Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/323830333a396665303a3a2f33322d3438203d3e20323731373833.roa
File:                     323830333a396665303a3a2f33322d3438203d3e20323731373833.roa (raw, json)
Hash identifier:          u7l3amHvu/Qd8LkptadoQOJEgOtVWB9ID9vN+hbAElU=
Subject key identifier:   81:05:31:22:C0:8F:A7:CD:5B:0D:CF:92:2B:94:51:AD:73:36:89:16
Certificate issuer:       /CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Certificate serial:       396FC38FB92753430969B048857A88E57C471BA1
Authority key identifier: C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/323830333a396665303a3a2f33322d3438203d3e20323731373833.roa
Signing time:             Tue 05 Mar 2024 17:47:54 +0000
ROA not before:           Tue 05 Mar 2024 17:42:54 +0000
ROA not after:            Tue 04 Mar 2025 17:47:54 +0000
asID:                     271783
IP address blocks:        2803:9fe0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6f:c3:8f:b9:27:53:43:09:69:b0:48:85:7a:88:e5:7c:47:1b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D02995E170CE622F60579EB13D9DD037B46A52
        Validity
            Not Before: Mar  5 17:42:54 2024 GMT
            Not After : Mar  4 17:47:54 2025 GMT
        Subject: CN=81053122C08FA7CD5B0DCF922B9451AD73368916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:68:a3:e0:fc:a7:22:f5:20:fe:3e:e0:ca:
                    af:fc:5a:2c:f0:a0:9b:33:a1:71:64:3e:02:ed:5f:
                    03:3e:b4:ee:08:c5:aa:a0:2f:83:22:2d:ac:11:7a:
                    14:71:0b:38:1d:27:36:9e:85:0e:c8:c1:60:b9:c8:
                    ad:3f:38:b3:63:24:3d:3d:9a:0b:8b:ed:1c:15:5d:
                    ac:1d:c1:fb:75:64:89:87:22:87:03:e2:b4:25:c2:
                    0e:67:b6:ab:ce:69:f9:e2:60:77:a4:b1:24:5f:fb:
                    24:4e:35:24:2a:56:5a:6a:cc:36:fc:e2:2e:a4:ff:
                    11:87:e5:91:5c:15:e9:4f:e8:2c:ce:ba:f2:ea:9e:
                    ab:7f:98:c0:4b:8c:89:61:93:00:1d:ee:cc:86:21:
                    b4:b1:ff:11:7b:03:a2:98:26:c1:23:74:cf:b0:ed:
                    26:3f:b4:82:67:22:e6:79:df:ef:03:c0:22:9b:a2:
                    86:14:e7:dc:30:a5:6b:34:cf:62:4e:18:fc:4c:dd:
                    27:b7:cb:c5:02:bc:dc:43:65:4d:2a:bd:d0:53:f1:
                    09:2c:bb:cf:37:6c:7e:64:51:a7:90:ec:33:4e:10:
                    42:26:c2:c0:f9:4a:37:1e:54:78:0c:7d:6d:99:f0:
                    81:7f:c6:08:9c:ec:d3:5e:39:7a:fc:0a:af:31:27:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:05:31:22:C0:8F:A7:CD:5B:0D:CF:92:2B:94:51:AD:73:36:89:16
            X509v3 Authority Key Identifier:
                keyid:C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/323830333a396665303a3a2f33322d3438203d3e20323731373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:7d:5a:b3:3e:0e:5f:74:8f:16:b9:7a:bf:3c:b8:ee:2a:d9:
         46:a0:f5:8d:76:47:ff:0f:36:1e:c7:cf:86:2b:64:58:88:17:
         50:08:b4:20:55:13:e0:8e:4a:e2:b2:a4:10:bc:b6:57:2a:72:
         5c:8b:33:e4:60:ac:f4:dd:dd:c4:fe:6b:fa:6b:0f:bd:76:8f:
         27:7b:57:83:c5:4d:c2:a9:8c:61:0b:08:f2:f6:a0:02:f0:8f:
         c5:cc:79:ee:db:5e:ea:8b:bb:a9:5d:d6:6f:51:d3:5e:29:cc:
         79:11:9d:60:23:c3:f9:75:b2:82:c4:f9:ec:ac:9a:bb:a3:7d:
         90:e4:e9:ef:4c:3a:c1:6a:a1:a2:03:9d:aa:bc:27:48:3a:29:
         cb:45:42:13:45:33:b4:f6:97:4f:bb:2f:5c:b9:40:1d:13:a4:
         d2:bf:ef:8d:1b:e3:94:0d:59:6e:11:dc:3d:83:b6:24:e1:85:
         d2:20:06:54:e9:54:6d:f9:b4:16:7b:18:d0:f7:81:27:0e:c7:
         dc:c7:16:fc:e8:c4:86:f0:f0:21:d0:30:d2:1d:ac:c1:88:8b:
         2d:da:b6:31:93:a6:52:53:b4:d6:9e:d9:7c:74:77:02:a0:5d:
         85:70:30:1b:ae:ec:ff:43:df:db:8d:b9:ef:7e:08:de:58:a6:
         db:93:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:48:08 2024 by rpki-client on console-ams.rpki-client.org