Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa
File:                     323830333a326636303a3a2f33322d3438203d3e203532343936.roa (raw, json)
Hash identifier:          Q77HB+oWSpj1FlImGa7Y1tT7EPYDcBEdX/jntfXwnZY=
Subject key identifier:   C4:6B:38:3D:23:ED:D7:A8:A2:03:AA:EE:CB:92:32:69:7C:1B:37:90
Certificate issuer:       /CN=52644702D94F3D876A774ED4C8509A38B1587D80
Certificate serial:       45C91E2B3AE8F5BA74A2BD9E79E20C552274BCE0
Authority key identifier: 52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa
Signing time:             Tue 05 Mar 2024 17:57:32 +0000
ROA not before:           Tue 05 Mar 2024 17:52:32 +0000
ROA not after:            Tue 04 Mar 2025 17:57:32 +0000
asID:                     52496
IP address blocks:        2803:2f60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c9:1e:2b:3a:e8:f5:ba:74:a2:bd:9e:79:e2:0c:55:22:74:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52644702D94F3D876A774ED4C8509A38B1587D80
        Validity
            Not Before: Mar  5 17:52:32 2024 GMT
            Not After : Mar  4 17:57:32 2025 GMT
        Subject: CN=C46B383D23EDD7A8A203AAEECB9232697C1B3790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:cb:a3:57:ab:60:8b:ef:55:48:d1:5f:09:
                    d1:21:01:fc:13:7c:2b:32:0a:71:68:04:63:09:0a:
                    8a:e1:b9:9c:27:90:74:55:8b:46:62:b2:71:87:1f:
                    d6:df:80:68:ff:4c:4c:87:6f:1f:18:32:bf:f0:45:
                    81:ae:6b:97:f4:66:f4:fd:16:eb:f5:7f:da:3d:93:
                    b3:e6:15:2e:e2:2b:78:9c:f6:e7:98:cd:02:d9:db:
                    39:fb:41:bb:2e:03:35:8f:24:22:6a:9f:56:73:cb:
                    80:63:fe:a5:10:92:bf:34:91:d5:c3:a6:a9:63:fa:
                    d6:72:c6:d3:77:b9:bb:44:e0:dc:23:66:46:21:3b:
                    e0:00:ac:dd:0e:6f:20:b4:81:85:f1:ca:e1:7a:9b:
                    78:ba:ad:00:3f:40:cf:e3:aa:4d:0e:29:f2:68:fa:
                    86:23:cf:b7:c5:a8:b1:11:bb:4d:af:ed:57:98:f6:
                    a4:d7:10:6a:fd:65:16:e6:ce:bc:38:0e:1f:6a:0b:
                    d0:e3:2f:7d:08:29:29:0c:2d:e2:a4:02:dd:e5:e0:
                    c3:61:5e:5c:78:1c:a7:74:d5:95:57:c5:e6:a1:c5:
                    67:75:ef:9d:0e:72:a9:b7:5d:dd:52:6f:e0:d6:dd:
                    c9:39:98:e2:dd:65:6b:4e:d4:eb:bb:c9:b2:aa:7c:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:38:3D:23:ED:D7:A8:A2:03:AA:EE:CB:92:32:69:7C:1B:37:90
            X509v3 Authority Key Identifier:
                keyid:52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:79:dd:02:37:78:bd:d2:98:0b:09:9f:52:45:de:a3:b9:15:
         02:1a:c3:20:4c:ca:38:23:40:b3:21:dd:ac:95:c4:f6:0b:71:
         e8:7c:20:76:2b:b8:bc:9e:85:08:18:b4:5d:99:e3:a5:87:2b:
         0e:be:4e:45:00:f3:81:37:cd:91:b7:4b:a8:bc:d0:00:60:3f:
         1d:de:59:2d:6e:63:94:ca:64:d1:10:62:1b:7a:0c:73:58:a5:
         5a:32:0b:07:c5:45:e5:b4:e2:c9:12:f3:20:15:d6:52:9f:88:
         dd:2b:21:85:95:42:6b:5a:9f:c7:4e:df:51:75:79:8b:f4:05:
         e3:6c:88:ca:2e:0a:3f:1f:34:48:d1:5f:86:20:c8:b7:ac:b2:
         bd:de:dd:4c:bf:c8:a4:75:62:9c:be:c4:8f:02:73:7a:4f:87:
         aa:7a:cc:7f:c7:9e:30:38:bf:af:77:9f:5b:07:fe:86:1f:5b:
         d1:09:42:73:7e:6f:cb:b5:28:05:91:a9:51:dc:82:65:3b:d8:
         d8:51:00:2a:e4:f7:f5:90:7a:10:0f:7a:99:01:c0:30:33:17:
         e7:43:28:48:60:e7:00:66:2e:b8:d6:f0:4c:cb:bd:85:69:57:
         66:69:35:09:08:66:fd:6a:a4:49:e6:a5:36:f3:95:03:f2:8b:
         2d:34:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:17 2024 by rpki-client on console-fra.rpki-client.org