Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a343a3a2f34362d3436203d3e20323732313336.roa
File:                     323830313a3130393a343a3a2f34362d3436203d3e20323732313336.roa (raw, json)
Hash identifier:          BQj/KySC+OXQP7SigsipfIOr3jfuRb5RPQ76mfxoKzk=
Subject key identifier:   37:EB:EB:02:B0:ED:7E:C3:9A:86:94:AB:BE:E4:3A:C3:11:8A:09:E2
Certificate issuer:       /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial:       266B500D0902E4D28E1581D7BF4FC8260F8462C1
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a343a3a2f34362d3436203d3e20323732313336.roa
Signing time:             Tue 05 Mar 2024 17:52:16 +0000
ROA not before:           Tue 05 Mar 2024 17:47:16 +0000
ROA not after:            Tue 04 Mar 2025 17:52:16 +0000
asID:                     272136
IP address blocks:        2801:109:4::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6b:50:0d:09:02:e4:d2:8e:15:81:d7:bf:4f:c8:26:0f:84:62:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
        Validity
            Not Before: Mar  5 17:47:16 2024 GMT
            Not After : Mar  4 17:52:16 2025 GMT
        Subject: CN=37EBEB02B0ED7EC39A8694ABBEE43AC3118A09E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:2e:31:ef:10:ea:92:3f:de:d9:72:3a:9d:
                    d6:c5:e8:dd:dc:06:0d:6d:de:f9:59:14:26:42:54:
                    17:00:58:3b:31:03:b9:9c:67:c2:74:d3:d7:7a:bf:
                    e2:ba:db:9b:f2:94:56:4b:66:2a:fe:c4:64:fa:7f:
                    ab:84:9d:a1:6e:f5:43:c2:be:29:c2:71:1a:d0:95:
                    03:ca:51:2c:73:5a:57:f1:b0:ce:d1:25:a4:c6:0b:
                    87:5a:f6:ad:27:20:90:51:45:7b:ec:df:b2:5a:06:
                    b7:15:08:90:85:51:5c:d4:d5:fd:2b:64:05:17:52:
                    70:31:3d:00:54:be:b8:5e:73:ba:1e:e7:83:d3:80:
                    80:45:89:1f:f5:f1:a5:03:44:cc:33:04:62:16:9d:
                    2f:6f:32:4d:03:0a:36:b6:56:12:f8:ac:c7:10:41:
                    68:ec:25:66:42:ae:05:6d:aa:9e:01:1d:a4:8b:6c:
                    19:c5:ee:9d:9c:7a:52:c4:97:78:cb:83:35:57:48:
                    8e:38:e4:58:1a:d8:ac:a2:20:1c:94:7c:3c:3e:69:
                    d5:8b:63:b8:c5:de:f1:33:5c:f9:51:5d:ea:07:39:
                    57:08:3b:59:0a:99:cf:da:90:44:ac:28:04:e2:fa:
                    48:93:a5:0d:66:19:60:b6:cb:0c:80:ae:14:89:2f:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EB:EB:02:B0:ED:7E:C3:9A:86:94:AB:BE:E4:3A:C3:11:8A:09:E2
            X509v3 Authority Key Identifier:
                keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a343a3a2f34362d3436203d3e20323732313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:109:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:7a:ed:c0:43:22:c7:d8:72:b9:4d:39:c3:ff:1d:40:02:
         4b:ab:15:a8:6a:79:67:e9:6d:51:8b:61:a3:3a:49:26:e0:cc:
         47:7d:71:59:12:86:c0:4b:3f:77:2f:47:97:4e:8d:96:80:d3:
         f3:e5:d0:1f:85:e4:01:e5:bd:c6:5c:a8:ac:20:59:f4:b8:71:
         55:e7:50:24:6b:ef:7f:00:c3:5f:a6:52:d8:8d:32:45:e7:a1:
         fe:cb:b0:a6:a8:7a:a3:e5:83:0c:08:55:a6:dd:33:0c:77:f4:
         f1:5c:f0:95:a6:03:fa:3e:8a:11:15:f4:32:84:3a:d3:41:38:
         7a:f2:4d:b4:e1:61:f5:f2:84:3f:8d:89:c1:a7:72:3f:29:e7:
         05:1c:bc:90:f4:65:50:ab:52:f5:6d:8b:92:df:06:6d:89:34:
         67:4c:96:19:67:24:51:04:fd:12:c1:b2:dc:2e:36:75:3a:c8:
         e6:e4:85:ff:49:b5:7e:5d:39:99:45:8d:3e:9d:95:7c:dc:65:
         50:f2:b1:17:ba:d4:6e:7f:25:fe:de:65:6e:d2:1e:40:e4:8d:
         6e:ef:8d:db:02:55:a4:d0:69:c4:48:63:58:d6:4e:2c:ab:66:
         c1:ba:f6:3b:4b:55:b6:73:0d:64:8d:7f:66:47:e8:fb:35:06:
         29:45:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:11 2024 by rpki-client on console-ams.rpki-client.org