Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a3a2f33322d3438203d3e20323732393734.roa
File:                     323830333a393539303a3a2f33322d3438203d3e20323732393734.roa (raw, json)
Hash identifier:          CMCS8mQ3mFTTEoT4lRNuJna2NIlDSm1+x2FI+elYmvM=
Subject key identifier:   69:5E:52:3B:15:B5:C6:CC:A2:66:C3:AA:F0:C7:87:10:E0:A5:48:60
Certificate issuer:       /CN=0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E
Certificate serial:       24DE35B9F5930E724265470052C01CC65C2C73AC
Authority key identifier: 07:83:11:8E:3D:B9:EF:6C:45:2D:F9:A6:4D:64:09:CC:FB:C5:BF:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a3a2f33322d3438203d3e20323732393734.roa
Signing time:             Wed 15 May 2024 23:25:00 +0000
ROA not before:           Wed 15 May 2024 23:20:00 +0000
ROA not after:            Wed 14 May 2025 23:25:00 +0000
asID:                     272974
IP address blocks:        2803:9590::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:de:35:b9:f5:93:0e:72:42:65:47:00:52:c0:1c:c6:5c:2c:73:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E
        Validity
            Not Before: May 15 23:20:00 2024 GMT
            Not After : May 14 23:25:00 2025 GMT
        Subject: CN=695E523B15B5C6CCA266C3AAF0C78710E0A54860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:fe:4d:3a:53:fa:eb:68:28:4b:fa:5a:2c:
                    bd:b8:0e:4a:a5:bd:0a:a0:78:72:d3:8c:b0:6a:6d:
                    da:e2:12:11:9f:02:16:ec:04:52:a9:e8:75:71:9c:
                    88:e2:59:4d:ce:2e:fe:3a:8d:f0:15:52:cf:8e:03:
                    c9:d0:31:a9:e2:8e:58:d8:3e:50:64:88:fc:8f:e9:
                    90:7e:9d:11:8a:27:24:df:dc:09:c6:e1:5f:18:42:
                    b8:5d:95:3f:d2:3b:67:58:23:41:bf:9a:b4:d3:b3:
                    a1:d5:e4:f1:07:28:84:a6:5f:b9:1a:a8:5d:ae:0a:
                    15:d4:93:e2:55:00:07:d0:06:52:f8:bf:5d:f9:80:
                    65:73:5d:96:78:db:d9:66:44:3c:ff:e1:68:2c:a2:
                    6b:2b:b2:e3:ca:6e:af:be:91:7d:fb:29:aa:4a:90:
                    6f:ba:9a:23:77:4f:2f:db:2e:b5:2c:58:56:b4:79:
                    22:c5:50:48:07:7a:4f:9a:21:02:ed:12:7d:5f:81:
                    ef:a9:de:64:83:14:5e:67:96:28:6c:34:f0:c6:c2:
                    4f:b9:0b:23:5f:5c:2d:1c:43:dc:31:92:e2:85:49:
                    59:2e:8a:6c:5b:32:19:1a:03:26:0f:7c:ea:f7:f6:
                    4c:d0:b8:9c:53:73:67:c1:e6:8f:3f:9c:77:06:07:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5E:52:3B:15:B5:C6:CC:A2:66:C3:AA:F0:C7:87:10:E0:A5:48:60
            X509v3 Authority Key Identifier:
                keyid:07:83:11:8E:3D:B9:EF:6C:45:2D:F9:A6:4D:64:09:CC:FB:C5:BF:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a3a2f33322d3438203d3e20323732393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:56:54:1c:fa:b1:d0:2d:b9:a4:ef:21:12:4d:3c:0f:2b:
         60:ca:e5:9e:84:37:8c:b2:68:52:17:0a:d2:52:2c:08:66:a2:
         37:7f:c4:0e:9d:7d:db:1c:69:18:59:e4:90:ed:b0:05:4e:6c:
         1e:5a:a3:4c:1a:be:ec:07:62:1e:33:ed:99:de:2d:cf:bb:41:
         31:dc:98:9f:75:b8:15:23:53:a2:df:39:e8:84:e6:17:00:ad:
         d9:e2:29:2e:06:dd:dd:98:c9:8d:3a:c4:61:5b:6f:78:78:92:
         0a:69:11:da:57:90:80:10:ab:a9:c9:8d:6f:04:6e:95:31:1f:
         47:b8:41:26:a7:43:54:d8:86:2b:21:ee:85:8b:8b:a2:a5:04:
         80:6b:dd:a3:de:d6:4d:d5:b7:c6:08:5b:f8:4e:a9:c8:92:4b:
         c6:d2:a5:d0:fd:96:36:7c:92:76:54:3c:18:71:d2:eb:c7:93:
         28:92:5f:e9:8b:bf:fd:2d:c7:47:a3:0f:b9:0f:d4:ee:9d:21:
         44:1e:fe:16:b3:26:01:fe:d1:0d:f6:31:55:e0:ea:af:5d:23:
         08:0a:99:f1:87:0b:3c:fd:4b:fb:5c:98:ce:77:5d:f7:c9:47:
         23:85:eb:a3:c0:81:97:9b:81:5a:2d:46:08:01:61:07:44:3d:
         eb:eb:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org