Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa
File:                     323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa (raw, json)
Hash identifier:          n1sNG4sFwjSi2LPhQ0IrBsiAsk795Q7hrqoJpk7TQyA=
Subject key identifier:   37:AD:F6:E3:A0:1D:CF:8B:29:54:BD:7A:AE:A3:9E:78:DA:EB:98:43
Certificate issuer:       /CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
Certificate serial:       487F2BEC0FB2B4CCEA6C0B42CD26A253CEF3BA3B
Authority key identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa
Signing time:             Tue 05 Mar 2024 17:43:15 +0000
ROA not before:           Tue 05 Mar 2024 17:38:15 +0000
ROA not after:            Tue 04 Mar 2025 17:43:15 +0000
asID:                     28392
IP address blocks:        2801:c4:b4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7f:2b:ec:0f:b2:b4:cc:ea:6c:0b:42:cd:26:a2:53:ce:f3:ba:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
        Validity
            Not Before: Mar  5 17:38:15 2024 GMT
            Not After : Mar  4 17:43:15 2025 GMT
        Subject: CN=37ADF6E3A01DCF8B2954BD7AAEA39E78DAEB9843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:8f:8c:ef:ce:e8:51:6b:46:ef:ba:22:29:
                    46:33:7b:aa:e2:19:85:e6:d8:1d:14:22:7c:ab:81:
                    9a:96:b2:98:07:ad:6d:fa:a6:86:04:1e:25:31:d6:
                    58:5c:da:a1:c7:22:ab:f8:6e:2b:37:44:e9:fe:1f:
                    6c:eb:b2:43:e8:6b:7a:5a:4a:99:7a:f2:c9:01:0e:
                    bf:d3:ae:86:96:67:99:0c:0b:e5:0e:50:fe:46:72:
                    e1:e9:ff:d2:0a:e3:2b:c6:68:39:0e:4e:b9:5c:f7:
                    f7:a9:98:58:65:38:68:0c:33:78:ec:45:b8:c4:8a:
                    bf:a0:cd:df:b6:c0:54:36:e8:fa:88:ac:1b:cc:3f:
                    dc:70:90:c7:ec:fa:e7:d5:f3:c1:45:72:90:8d:49:
                    48:ec:17:62:33:f9:9f:a5:fc:9a:34:eb:cf:3c:4d:
                    55:28:c2:87:e2:ac:ed:4a:81:4d:1d:69:39:53:dd:
                    61:c9:f7:22:57:35:f0:e9:28:32:bb:e4:69:cd:72:
                    83:4a:e2:38:74:aa:8c:83:91:20:e6:c9:6b:30:d2:
                    13:0f:6b:30:f5:14:78:69:da:a2:95:e7:14:dc:3b:
                    8e:d8:11:91:ed:6c:2e:3f:14:78:74:cd:f7:07:1b:
                    e5:01:03:92:e6:ae:d4:63:86:f6:67:9f:49:5f:4f:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AD:F6:E3:A0:1D:CF:8B:29:54:BD:7A:AE:A3:9E:78:DA:EB:98:43
            X509v3 Authority Key Identifier:
                keyid:4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:c7:12:16:ae:9b:20:bc:9f:2d:09:da:9e:c2:74:ec:8c:58:
         1e:65:01:91:25:f7:f0:84:3a:2a:8a:b2:c7:49:95:3b:fa:f7:
         89:5c:28:2c:1c:6e:97:84:bb:f0:df:d4:63:24:ea:dc:38:a4:
         f1:ac:d6:72:1f:9e:50:cc:f9:37:22:af:50:de:5a:67:6b:c1:
         01:eb:40:a7:23:0d:5a:42:92:e3:d6:c8:60:3d:2d:30:5f:18:
         f1:e6:08:77:0f:00:a5:02:d9:49:00:08:84:11:aa:d1:8f:7c:
         7b:da:cf:69:60:3e:c3:e8:6d:19:cc:5f:a7:26:e4:4f:e0:2c:
         af:75:28:ad:70:93:e5:37:e2:d0:1c:79:ed:32:a9:2d:2a:06:
         52:31:51:a3:21:77:c5:a4:bc:a6:90:de:14:4f:88:ce:51:29:
         a1:dc:dd:b5:1d:f8:7a:c1:a9:b8:64:eb:13:84:e8:b2:53:44:
         cd:16:47:75:88:87:d9:c2:2f:87:79:57:2a:9d:13:de:47:b6:
         55:29:d1:43:74:e6:d8:58:b6:a7:54:64:2b:52:63:bd:c1:e0:
         0b:77:98:31:00:2a:e3:73:ae:e4:65:8b:67:2a:67:29:34:97:
         82:d8:00:5d:0e:a1:02:63:09:4b:be:49:ee:d1:ef:5c:d4:fa:
         51:f4:16:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:50 2024 by rpki-client on console-ams.rpki-client.org