Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a323a3a2f34382d3438203d3e20323636363938.roa
File:                     323830333a346432303a323a3a2f34382d3438203d3e20323636363938.roa (raw, json)
Hash identifier:          qzOZ1RskrtXMHco4btHqlpjWMjrDosfLse+Lmc8JQ1I=
Subject key identifier:   52:4D:EE:3F:0D:40:FC:88:D4:39:5E:D4:75:2E:40:76:82:54:9B:E5
Certificate issuer:       /CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
Certificate serial:       49579FD6086F959437667D76E5E3004853CC8F11
Authority key identifier: C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a323a3a2f34382d3438203d3e20323636363938.roa
Signing time:             Tue 05 Mar 2024 18:20:04 +0000
ROA not before:           Tue 05 Mar 2024 18:15:04 +0000
ROA not after:            Tue 04 Mar 2025 18:20:04 +0000
asID:                     266698
IP address blocks:        2803:4d20:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:57:9f:d6:08:6f:95:94:37:66:7d:76:e5:e3:00:48:53:cc:8f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Validity
            Not Before: Mar  5 18:15:04 2024 GMT
            Not After : Mar  4 18:20:04 2025 GMT
        Subject: CN=524DEE3F0D40FC88D4395ED4752E407682549BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:db:68:94:70:fd:b3:43:09:53:5f:53:69:
                    84:29:03:e2:f7:53:79:d0:2d:b2:8e:d5:ca:48:cf:
                    80:39:12:b4:9e:a5:46:32:90:75:89:84:74:75:3d:
                    6e:c5:b7:49:7c:78:0c:3c:9b:d9:87:c7:c5:15:3f:
                    23:15:d5:44:02:89:41:0d:22:b9:d2:27:3b:24:b7:
                    30:66:ee:e8:99:25:81:70:38:68:3d:75:b5:de:36:
                    9c:54:c5:76:67:d7:41:07:9a:7f:a3:d1:76:19:41:
                    09:b3:72:7e:c5:1b:34:e5:9d:9c:dc:a1:7b:51:af:
                    07:c0:b9:da:a9:3a:a2:c0:31:4e:08:c0:10:19:04:
                    aa:04:70:26:6f:5c:86:d5:d3:71:45:25:9a:75:71:
                    44:6a:fc:77:d8:90:22:d8:67:18:99:ae:09:87:27:
                    de:ca:54:39:e1:32:aa:e9:af:f8:0d:fc:29:56:de:
                    39:7a:7d:95:69:1e:d6:ec:fe:ef:68:40:aa:e0:c4:
                    b8:09:38:9c:87:23:7f:3d:1c:26:09:6b:a2:e6:cf:
                    b1:86:67:39:53:5a:27:18:2a:12:28:b7:62:19:45:
                    31:a6:8c:18:ed:7f:bf:77:82:63:79:e8:61:c8:64:
                    79:3b:4e:d2:1c:90:9e:03:24:12:c7:52:49:57:0a:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4D:EE:3F:0D:40:FC:88:D4:39:5E:D4:75:2E:40:76:82:54:9B:E5
            X509v3 Authority Key Identifier:
                keyid:C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/323830333a346432303a323a3a2f34382d3438203d3e20323636363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d20:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:00:66:98:e7:bb:75:07:38:79:2e:78:8d:05:34:fd:76:1f:
         51:6b:8d:7f:c1:0c:dc:47:52:39:22:2e:5a:2c:e7:9b:12:69:
         14:62:a3:65:20:6d:2f:05:20:ec:09:fd:84:8e:8c:76:4d:18:
         d5:8b:3d:2e:1e:2a:e4:af:de:fe:ae:12:d3:e6:5c:39:9c:af:
         0e:32:eb:b4:44:cc:2d:30:c0:11:4f:b6:51:de:9f:09:d9:a7:
         40:b8:3a:9f:05:d7:04:11:74:14:ee:7c:10:ae:c8:af:44:9b:
         1f:cb:28:6e:5d:06:54:9a:dc:78:b1:c9:99:3b:32:51:cf:c6:
         8e:9f:4a:a4:7d:e9:65:e5:fa:6c:da:36:2b:a4:73:ad:d5:99:
         d8:5b:7f:9c:cd:8c:2e:a8:30:ef:53:5b:d9:32:18:33:c3:83:
         c2:a1:74:29:17:f3:b8:42:e8:a1:cb:a0:9a:ff:7c:86:e4:46:
         65:f2:a9:af:b1:d7:ea:73:37:64:a6:b7:58:6b:9e:84:46:0a:
         b6:10:3e:ca:ed:ce:9f:cc:fa:25:a8:1b:be:5d:83:32:05:22:
         60:e4:ba:7f:28:41:c7:39:2b:1c:5a:92:fb:d3:7c:3b:55:fb:
         a2:17:d7:93:75:7f:ea:65:40:db:ea:e8:15:b2:38:35:fe:bd:
         22:10:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:01:26 2024 by rpki-client on console-fra.rpki-client.org