Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/323830333a663538303a3a2f33322d3438203d3e203131303134.roa
File:                     323830333a663538303a3a2f33322d3438203d3e203131303134.roa (raw, json)
Hash identifier:          CWxdLboAkLgQFmegemm7pCoE4nhP90nveYtGQ6W6w8g=
Subject key identifier:   94:7D:46:27:FD:46:52:63:1B:C8:D6:F2:ED:E7:CF:17:99:1D:45:F0
Certificate issuer:       /CN=48C3545237B1DDEF78ABA1776BAB15B728086643
Certificate serial:       6F09F30775043780A60BE72825E5623C153FA6C3
Authority key identifier: 48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/323830333a663538303a3a2f33322d3438203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:54:48 +0000
ROA not before:           Tue 05 Mar 2024 17:49:48 +0000
ROA not after:            Tue 04 Mar 2025 17:54:48 +0000
asID:                     11014
IP address blocks:        2803:f580::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:09:f3:07:75:04:37:80:a6:0b:e7:28:25:e5:62:3c:15:3f:a6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C3545237B1DDEF78ABA1776BAB15B728086643
        Validity
            Not Before: Mar  5 17:49:48 2024 GMT
            Not After : Mar  4 17:54:48 2025 GMT
        Subject: CN=947D4627FD4652631BC8D6F2EDE7CF17991D45F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:70:52:74:66:3f:e6:d3:24:8e:a5:09:dd:88:
                    cc:20:e6:6c:78:5f:af:a9:98:ec:5e:08:6b:0c:6f:
                    e6:ce:22:dc:24:90:46:23:24:33:82:af:56:d8:4d:
                    15:61:60:af:27:e0:55:6f:f7:20:01:f5:d1:82:bd:
                    b3:5b:5e:76:0d:4b:a3:cd:cd:df:48:72:21:22:66:
                    50:cf:8c:55:3a:9a:af:85:93:78:08:4b:17:a0:ee:
                    db:e1:e9:86:6a:f3:e1:25:5f:c7:07:73:ba:05:7d:
                    aa:62:39:c2:0a:08:da:83:8e:c7:06:6c:dc:9a:15:
                    db:1f:68:28:79:64:00:45:ed:b3:9d:b4:bf:8d:6f:
                    37:b1:7c:39:13:39:dc:36:b4:b1:dd:03:3a:bc:a1:
                    eb:fb:35:4f:22:03:b6:9b:c0:91:5c:33:f1:6e:78:
                    6a:01:74:91:41:72:ce:ed:aa:4a:3c:25:f6:43:94:
                    61:bc:7b:34:87:67:d7:b3:72:67:a5:cd:79:90:53:
                    ae:df:58:8c:1d:5c:1f:14:3e:41:7d:ef:a6:39:e4:
                    fd:0e:fa:b0:c5:7d:3e:f9:2b:39:c8:27:65:3f:04:
                    d1:2f:4d:8e:4d:1f:b2:b2:e6:da:7a:9b:35:3b:10:
                    56:38:2e:f8:75:46:7b:0c:b9:24:ef:98:f8:ce:6a:
                    13:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:46:27:FD:46:52:63:1B:C8:D6:F2:ED:E7:CF:17:99:1D:45:F0
            X509v3 Authority Key Identifier:
                keyid:48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/323830333a663538303a3a2f33322d3438203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f580::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:cc:f5:d4:7c:2c:af:65:14:d7:7a:5c:71:18:c0:90:47:0a:
         08:09:21:65:27:73:44:03:ec:1e:05:7e:fc:43:b2:da:84:fd:
         4c:2f:31:43:90:78:f3:64:50:e6:b5:72:48:6f:0e:02:13:26:
         9d:46:bc:b1:d5:8c:e5:94:0b:47:fe:84:90:5c:ba:0a:67:0e:
         1e:4a:f4:fa:da:0f:f2:87:cd:37:f1:0b:5e:b5:31:7e:d6:f4:
         fe:e4:0f:71:fa:5b:09:41:64:cd:19:e9:c6:d3:d0:24:f6:d6:
         c6:29:81:e5:c5:86:1b:6b:3d:d2:ac:77:10:cb:5f:6c:92:1e:
         f0:ca:61:f2:5d:c9:16:0d:f6:92:4a:67:27:91:ca:7d:e3:cd:
         5d:1c:c0:98:81:83:f5:55:8a:b5:74:c4:37:1d:5a:0d:55:e0:
         11:3f:6f:71:cf:e5:e7:f9:70:2c:36:66:e7:f6:cc:a2:7d:48:
         49:41:b9:5f:54:db:6d:f1:33:dc:ec:50:d2:95:f2:ea:ed:e2:
         44:83:0d:33:23:ee:71:60:30:12:1f:c4:29:90:8e:b8:2b:a1:
         d1:21:3e:7f:d8:03:0a:ca:a0:56:ad:c5:97:3a:2a:c6:cf:4a:
         86:3e:ba:8c:14:22:36:8f:03:17:90:f0:50:fb:81:49:be:9e:
         3b:61:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:22:49 2024 by rpki-client on console-fra.rpki-client.org