Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/323830333a3338303a3a2f33322d3332203d3e20323633373238.roa
File:                     323830333a3338303a3a2f33322d3332203d3e20323633373238.roa (raw, json)
Hash identifier:          imt+3Hj0f5jWyyLvgd+Mp3r9xwcZ7uiSm/sK56LLru8=
Subject key identifier:   C4:AF:8D:61:37:5C:6C:01:FC:36:38:28:E9:76:B7:9D:DE:49:A2:9F
Certificate issuer:       /CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
Certificate serial:       262AA86754DEA7047391F6E48B8235C00B322885
Authority key identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/323830333a3338303a3a2f33322d3332203d3e20323633373238.roa
Signing time:             Tue 05 Mar 2024 17:53:21 +0000
ROA not before:           Tue 05 Mar 2024 17:48:21 +0000
ROA not after:            Tue 04 Mar 2025 17:53:21 +0000
asID:                     263728
IP address blocks:        2803:380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2a:a8:67:54:de:a7:04:73:91:f6:e4:8b:82:35:c0:0b:32:28:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
        Validity
            Not Before: Mar  5 17:48:21 2024 GMT
            Not After : Mar  4 17:53:21 2025 GMT
        Subject: CN=C4AF8D61375C6C01FC363828E976B79DDE49A29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:9b:08:7d:2b:91:e2:e4:a9:f6:8f:ad:af:
                    3e:4d:42:6e:3e:4b:7b:f7:ae:52:0f:b0:3e:18:2c:
                    a9:a3:71:16:f6:df:d7:f0:5b:33:ab:49:15:d0:a3:
                    0e:d4:95:95:eb:33:da:02:4f:3b:47:2e:f4:d5:0d:
                    ae:6e:3b:8a:30:b1:4f:5d:bd:0f:88:2e:67:64:88:
                    69:fc:17:4d:d7:0c:41:45:22:80:75:69:c7:99:7c:
                    01:29:b1:9d:83:67:55:a8:d3:55:fe:fa:ce:31:7c:
                    80:16:3b:5e:21:59:57:0b:80:62:f5:e1:7b:36:f2:
                    71:66:0e:9b:ec:f7:fc:5d:ff:59:12:f8:eb:d9:17:
                    1f:0e:f6:c5:54:30:c5:a5:62:c4:44:a4:e6:2e:9e:
                    02:a0:9b:5e:ad:23:5c:8f:ff:63:c5:41:8e:5d:0d:
                    81:8a:bb:c8:22:3a:c3:3a:8e:76:cf:0f:13:03:2e:
                    36:0d:92:04:1d:42:a1:28:28:24:37:8d:41:c4:e8:
                    09:39:a3:82:32:88:a1:52:01:9d:f3:68:be:1a:be:
                    12:94:52:ae:14:a6:ce:fd:61:27:ac:fc:35:4e:49:
                    0e:51:4c:43:82:e4:8f:0d:54:1f:bd:18:e6:98:3d:
                    85:f8:ef:04:f4:00:f6:1c:5c:5a:aa:51:c6:4c:4a:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AF:8D:61:37:5C:6C:01:FC:36:38:28:E9:76:B7:9D:DE:49:A2:9F
            X509v3 Authority Key Identifier:
                keyid:A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/323830333a3338303a3a2f33322d3332203d3e20323633373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:59:aa:5b:60:4a:d3:f0:31:31:35:c6:a7:6f:7e:a8:70:26:
         27:f7:81:1b:0c:e8:0d:20:48:60:bc:34:6e:b6:c0:90:b1:34:
         89:9e:6f:e7:be:4e:c3:28:68:c2:e8:93:2e:30:72:8d:aa:85:
         fb:c7:00:5b:f8:75:cc:f2:84:48:7f:c1:1f:0d:47:1e:57:b3:
         52:20:ad:c1:d7:96:ac:df:2c:62:3c:77:ea:e6:49:52:83:d4:
         c1:17:b2:5a:7a:91:8b:ca:72:d7:63:01:4e:64:1e:02:54:43:
         56:e3:aa:ff:b7:a4:29:ab:03:7d:a5:f1:33:4d:e8:da:8c:26:
         73:e8:49:ff:29:2a:59:98:54:f5:b8:46:ae:c1:3e:27:d6:ef:
         67:af:ec:2d:74:54:28:ff:8b:5b:47:b7:2a:4d:84:8b:ed:41:
         c7:4e:39:f0:c8:85:e3:11:3f:21:28:b5:f7:59:29:64:44:ad:
         c8:02:05:d0:75:6c:5d:1c:3f:94:57:a7:99:69:08:10:34:13:
         1b:2f:4e:02:e1:90:96:0d:41:42:72:d4:96:1b:6d:6d:c9:4c:
         9a:6a:17:d2:bc:d5:87:c6:30:03:51:7b:6c:86:84:25:03:fd:
         23:b9:5d:35:39:01:4e:68:dc:f0:ef:81:20:3a:e7:02:5e:99:
         c0:94:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org