Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203532343638.roa
File:                     323830333a663038303a326330303a3a2f33392d3433203d3e203532343638.roa (raw, json)
Hash identifier:          4FiBQMkJD9hJ64MUKX3oTji1kg4Cn4FY9wbvk8YBLkk=
Subject key identifier:   F4:72:21:E0:94:FD:B2:0B:AD:47:9E:1B:02:D7:D2:91:C6:52:41:22
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       499C12F60894E6E57A4EF25ADA5C486821B880E1
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203532343638.roa
Signing time:             Thu 11 Apr 2024 00:20:00 +0000
ROA not before:           Thu 11 Apr 2024 00:15:00 +0000
ROA not after:            Thu 10 Apr 2025 00:20:00 +0000
asID:                     52468
IP address blocks:        2803:f080:2c00::/39 maxlen: 43

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9c:12:f6:08:94:e6:e5:7a:4e:f2:5a:da:5c:48:68:21:b8:80:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr 11 00:15:00 2024 GMT
            Not After : Apr 10 00:20:00 2025 GMT
        Subject: CN=F47221E094FDB20BAD479E1B02D7D291C6524122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:5c:79:5b:7a:c2:51:2f:84:e1:e9:ea:2a:
                    f5:b4:ef:60:62:97:97:6c:9e:d2:d1:60:a5:9b:25:
                    ae:62:7b:bc:84:dc:6b:3e:01:2e:ba:a0:28:65:7e:
                    1a:4f:6e:92:2c:59:91:77:c7:63:f5:07:89:6b:60:
                    92:af:a7:3e:d7:57:47:98:e2:e7:c7:62:2e:0b:40:
                    05:5b:93:0f:09:74:d4:93:9a:48:fc:98:d0:48:7a:
                    7a:e9:32:96:92:99:85:70:6e:05:5d:82:7d:d8:85:
                    50:f6:71:d7:2a:d7:e9:89:e0:f1:a8:1e:25:df:7d:
                    ef:88:7c:d7:c2:7f:aa:97:49:a6:6b:68:d8:e1:58:
                    7f:8e:b3:2e:be:d3:4b:d4:02:5a:1c:93:ca:7b:e7:
                    ec:00:6b:05:35:12:0e:b3:13:6b:97:b0:71:f0:97:
                    51:ff:51:eb:1c:fb:4e:f3:bb:bf:00:52:83:66:3d:
                    40:91:51:bf:2a:df:6b:86:53:e1:b2:1f:0f:83:13:
                    f1:ac:87:9a:bc:2a:20:d1:12:fa:4d:d1:6d:a1:28:
                    39:46:bf:d8:ff:97:25:94:6e:3e:86:3c:b6:d9:c5:
                    21:58:1b:47:02:85:32:9d:0b:e9:76:d4:91:ce:f6:
                    45:cb:5b:e7:bd:56:49:77:88:de:f8:f3:db:fd:e0:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:72:21:E0:94:FD:B2:0B:AD:47:9E:1B:02:D7:D2:91:C6:52:41:22
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         12:44:27:4a:ae:be:70:19:2f:a3:aa:4e:b6:e7:ff:17:15:5c:
         de:31:e0:c2:97:3b:e9:13:b5:a8:f3:52:41:5c:1c:8d:b3:9f:
         c7:4b:62:bb:be:e6:fb:31:a6:46:f9:c8:5d:95:30:41:d1:9c:
         26:92:f7:14:db:b9:5a:9a:7f:f5:8d:1a:1a:a0:00:24:80:81:
         24:a2:31:15:8b:56:a0:f0:4d:2f:3e:7d:ce:d3:2d:c8:80:ae:
         85:35:69:a1:2c:04:fb:04:c0:45:a4:9d:4b:14:03:6e:dd:7f:
         8a:88:67:0d:0b:30:7e:0f:d6:f6:15:c2:e6:4d:84:08:67:b7:
         5f:0c:d5:a5:c8:39:64:df:b7:57:ec:a4:fa:0e:cf:a2:b4:55:
         7b:e8:e7:cf:ef:cc:41:3f:f9:17:30:b1:b0:b6:55:12:1b:c1:
         49:1c:44:f8:3d:1f:27:0b:23:a4:8d:41:ac:75:61:77:e6:56:
         39:1e:fa:d5:ed:3e:48:06:b9:df:97:7d:ce:b7:7f:e6:82:05:
         b2:d6:4c:88:72:3f:1e:6f:c4:4f:b0:c8:3e:2f:59:0d:8d:9f:
         e3:cd:d1:f5:98:fb:50:52:78:fa:d3:a4:92:95:7f:25:c7:59:
         13:3f:85:8b:d4:38:04:9f:ec:38:c3:80:e5:e1:4a:43:23:03:
         df:c1:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:44:06 2024 by rpki-client on console-ams.rpki-client.org