Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa
File:                     323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa (raw, json)
Hash identifier:          7d5mSDIXsfwSVg3ZxQ2ZQXeN9peW7GmccoXMaYyHj0g=
Subject key identifier:   A4:36:FA:80:65:1C:9D:8D:80:38:1A:14:51:24:03:B2:F0:86:55:65
Certificate issuer:       /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial:       7F82486D6A85DC5574FEA4D07A3E8868B6F482AF
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa
Signing time:             Tue 05 Mar 2024 17:45:37 +0000
ROA not before:           Tue 05 Mar 2024 17:40:37 +0000
ROA not after:            Tue 04 Mar 2025 17:45:37 +0000
asID:                     272854
IP address blocks:        2803:c290:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:82:48:6d:6a:85:dc:55:74:fe:a4:d0:7a:3e:88:68:b6:f4:82:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
        Validity
            Not Before: Mar  5 17:40:37 2024 GMT
            Not After : Mar  4 17:45:37 2025 GMT
        Subject: CN=A436FA80651C9D8D80381A14512403B2F0865565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:fb:f6:bf:bf:27:ae:fe:81:1a:c8:dc:f6:
                    80:75:50:f9:7b:0f:8b:23:89:a8:b2:76:d4:4f:ed:
                    c9:f0:09:93:2f:2a:bd:84:ec:ad:67:a4:2e:e4:8a:
                    74:20:fa:f8:e9:53:ff:9b:fb:d2:1b:1e:30:b3:4c:
                    39:74:3f:f4:de:87:11:72:23:59:97:46:c9:32:c1:
                    f8:63:a3:b0:df:3e:08:6e:5e:72:ff:ac:1d:72:8a:
                    bf:2f:c4:a4:23:4c:e0:3c:91:da:49:75:62:8a:08:
                    aa:75:dd:18:54:02:21:76:1d:58:46:56:bf:d2:94:
                    ae:ed:8a:27:85:f5:ff:ae:bf:9a:ee:e0:82:80:8f:
                    0d:e3:ea:21:e0:9b:9b:6c:ac:cf:33:0e:2d:cc:bb:
                    3e:1f:7b:14:fb:c4:dd:54:7b:f1:27:a1:66:4b:1e:
                    b2:a3:8f:85:5c:f6:06:05:8a:d4:bf:58:db:71:03:
                    02:1c:0a:ef:03:17:e4:2d:1c:9c:a4:88:20:60:08:
                    db:ab:94:97:c7:5d:e1:74:ad:02:4a:d8:92:7c:5c:
                    e0:6b:7e:d6:81:c3:d5:ab:c4:de:9e:2d:4b:70:b6:
                    9f:a9:b9:a3:61:b0:ba:a9:e6:bc:a5:92:f6:f3:01:
                    a3:a2:dc:b5:05:51:11:99:ea:28:ea:05:d9:3c:9c:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:36:FA:80:65:1C:9D:8D:80:38:1A:14:51:24:03:B2:F0:86:55:65
            X509v3 Authority Key Identifier:
                keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:de:5a:8f:06:c8:62:7e:92:ee:bd:31:9c:e3:5c:93:31:7b:
         8d:35:85:4f:59:6f:7b:30:01:d3:07:92:56:53:65:0e:02:23:
         4d:1a:ac:cc:dd:51:52:8a:b8:4c:33:c5:22:05:2f:70:76:8e:
         27:15:99:4b:d4:d7:fd:9c:ed:23:a6:d6:4d:1e:b1:3e:0e:91:
         27:0e:e4:36:be:f3:39:56:19:a1:91:76:58:3b:b5:9c:74:da:
         05:d4:0c:cf:c5:70:54:7b:b5:3c:93:86:57:38:6e:59:c9:a6:
         a9:2a:9a:09:81:df:2e:7d:00:70:b1:34:2e:17:42:1b:f6:b7:
         8d:d5:d6:55:c9:fd:77:ca:30:69:46:58:16:c3:e4:05:a5:67:
         ab:65:d6:0b:94:cd:31:e1:5d:fa:d0:b8:d9:db:4c:17:50:93:
         22:25:b1:60:2b:70:70:2a:d1:6b:00:f0:e2:ee:dd:76:40:5b:
         c5:cf:1f:fa:62:d2:00:99:30:37:e7:3b:7b:94:8f:03:57:53:
         57:a3:d9:33:88:8b:2d:4d:68:7a:27:93:f1:c6:80:fa:62:e6:
         b6:69:ad:63:45:3e:10:73:de:aa:8a:ee:e3:e8:6d:df:f2:e3:
         30:2e:db:fc:0b:a2:a6:49:8a:60:1f:e2:b2:8b:1a:fd:b2:eb:
         11:e6:d6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 21:21:40 2024 by rpki-client on console-ams.rpki-client.org