Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e2036353033.roa
File:                     323030313a313234383a3a2f33322d3438203d3e2036353033.roa (raw, json)
Hash identifier:          4hTOkuDmc0YC6LdNMfG2mbcCXnVGC4yPBLcCUQjUfow=
Subject key identifier:   04:45:FA:2F:BA:3F:F7:52:86:3A:F3:C0:48:9C:BD:E9:78:A8:E6:B0
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       3298A8877453A2F8EF471924DC8403D2C9E1FB5F
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:31 +0000
ROA not before:           Tue 05 Mar 2024 17:49:31 +0000
ROA not after:            Tue 04 Mar 2025 17:54:31 +0000
asID:                     6503
IP address blocks:        2001:1248::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:98:a8:87:74:53:a2:f8:ef:47:19:24:dc:84:03:d2:c9:e1:fb:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:31 2024 GMT
            Not After : Mar  4 17:54:31 2025 GMT
        Subject: CN=0445FA2FBA3FF752863AF3C0489CBDE978A8E6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:7c:e4:6b:ea:72:57:32:4d:60:8a:c6:e3:
                    84:94:9f:23:2b:ee:fe:b8:e3:29:f2:f9:6d:39:38:
                    fa:10:a7:e8:4a:b6:71:b5:fe:ec:14:68:e0:40:aa:
                    ac:7c:6c:91:ee:0f:36:d5:f0:65:8b:7e:7d:49:a1:
                    c5:46:2e:64:df:cd:8a:26:ee:13:30:e8:30:e3:58:
                    5f:e7:3a:d6:33:26:4d:6a:b8:d9:99:0d:5a:8a:71:
                    1e:df:07:9d:62:b8:92:b5:cf:45:79:27:4c:11:a4:
                    0e:d6:e8:68:de:95:88:7a:3e:35:06:4f:8b:92:84:
                    c5:d1:06:f5:cc:e1:8a:92:48:34:e2:37:22:4c:8d:
                    b5:4e:3f:ab:17:5e:d0:b7:24:b3:3b:66:ea:0c:19:
                    75:e8:70:4d:22:13:27:76:35:da:07:8f:b0:f8:e4:
                    11:8b:08:28:48:4d:b3:f3:66:16:18:ae:07:39:99:
                    5b:f8:97:46:13:87:f7:f6:c4:1e:38:18:73:8e:a3:
                    35:1b:e1:89:74:7b:c7:f2:26:40:4d:87:d2:a9:19:
                    c7:3f:16:93:d0:df:a4:1c:52:50:f9:f2:f7:b1:c9:
                    f7:44:f9:7c:5a:da:10:40:36:06:74:ba:19:fe:1a:
                    e1:0b:db:d2:27:36:17:dc:4e:12:3a:b8:68:eb:1e:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:45:FA:2F:BA:3F:F7:52:86:3A:F3:C0:48:9C:BD:E9:78:A8:E6:B0
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1248::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:17:49:37:10:d0:6f:84:3e:cc:c5:94:db:c2:16:0f:c4:c4:
         a5:1d:15:fc:13:63:50:14:89:99:d6:82:54:3a:b0:42:b9:dc:
         b7:08:aa:04:d5:13:94:30:81:c5:5d:aa:f2:2b:17:58:74:60:
         90:f6:bf:51:38:7f:24:5d:fd:a6:91:55:cb:8d:a8:37:f3:fc:
         22:53:c0:29:1b:c2:31:78:7f:00:ad:f7:0f:4a:cd:4b:5d:c6:
         6d:4f:33:f4:de:98:0b:3f:ec:c3:a2:c6:ac:4f:1c:36:2b:5d:
         5f:75:a0:d1:61:c2:a2:87:a0:13:28:b7:fb:93:1f:56:37:1a:
         7d:79:79:2d:5b:7e:76:98:b7:52:54:9d:43:cb:07:b7:c3:cb:
         72:9c:db:45:7e:20:6e:b6:85:85:61:d3:d3:aa:ec:6f:3d:a9:
         90:d9:af:31:78:b1:28:c5:3e:42:f1:2f:ad:ea:08:f8:b1:4a:
         5a:32:38:3a:0f:3d:6d:32:ae:34:b9:c5:15:44:90:f0:af:bd:
         88:45:5e:20:90:93:8b:ea:07:3e:7e:d2:2f:e9:bc:fd:89:35:
         a1:67:ad:6e:dc:5c:ab:ed:f1:ba:a1:1a:7a:45:8f:ab:d4:f7:
         83:8c:82:92:89:e7:e4:4e:d7:0d:01:8d:df:03:64:9e:29:51:
         b2:83:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org