Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a383a3a2f34362d3436203d3e20323732313336.roa
File:                     323830313a3130393a383a3a2f34362d3436203d3e20323732313336.roa (raw, json)
Hash identifier:          aSdDJSu9Zm8Bo9+eT2YKVW/pQ2qcVX8n7JHoj045u40=
Subject key identifier:   C2:C2:89:23:48:33:73:94:78:51:9F:C8:1F:5A:85:A0:BE:11:B4:67
Certificate issuer:       /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial:       3F7789DE51082DA95D33FA7910E60C4249AA0F74
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a383a3a2f34362d3436203d3e20323732313336.roa
Signing time:             Tue 05 Mar 2024 17:52:14 +0000
ROA not before:           Tue 05 Mar 2024 17:47:14 +0000
ROA not after:            Tue 04 Mar 2025 17:52:14 +0000
asID:                     272136
IP address blocks:        2801:109:8::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:77:89:de:51:08:2d:a9:5d:33:fa:79:10:e6:0c:42:49:aa:0f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
        Validity
            Not Before: Mar  5 17:47:14 2024 GMT
            Not After : Mar  4 17:52:14 2025 GMT
        Subject: CN=C2C289234833739478519FC81F5A85A0BE11B467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:cf:1c:7d:f9:21:8b:13:7c:e1:7a:ef:89:
                    5d:73:c6:5c:ef:b0:b7:ff:57:84:86:be:ca:5b:60:
                    38:9f:2c:57:6c:18:9f:55:7b:f9:84:3c:6f:e5:54:
                    82:7c:25:8a:2e:2c:75:b5:b1:88:ea:c2:ef:ca:2c:
                    2e:22:8c:5c:9a:7d:f9:44:83:26:3d:52:e5:c0:ce:
                    0a:57:dd:ef:97:19:4c:f6:61:0f:6a:fa:51:67:3f:
                    11:b1:cd:28:6a:a1:a5:45:7b:0d:9b:75:eb:c5:b0:
                    0e:72:b0:04:34:e0:b5:bb:91:b3:19:3b:86:fc:89:
                    69:19:47:81:46:4f:58:43:50:60:bb:5e:64:47:23:
                    a1:69:69:1b:73:2f:fd:5a:da:08:af:12:ad:f9:29:
                    77:9b:16:c2:32:87:14:fa:a2:10:51:aa:ce:90:ab:
                    5f:c0:d1:82:b4:73:02:19:a1:07:db:ac:11:c8:77:
                    a1:e4:79:04:01:e2:76:e4:6d:bb:cc:76:98:9b:07:
                    0f:c0:ac:75:a1:b2:dd:55:6a:e8:3e:f1:73:5b:53:
                    45:a1:8a:f5:22:c0:d4:ff:2f:9a:cc:0a:5f:6d:9e:
                    59:30:85:59:b0:d1:63:5f:a0:04:dc:49:e8:23:82:
                    04:71:9c:93:cb:bd:fb:1e:1e:23:65:00:8d:76:d5:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:89:23:48:33:73:94:78:51:9F:C8:1F:5A:85:A0:BE:11:B4:67
            X509v3 Authority Key Identifier:
                keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a383a3a2f34362d3436203d3e20323732313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:109:8::/46

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:aa:66:76:83:6f:bd:90:95:38:7d:63:2c:45:98:08:5c:
         af:4d:51:86:64:01:b8:9a:1d:12:19:0a:47:17:4a:41:16:70:
         82:b1:fa:3d:1a:2a:12:dd:c8:51:ee:af:a9:26:21:cd:91:00:
         1c:bd:00:e8:21:6b:44:ce:74:c5:41:98:f6:8e:74:f5:ea:51:
         a3:67:20:ee:e3:5d:bc:e4:e0:83:b9:b3:f1:18:21:52:03:06:
         53:b3:1b:cb:4e:ac:82:ea:2e:b3:55:84:ff:97:f3:a8:65:86:
         60:63:90:d3:75:47:99:f0:16:aa:a3:a2:cc:60:37:53:55:8e:
         24:a8:16:a5:4d:9b:71:4b:85:79:a2:64:6b:36:d9:5b:fc:9e:
         af:a5:bb:4a:74:bb:23:ae:cd:37:c3:d9:1b:cf:5e:8e:dd:5b:
         fe:45:18:46:1d:ea:b6:b6:05:e8:b6:77:de:1a:b1:09:4c:54:
         17:f4:34:cf:5d:fe:75:5b:08:e6:6b:cb:5f:5f:9e:94:2e:3a:
         4f:94:4b:cc:22:33:5e:dc:a5:57:74:e5:7f:49:9c:6c:1a:c4:
         51:37:47:f4:e7:83:1b:38:7c:a0:f6:de:9e:d5:e9:a0:d8:6e:
         f9:06:15:f7:60:ec:48:6f:f5:1b:cb:39:8a:63:70:ec:13:48:
         3c:40:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:11 2024 by rpki-client on console-ams.rpki-client.org