Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a3a2f34342d3434203d3e20323732313336.roa
File:                     323830313a3130393a3a2f34342d3434203d3e20323732313336.roa (raw, json)
Hash identifier:          OTHmo40EXLb/Fpyn8QShGUAa/nkgDFCj1V1heCz1Syk=
Subject key identifier:   98:D5:C1:F1:8D:CE:2D:31:F1:59:58:E4:37:D7:21:46:23:99:B8:2E
Certificate issuer:       /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial:       55633C928C2C9A443AB64998A29C6A6A5C2FD80A
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a3a2f34342d3434203d3e20323732313336.roa
Signing time:             Tue 05 Mar 2024 17:52:16 +0000
ROA not before:           Tue 05 Mar 2024 17:47:16 +0000
ROA not after:            Tue 04 Mar 2025 17:52:16 +0000
asID:                     272136
IP address blocks:        2801:109::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:3c:92:8c:2c:9a:44:3a:b6:49:98:a2:9c:6a:6a:5c:2f:d8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
        Validity
            Not Before: Mar  5 17:47:16 2024 GMT
            Not After : Mar  4 17:52:16 2025 GMT
        Subject: CN=98D5C1F18DCE2D31F15958E437D721462399B82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:5f:db:05:7c:91:44:73:83:68:10:27:52:
                    d2:e2:67:66:37:23:96:13:a6:0e:0f:fa:b8:09:c1:
                    73:1c:fb:41:f5:d9:5d:a7:48:1e:d3:7b:42:6b:9d:
                    d5:93:b5:9d:7f:89:19:af:ed:7a:9e:88:c9:7c:79:
                    10:6b:77:bb:39:b6:45:13:8c:8a:2f:e8:f8:b0:cf:
                    1d:fe:11:d2:91:1b:4f:5d:b6:00:83:45:3b:a7:39:
                    5e:e1:76:5d:98:5f:f6:c0:1e:ee:60:70:0e:75:3c:
                    8f:6d:c5:fb:12:b0:9c:34:3b:dd:4b:ee:76:68:2c:
                    35:61:b4:e8:d9:e7:17:ed:e5:44:e5:fd:1c:a0:07:
                    dc:8e:9f:f3:52:1b:0d:67:fa:06:fb:fc:1c:3e:6d:
                    ac:2d:a0:f7:e7:1e:ec:38:69:91:3f:04:18:b3:98:
                    fa:00:c4:d5:3a:23:01:b1:d4:2f:7e:ab:ab:4a:b4:
                    3d:89:55:54:66:41:35:c9:f8:31:4a:b4:86:30:fa:
                    e1:4c:58:2a:cb:1e:6d:a9:79:23:44:2e:3d:99:8c:
                    b6:18:fd:c7:89:3d:7e:71:d3:cb:10:25:cf:9a:97:
                    40:ce:9f:d1:57:70:96:53:a0:21:72:ca:3d:3c:50:
                    ce:ea:5d:e9:ba:c6:f8:49:9b:69:04:04:3e:9d:23:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:C1:F1:8D:CE:2D:31:F1:59:58:E4:37:D7:21:46:23:99:B8:2E
            X509v3 Authority Key Identifier:
                keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a3a2f34342d3434203d3e20323732313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:109::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:c9:dc:17:e8:c1:22:cb:fe:6a:2d:88:58:d3:fc:8a:a2:8c:
         29:ef:ae:ce:5c:67:2c:13:88:f0:e3:30:7e:4a:7f:cb:bc:d2:
         01:2d:0d:98:55:e0:c2:48:13:e2:dc:60:ae:71:df:da:cd:af:
         f9:91:56:94:81:18:26:31:7e:57:d1:a9:b3:c0:cf:26:3b:97:
         1a:de:13:4f:43:7a:a7:1f:d4:ea:b1:40:a0:47:b0:21:1f:bb:
         ac:c1:03:6e:0b:4c:27:79:6d:95:5e:60:ff:88:dc:e9:97:5f:
         c6:a2:52:88:03:42:39:5f:ac:eb:90:dc:1f:3a:55:54:5b:75:
         d7:5a:9b:7a:fe:c0:9d:8a:28:cc:76:a8:ac:21:7d:d6:4b:d2:
         72:53:8d:1d:98:9f:3b:ee:38:9b:2f:6e:ea:4d:86:59:8f:3d:
         cb:f9:6d:89:29:19:f6:28:95:63:14:52:c0:52:bc:7e:99:15:
         ef:2b:3a:93:9e:8f:51:4d:d1:16:89:32:71:41:7e:4d:34:fb:
         26:0b:b1:ac:95:9b:d3:0b:5e:5b:71:bb:bc:a3:5c:4a:17:e5:
         b9:56:de:60:e8:e1:6a:e0:b5:2a:6d:fc:99:cc:11:ac:c3:fc:
         b3:71:52:42:45:f0:83:5e:52:ae:71:9a:24:03:1b:1a:1e:d8:
         0f:c8:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:11 2024 by rpki-client on console-ams.rpki-client.org