Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa
File:                     323830333a376536303a3a2f33322d3332203d3e20323637393239.roa (raw, json)
Hash identifier:          f5RRVrfTPWXiMTfDeJnmyFIA2d2vmOxKWYewDuc6z2A=
Subject key identifier:   41:21:2F:D7:12:8A:8C:BE:4F:25:42:57:87:AC:80:A0:A4:44:C5:CB
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       2F2996ED254B25140A2DE81124AA48DE79DD9286
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa
Signing time:             Tue 05 Mar 2024 17:52:33 +0000
ROA not before:           Tue 05 Mar 2024 17:47:33 +0000
ROA not after:            Tue 04 Mar 2025 17:52:33 +0000
asID:                     267929
IP address blocks:        2803:7e60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:29:96:ed:25:4b:25:14:0a:2d:e8:11:24:aa:48:de:79:dd:92:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Mar  5 17:47:33 2024 GMT
            Not After : Mar  4 17:52:33 2025 GMT
        Subject: CN=41212FD7128A8CBE4F25425787AC80A0A444C5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:6b:9c:b5:86:d4:15:89:8a:7d:70:16:af:
                    a0:a1:a7:ee:70:7c:1a:5f:43:1e:50:47:d1:ac:ae:
                    65:7d:d8:76:1d:e4:a1:88:52:c0:17:cd:a3:bf:2a:
                    bd:b6:11:4b:41:40:4e:03:bb:b7:3e:ae:37:5a:07:
                    a2:d4:5b:99:63:59:e8:fb:a6:8d:7d:0f:27:8c:58:
                    27:e5:0a:90:de:02:84:d5:32:6c:8f:33:97:27:c7:
                    90:f1:20:4c:d5:5c:5a:4d:81:66:de:99:e0:c2:a5:
                    fd:08:a8:8b:60:2b:2e:2f:d7:14:a9:1a:89:fe:d4:
                    90:3a:02:2d:79:97:fc:c7:26:be:c0:57:ba:7e:90:
                    f5:a5:a6:1d:21:94:e6:9f:ee:9d:e3:a2:16:8a:bc:
                    0c:4e:01:f4:15:c3:6e:ed:25:9b:a6:f5:f9:94:11:
                    0e:bd:4c:00:e3:04:e6:8b:90:c5:75:99:7e:b6:44:
                    5f:87:dd:83:eb:6f:a7:ed:a2:50:c3:c5:ad:d2:7d:
                    c9:5d:07:e6:8f:fa:da:ce:ae:72:5a:bd:b0:61:f9:
                    02:37:f3:68:31:f1:f8:bd:d7:b2:0c:8f:da:10:30:
                    e9:5c:68:df:05:6c:9a:20:e2:ca:0c:d6:5e:99:c8:
                    1f:cb:13:9f:de:62:d1:d8:d8:4f:66:11:16:13:6d:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:2F:D7:12:8A:8C:BE:4F:25:42:57:87:AC:80:A0:A4:44:C5:CB
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/323830333a376536303a3a2f33322d3332203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:d8:e8:c9:da:54:40:6f:69:d4:a9:7d:2d:cc:96:31:2c:
         27:0e:59:ce:66:36:6a:5e:97:07:9e:33:52:91:03:aa:4c:83:
         a1:0c:b4:d4:6f:7c:2e:21:27:59:e9:8a:69:f8:a0:01:75:50:
         60:27:2b:46:19:66:02:a4:49:68:11:bf:ae:62:a9:85:98:76:
         b0:47:e8:80:09:41:e6:a2:73:1f:e8:8d:2b:7f:0b:89:1f:2e:
         20:6e:b5:e5:a1:2d:34:59:8e:53:8b:b3:75:14:9b:21:54:cd:
         fc:a7:44:1c:9f:5a:a1:d8:f2:ce:2b:06:df:70:b1:3e:6f:b5:
         8b:3e:d7:0b:e3:83:d5:45:b8:a2:45:62:c6:e9:64:78:23:e5:
         78:d6:45:6a:5c:56:86:19:3f:07:83:e5:5e:9d:8d:0f:aa:c4:
         91:6a:21:88:c6:ee:92:b9:13:40:be:0b:42:55:99:4e:fa:23:
         c3:7f:e4:54:c7:07:11:7a:af:70:dc:8f:d6:83:ca:77:30:2b:
         7e:ff:02:2a:11:11:aa:39:eb:a1:b8:65:06:c9:ff:51:99:87:
         00:46:96:a9:ec:4c:df:7a:0d:ec:35:9f:74:0a:c6:67:14:2c:
         0f:8b:e3:b3:15:95:d7:0a:09:2c:e8:ab:ec:dd:42:b1:e6:58:
         17:33:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:27:46 2024 by rpki-client on console-fra.rpki-client.org