Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/323830333a623930303a3a2f33322d3337203d3e203532343336.roa
File:                     323830333a623930303a3a2f33322d3337203d3e203532343336.roa (raw, json)
Hash identifier:          ySPUmrEMuD3l20xXF4dIwptamgkKKBA6lKVb40lu6FU=
Subject key identifier:   48:23:0A:67:0B:36:A3:A5:C2:14:20:5A:4C:21:B5:FA:A1:99:96:C0
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       6E36E0035ABB98D13680F748289B1380330F812D
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/323830333a623930303a3a2f33322d3337203d3e203532343336.roa
Signing time:             Thu 16 May 2024 13:15:00 +0000
ROA not before:           Thu 16 May 2024 13:10:00 +0000
ROA not after:            Thu 15 May 2025 13:15:00 +0000
asID:                     52436
IP address blocks:        2803:b900::/32 maxlen: 37

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:36:e0:03:5a:bb:98:d1:36:80:f7:48:28:9b:13:80:33:0f:81:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: May 16 13:10:00 2024 GMT
            Not After : May 15 13:15:00 2025 GMT
        Subject: CN=48230A670B36A3A5C214205A4C21B5FAA19996C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:0c:9e:93:fd:a5:4b:b0:39:39:22:cb:f9:
                    4f:2c:12:50:6c:0e:1c:83:51:75:77:10:05:9f:a0:
                    8e:29:57:14:e9:83:25:12:1b:b3:d5:9d:9b:62:23:
                    68:97:19:96:43:df:94:0c:b2:06:c9:9d:fa:0f:b8:
                    7e:14:c5:84:98:e5:91:91:01:9e:49:2e:d9:75:25:
                    b4:39:71:ad:39:c8:dc:2e:39:6e:02:54:c2:5d:b3:
                    e4:5d:2c:fc:a4:a5:41:c8:1d:36:e0:d6:18:04:ac:
                    d8:b0:be:9e:d7:37:4c:14:89:c6:41:ac:b9:3a:31:
                    82:ab:05:23:62:23:e2:37:d1:6e:96:23:73:32:86:
                    ed:f6:46:86:3c:fe:9e:67:7a:39:de:50:a7:48:15:
                    c7:7e:a9:e2:ed:db:76:b0:b0:17:36:61:b9:24:ba:
                    6d:5d:05:ec:12:10:1c:55:a0:9a:45:c9:33:ff:a2:
                    de:44:39:c6:be:18:8a:a8:fb:b2:3d:6a:c5:2f:bc:
                    32:98:45:26:69:44:24:96:1f:3b:d3:d1:46:83:cc:
                    30:21:1b:4e:cc:ec:b2:ad:3c:0b:16:80:60:ca:b6:
                    88:4e:d1:4e:d9:fc:7d:7d:1a:d3:10:b3:8b:9c:d5:
                    0e:da:80:90:a0:74:42:49:02:09:6a:aa:2a:8e:3f:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:23:0A:67:0B:36:A3:A5:C2:14:20:5A:4C:21:B5:FA:A1:99:96:C0
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/323830333a623930303a3a2f33322d3337203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b900::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:9b:92:4b:d0:ea:7d:74:59:eb:2f:68:f5:8a:44:7d:05:6e:
         11:04:d9:b5:8b:44:a7:63:a8:b4:d5:72:89:4f:e5:82:39:4f:
         6c:29:18:82:25:03:84:be:32:42:e3:f7:6a:d7:0c:ab:28:e4:
         b4:06:fd:2f:82:5a:66:e9:44:d0:d4:88:db:e4:38:a6:bc:a4:
         3f:42:78:52:4a:6a:39:42:4c:bf:b6:13:ae:d9:00:ea:bb:85:
         85:bb:a5:0a:9f:6b:73:46:75:59:61:66:92:9c:9b:2d:7c:2b:
         f6:ed:87:f9:9b:4c:73:bb:24:36:ab:09:77:88:f8:3e:47:ed:
         3d:fc:b3:e2:73:a6:f9:01:ab:59:92:28:d3:d7:11:64:c8:fe:
         2f:23:a8:c2:89:05:6c:33:db:da:36:b3:2e:36:0a:f4:9a:eb:
         c6:3f:83:fc:4d:8e:36:4d:02:7a:ba:fe:08:4a:24:3a:b7:3f:
         5e:6b:29:a9:7f:5f:fa:09:9d:1f:a9:3e:31:36:58:4e:6b:8c:
         7c:cd:ab:08:4d:97:b7:28:bd:e3:0d:9c:f5:bd:d7:b6:66:11:
         6c:7f:64:1e:44:6f:d4:99:17:03:c0:c1:51:2e:04:e6:5d:fc:
         8e:6b:5d:0d:5f:66:00:f4:70:9f:bd:1c:27:61:b8:75:99:a7:
         91:c4:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org