier:          a1NxSt0MqL6PX/wNxjS+/OKsake1+tEmm/uAKBIte8s=
Subject key identifier:   90:BC:BF:1E:AB:95:B5:04:60:63:E4:7B:FE:73:A4:57:DB:C9:B4:74
Certificate issuer:       /CN=577B0AAAA3F4F8759EFB82F228BC0AEE543FB470
Certificate serial:       48769DF81EF80F9C5978608B4D25EF3AE34DEC47
Authority key identifier: 57:7B:0A:AA:A3:F4:F8:75:9E:FB:82:F2:28:BC:0A:EE:54:3F:B4:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/577B0AAAA3F4F8759EFB82F228BC0AEE543FB470.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/952422C499C188B9C7B218A0B51C4966BE3821580A3546C37801A3F9D9BB0736/0/323830333a343661303a3a2f33322d3332203d3e20323636383837.roa
Signing time:             Tue 05 Mar 2024 17:47:04 +0000
ROA not before:           Tue 05 Mar 2024 17:42:04 +0000
ROA not after:            Tue 04 Mar 2025 17:47:04 +0000
asID:                     266887
IP address blocks:        2803:46a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/952422C499C188B9C7B218A0B51C4966BE3821580A3546C37801A3F9D9BB0736/0/577B0AAAA3F4F8759EFB82F228BC0AEE543FB470.crl
                          rsync://repository.lacnic.net/rpki/lacnic/952422C499C188B9C7B218A0B51C4966BE3821580A3546C37801A3F9D9BB0736/0/577B0AAAA3F4F8759EFB82F228BC0AEE543FB470.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/577B0AAAA3F4F8759EFB82F228BC0AEE543FB470.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:76:9d:f8:1e:f8:0f:9c:59:78:60:8b:4d:25:ef:3a:e3:4d:ec:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577B0AAAA3F4F8759EFB82F228BC0AEE543FB470
        Validity
            Not Before: Mar  5 17:42:04 2024 GMT
            Not After : Mar  4 17:47:04 2025 GMT
        Subject: CN=90BCBF1EAB95B5046063E47BFE73A457DBC9B474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:8d:53:be:c2:84:7b:a4:19:82:19:6b:b3:
                    c1:ba:a7:da:0e:1f:b6:dd:48:e2:0a:13:99:d5:2a:
                    6d:2a:76:f5:a1:9b:9d:d8:85:a8:24:9e:cf:5f:e6:
                    ed:95:96:a4:97:aa:bd:bd:87:82:6e:22:47:98:e5:
                    1d:96:48:c3:bc:13:c8:39:ef:36:dc:e5:ce:75:52:
                    54:f5:80:dd:24:c7:fb:d0:96:1c:96:16:5d:0e:fe:
                    ea:b8:c6:57:7d:fc:22:a1:86:91:0f:ad:89:dd:17:
                    d9:2f:e2:b4:9e:e5:bb:94:f2:f9:e4:f5:35:8a:3c:
                    75:56:e3:55:7d:50:70:56:99:6d:24:f6:fc:1e:09:
                    62:e9:cc:a8:b8:db:8f:47:51:ff:47:7b:cd:89:85:
                    0c:bb:bb:01:54:a2:92:33:9b:d4:c5:5c:76:02:aa:
                    62:f3:a4:80:b2:33:f9:ca:19:76:d7:34:c5:c4:28:
                    53:c9:42:fb:e7:90:7b:c3:94:43:cf:e5:3d:ea:51:
                    95:6e:fa:fe:ed:19:b2:5b:f7:13:be:c1:69:2a:18:
                    75:57:05:30:bf:53:d4:65:04:4a:91:0b:41:b6:cd:
                    32:50:d8:93:5c:49:bf:6f:6c:30:7e:9c:da:06:bb:
                    82:50:09:e0:b0:9c:15:7c:0c:e1:36:01:75:20:05:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:BF:1E:AB:95:B5:04:60:63:E4:7B:FE:73:A4:57:DB:C9:B4:74
            X509v3 Authority Key Identifier:
                keyid:57:7B:0A:AA:A3:F4:F8:75:9E:FB:82:F2:28:BC:0A:EE:54:3F:B4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/952422C499C188B9C7B218A0B51C4966BE3821580A3546C37801A3F9D9BB0736/0/577B0AAAA3F4F8759EFB82F228BC0AEE543FB470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/577B0AAAA3F4F8759EFB82F228BC0AEE543FB470.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/952422C499C188B9C7B218A0B51C4966BE3821580A3546C37801A3F9D9BB0736/0/323830333a343661303a3a2f33322d3332203d3e20323636383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:46a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:e4:14:84:8d:b9:e4:70:fb:bb:13:a8:ee:be:90:37:e0:59:
         c7:5b:e1:0d:89:c8:a2:86:4e:ef:fd:2f:b2:52:1d:08:e4:c5:
         51:2e:4f:8a:fe:07:7d:71:e6:e3:bd:e9:60:64:33:bf:20:bd:
         e6:4e:47:9d:09:f8:91:35:34:f9:ba:1f:ba:fb:a1:f2:fd:29:
         9b:78:41:a0:8b:9a:9f:a0:9b:5f:4e:f7:02:64:5e:cd:23:3b:
         eb:21:d7:73:36:6c:b2:44:99:7c:41:ae:70:05:55:47:67:d7:
         f4:4a:b8:5a:6f:f3:db:31:cc:a9:a5:15:df:f0:6f:af:ed:4c:
         59:d6:63:62:47:11:a9:9e:c3:59:4f:98:98:23:d9:74:f3:eb:
         a2:54:ad:0c:05:73:ec:54:5f:a3:8c:b3:b6:7e:b7:af:af:69:
         9b:ec:42:3a:bb:86:1d:7a:22:a8:ba:73:4e:b7:1a:1b:7a:da:
         3d:98:fb:81:b0:6f:bd:52:00:a4:46:11:69:d9:16:27:d4:cc:
         4d:05:07:08:68:f2:22:61:4c:c4:37:34:5a:a5:52:c9:f4:9e:
         c0:8d:69:c5:d7:e3:21:2e:ba:42:1b:7f:e3:ee:64:b7:38:7b:
         83:bd:60:4a:da:c0:3f:b3:f7:6d:0d:c4:2c:c6:7d:0b:db:73:
         ed:b4:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org