Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/323830333a343865303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a343865303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          Yp4kB5v6k1ZVE81vHRkFKdPUm3k+jsQcTfhzESX8wMM=
Subject key identifier:   44:1D:BB:DC:16:40:67:8F:93:9D:07:52:83:5E:0D:0E:5E:12:93:71
Certificate issuer:       /CN=5C6C51BA0F3F312CC2221019C1183719A9647AE7
Certificate serial:       0860F1CC797438FEA9C9527F2D94E4104EE98C30
Authority key identifier: 5C:6C:51:BA:0F:3F:31:2C:C2:22:10:19:C1:18:37:19:A9:64:7A:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/323830333a343865303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:05:13 +0000
ROA not before:           Tue 05 Mar 2024 18:00:13 +0000
ROA not after:            Tue 04 Mar 2025 18:05:13 +0000
asID:                     52468
IP address blocks:        2803:48e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:60:f1:cc:79:74:38:fe:a9:c9:52:7f:2d:94:e4:10:4e:e9:8c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6C51BA0F3F312CC2221019C1183719A9647AE7
        Validity
            Not Before: Mar  5 18:00:13 2024 GMT
            Not After : Mar  4 18:05:13 2025 GMT
        Subject: CN=441DBBDC1640678F939D0752835E0D0E5E129371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:02:b5:6b:68:d5:44:b9:56:69:6a:42:c0:0b:
                    c7:6f:7b:7f:fa:49:70:9c:f0:3f:c3:a5:6e:b3:8c:
                    e1:52:c9:90:71:5c:f0:45:51:34:57:c6:70:e5:0e:
                    f6:7b:b6:e9:b6:a8:83:18:f9:4c:d0:b8:3d:73:06:
                    1e:02:fe:29:82:af:89:4e:29:e2:18:8a:88:0f:c4:
                    fb:fe:0e:6b:e6:53:94:24:48:2e:e4:fc:7a:91:f5:
                    f2:92:b0:24:f4:d7:20:0c:9d:aa:45:db:27:79:5b:
                    07:53:2e:4a:9d:0b:19:cc:03:11:28:2d:e9:4e:de:
                    5f:1b:b7:bb:34:11:64:01:65:d1:cb:d4:7d:53:e2:
                    02:27:1f:c6:dc:81:77:7d:9e:71:f4:7a:a5:c5:75:
                    a3:52:f7:ad:6f:6d:ba:c4:b6:97:4c:3a:76:d4:69:
                    dc:3a:20:ed:66:08:d2:30:8e:d6:9f:e5:3a:8c:47:
                    49:99:a0:7d:e6:8e:93:af:55:33:8e:a5:6a:95:7e:
                    33:1e:5a:4d:e7:5f:34:d7:3b:dd:1c:6c:69:79:3e:
                    a2:50:cf:5d:67:8a:8a:57:ed:a4:35:4c:bf:0b:82:
                    9c:0d:af:9b:40:34:43:08:6a:98:d2:8f:96:3a:6e:
                    62:da:b5:c5:77:8f:8a:f0:3a:e8:a0:c9:68:dc:aa:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1D:BB:DC:16:40:67:8F:93:9D:07:52:83:5E:0D:0E:5E:12:93:71
            X509v3 Authority Key Identifier:
                keyid:5C:6C:51:BA:0F:3F:31:2C:C2:22:10:19:C1:18:37:19:A9:64:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/323830333a343865303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:48e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:10:72:d8:b6:41:72:a2:73:7e:ca:98:67:cf:98:3e:ff:1c:
         3d:6f:1c:69:57:21:72:aa:ba:b7:ba:10:17:34:ea:67:41:d4:
         fd:c1:cd:64:e5:cb:0d:f0:53:30:56:b1:1c:e4:13:b6:a2:60:
         15:b6:5f:94:9f:5f:0d:88:db:3b:de:33:07:62:8a:94:83:12:
         e3:2e:0e:a3:6d:50:04:45:09:60:1a:6e:1f:bf:eb:0a:d1:b5:
         9d:30:c4:a6:d6:92:fe:6a:65:0c:88:e3:34:68:63:29:f5:00:
         b6:e9:64:3a:11:83:49:c4:cf:af:14:40:e4:a2:62:f5:e1:fa:
         79:84:a7:cf:60:40:a0:20:32:f7:c8:98:78:d2:96:6b:85:40:
         06:07:50:69:af:bb:4a:10:63:3b:0c:c6:04:35:e1:9d:b4:5a:
         19:25:a0:17:6b:f3:c3:c8:4f:37:e3:19:f2:32:0c:b7:5f:7b:
         ec:a6:6a:71:30:e9:03:d5:84:f3:4a:78:19:8d:3f:dd:03:8a:
         eb:88:c6:54:e7:90:9d:96:5f:3a:8c:69:9a:5d:f3:b7:d6:10:
         c9:a4:e2:ea:ef:68:08:b7:87:97:bf:fb:4f:66:57:39:ad:82:
         02:21:03:34:e1:87:d4:a3:8b:1d:95:3f:3e:a3:2d:b6:0b:06:
         e3:9d:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org