Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a666332303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          Dzb3mnGMqvlo+C60vmlpOoM2Uuhh1B1iv0fpM0jYw5w=
Subject key identifier:   43:47:54:C9:E7:2B:A0:47:2C:B3:25:72:2F:1D:1D:34:EE:11:50:E0
Certificate issuer:       /CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
Certificate serial:       5871F1BE081315FD707ED7CB80A7E34AEEF06C9D
Authority key identifier: AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:50:47 +0000
ROA not before:           Tue 05 Mar 2024 17:45:47 +0000
ROA not after:            Tue 04 Mar 2025 17:50:47 +0000
asID:                     52468
IP address blocks:        2803:fc20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:71:f1:be:08:13:15:fd:70:7e:d7:cb:80:a7:e3:4a:ee:f0:6c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
        Validity
            Not Before: Mar  5 17:45:47 2024 GMT
            Not After : Mar  4 17:50:47 2025 GMT
        Subject: CN=434754C9E72BA0472CB325722F1D1D34EE1150E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8f:72:66:1f:2a:a0:0a:bf:f5:92:fd:d2:d1:
                    b0:6b:22:44:20:f3:d6:7c:38:62:1b:91:af:fa:da:
                    0c:46:07:40:03:00:e2:3f:09:82:fe:30:c4:a3:4b:
                    66:3e:4b:aa:8d:c0:67:1d:1f:c1:ef:cd:77:9a:a7:
                    61:33:b1:f0:8f:50:0a:54:8a:b5:c0:24:0e:b4:37:
                    45:1f:7a:79:ef:85:23:13:5d:36:e1:c8:e2:01:96:
                    74:fa:ee:6d:33:71:51:0e:99:e5:10:9c:ed:87:d3:
                    6e:f8:e3:4b:9c:f5:3e:22:24:e7:43:e5:b9:72:cf:
                    ac:2c:26:70:52:3a:73:98:f4:e0:1b:f7:14:74:16:
                    a2:81:f6:f4:2b:b6:90:81:3e:32:d2:a3:c5:9e:23:
                    29:26:05:2e:05:0a:cd:72:41:ca:58:1d:b2:36:c1:
                    c9:df:c3:a2:aa:1a:a1:c9:a7:df:88:db:11:cb:9e:
                    3a:5b:ef:1e:7a:fe:6f:f7:13:12:83:35:32:f0:a7:
                    6f:40:f7:7c:17:4e:c6:63:2b:5b:cd:35:ac:b8:5f:
                    58:e6:07:1f:bb:24:9d:1d:5a:e1:10:03:f7:03:9c:
                    ad:ba:bc:d3:fd:1f:bb:3d:df:bf:c8:bf:56:d5:35:
                    ff:ae:17:92:9f:83:c3:35:81:dc:52:58:4e:86:09:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:47:54:C9:E7:2B:A0:47:2C:B3:25:72:2F:1D:1D:34:EE:11:50:E0
            X509v3 Authority Key Identifier:
                keyid:AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:50:6d:dd:61:b9:0f:dd:3a:60:10:38:51:ce:e8:09:26:
         d3:f0:be:22:63:53:34:a8:79:31:25:95:c7:71:f8:d7:b6:a2:
         2b:df:20:80:5e:6f:45:a0:80:31:2c:39:9a:56:ff:d6:4d:82:
         56:6f:8f:61:75:78:43:f1:b4:9d:29:23:38:22:de:27:d6:3f:
         e7:ff:f1:83:a1:9c:df:67:3c:29:fc:02:64:65:5f:6e:17:d7:
         02:b6:d5:58:de:d3:e9:51:ce:25:e1:f6:d7:73:c8:e3:e5:55:
         62:84:02:69:ee:4c:54:db:74:4d:f3:59:2f:7a:a8:ba:be:97:
         85:47:ee:c6:f0:f0:0c:e6:1b:bf:e8:93:8c:44:52:2b:09:6e:
         81:b9:44:c4:f0:e9:45:62:05:c4:78:2e:aa:db:8d:ac:4c:51:
         65:f0:65:dc:fd:6a:9e:4b:64:53:e3:43:fc:1e:dc:03:98:58:
         50:31:1e:c7:45:d3:e9:0a:5d:38:ce:1f:f6:cf:2d:e3:86:54:
         b9:41:23:84:2d:d1:13:0f:65:a8:5a:ac:7d:ec:a5:6a:85:fe:
         0f:7c:b2:4b:44:1c:07:ba:41:bf:ee:b3:49:3b:b8:56:09:ac:
         71:8c:43:1d:86:70:66:99:92:59:ac:cf:9b:88:f8:2d:90:6a:
         4d:bf:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:07 2024 by rpki-client on console-ams.rpki-client.org