Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/323830333a663538303a3a2f33322d3438203d3e203631343730.roa
File:                     323830333a663538303a3a2f33322d3438203d3e203631343730.roa (raw, json)
Hash identifier:          /dKAn6PCg1WLbgdqkcOulg1qS/Vdi42cnazcLGcIXRI=
Subject key identifier:   4A:CD:E9:F5:FE:C5:AA:50:37:91:A5:8A:2D:26:C3:A0:9B:9F:C7:12
Certificate issuer:       /CN=48C3545237B1DDEF78ABA1776BAB15B728086643
Certificate serial:       382E6DDD1A7EA897FE9EE6BF7381FE1456B3B6D9
Authority key identifier: 48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/323830333a663538303a3a2f33322d3438203d3e203631343730.roa
Signing time:             Tue 05 Mar 2024 17:54:48 +0000
ROA not before:           Tue 05 Mar 2024 17:49:48 +0000
ROA not after:            Tue 04 Mar 2025 17:54:48 +0000
asID:                     61470
IP address blocks:        2803:f580::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2e:6d:dd:1a:7e:a8:97:fe:9e:e6:bf:73:81:fe:14:56:b3:b6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C3545237B1DDEF78ABA1776BAB15B728086643
        Validity
            Not Before: Mar  5 17:49:48 2024 GMT
            Not After : Mar  4 17:54:48 2025 GMT
        Subject: CN=4ACDE9F5FEC5AA503791A58A2D26C3A09B9FC712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:b9:09:17:fd:c1:33:c0:d2:10:20:93:42:
                    3f:9f:96:89:87:8e:12:f7:e2:85:af:20:76:a2:a7:
                    d7:88:1d:05:9f:87:36:08:e4:7c:83:1f:cf:78:c5:
                    b5:ff:be:ab:78:c2:4b:74:60:ad:b7:d6:1f:c9:30:
                    14:bc:92:4d:f8:6d:36:4a:5c:22:ea:45:58:06:2f:
                    a4:e3:ae:fc:1a:50:d0:46:bf:eb:53:0b:39:5c:5d:
                    2d:a6:77:0a:0a:16:50:e5:27:92:03:9f:a0:08:84:
                    dc:87:09:a3:83:8d:41:34:c9:08:4e:77:2e:1b:51:
                    de:7d:93:59:8e:2c:02:6d:45:0b:8d:59:f2:da:42:
                    88:6b:cb:5f:2e:79:9d:6b:10:2a:1d:4f:79:c2:44:
                    77:27:8b:ab:77:21:2b:9e:a7:b7:7e:dd:e9:0d:6f:
                    a0:30:34:06:46:08:13:05:f1:70:2e:b9:6b:fc:32:
                    1b:de:15:ac:a6:15:c3:ad:cd:07:a4:09:54:f5:de:
                    ea:34:bd:73:86:fb:7b:66:87:c6:41:fc:3d:3a:78:
                    ea:f5:23:2c:2d:72:fc:d7:2d:88:21:ce:d8:12:ce:
                    ad:be:24:80:dd:b0:e4:0c:e7:39:68:33:f3:05:9c:
                    91:a5:61:27:a8:4e:56:dd:b0:7b:7f:30:67:7c:2e:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CD:E9:F5:FE:C5:AA:50:37:91:A5:8A:2D:26:C3:A0:9B:9F:C7:12
            X509v3 Authority Key Identifier:
                keyid:48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/323830333a663538303a3a2f33322d3438203d3e203631343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f580::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:4f:8a:fc:5c:f8:e3:15:e6:3a:0c:cf:82:3a:a7:91:92:66:
         45:4b:b3:79:bd:1e:22:2b:38:cb:a4:5a:42:2b:2f:45:80:dc:
         7d:3a:66:e7:ab:16:b6:30:f6:90:ec:23:3c:78:f1:39:aa:bd:
         aa:95:f9:d3:1f:aa:3e:df:8d:f7:60:34:29:4c:9d:57:42:a2:
         f2:87:b3:f3:92:88:74:b3:f0:7a:e1:7b:95:7e:23:f6:26:8d:
         9c:16:f0:50:40:da:ac:13:2f:74:e9:2a:31:a5:19:e4:5f:8e:
         2c:c7:b2:99:a4:2c:7a:35:f5:63:68:ae:8e:8d:e4:c8:a6:f3:
         b2:63:e4:e8:20:d6:62:71:85:bb:4a:ee:ff:20:36:a9:45:27:
         b4:b6:7d:0e:0e:21:1a:e1:69:34:51:6f:48:64:94:62:ba:28:
         35:43:f3:1b:fe:5f:78:44:a4:de:98:91:45:8f:6d:86:cf:a6:
         50:13:1a:bf:3c:45:9e:e6:7b:4b:40:42:b2:f6:d8:78:63:2d:
         7f:e2:99:96:59:75:97:53:cf:f0:7e:6b:d5:a8:72:30:40:29:
         6b:2b:7f:40:6d:78:2c:1f:92:16:40:e9:b8:b2:2f:7a:14:e6:
         e1:36:b6:38:cb:b5:5b:6b:c8:b3:de:38:13:60:e3:1c:ca:8e:
         76:48:31:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org