Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/323830333a383331303a3a2f33322d3438203d3e20323732303539.roa
File:                     323830333a383331303a3a2f33322d3438203d3e20323732303539.roa (raw, json)
Hash identifier:          BK16c8EOJGwsTFxhABjZ6817N8CffbjqVKD97ZmD1X0=
Subject key identifier:   95:BC:C4:4A:1A:7E:6F:39:7D:DC:EF:EA:4A:6D:DE:12:1E:EB:E8:A4
Certificate issuer:       /CN=4B4905962394174DB3A50FE565148CE8821022EC
Certificate serial:       7FF9D0B95F512D21E427BB8229508CE0551ED004
Authority key identifier: 4B:49:05:96:23:94:17:4D:B3:A5:0F:E5:65:14:8C:E8:82:10:22:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/323830333a383331303a3a2f33322d3438203d3e20323732303539.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     272059
IP address blocks:        2803:8310::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:d0:b9:5f:51:2d:21:e4:27:bb:82:29:50:8c:e0:55:1e:d0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B4905962394174DB3A50FE565148CE8821022EC
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=95BCC44A1A7E6F397DDCEFEA4A6DDE121EEBE8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:7e:fc:aa:ef:e1:6b:4e:c8:a2:56:1d:71:
                    21:03:7c:4e:ba:1a:fe:06:4b:61:2a:3f:05:43:a2:
                    8c:04:15:56:0b:8b:d2:54:bf:d6:18:65:06:28:92:
                    79:87:2d:eb:6e:30:45:25:3b:8f:9a:2f:0f:bc:a1:
                    a9:f4:1b:af:c9:e6:86:2c:60:b4:75:2b:41:a5:47:
                    61:e0:8a:5e:f7:b4:15:36:b6:28:6b:7e:3a:d3:be:
                    27:b3:bb:ce:30:e8:d2:e0:3c:28:77:48:05:7e:b4:
                    f6:9f:2f:db:d8:2e:91:b2:f3:44:94:ba:33:44:62:
                    0f:28:4f:4a:6d:f6:c7:0d:ff:55:70:ee:e6:72:37:
                    91:d7:df:ae:99:d3:4e:28:be:15:37:99:21:f7:86:
                    dc:06:9e:7e:6f:1e:7f:08:b5:cd:2a:be:ef:f4:33:
                    c7:10:91:de:f3:1c:6c:fa:96:0c:b5:88:e2:6b:8b:
                    b2:61:0d:1e:80:5c:b3:02:d4:48:fe:6a:6b:88:f2:
                    23:8e:1b:c1:6b:77:de:0b:e4:9a:5f:62:06:8a:59:
                    15:01:3a:e2:98:1b:3f:96:5c:cd:e3:9b:f0:f3:34:
                    6e:e9:3b:19:30:9a:a7:88:6a:3e:15:82:1e:0e:6b:
                    aa:65:1c:0f:30:73:92:d4:4e:c4:a5:38:05:26:9f:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:C4:4A:1A:7E:6F:39:7D:DC:EF:EA:4A:6D:DE:12:1E:EB:E8:A4
            X509v3 Authority Key Identifier:
                keyid:4B:49:05:96:23:94:17:4D:B3:A5:0F:E5:65:14:8C:E8:82:10:22:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/323830333a383331303a3a2f33322d3438203d3e20323732303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8310::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:fb:7a:b4:a2:de:22:81:3d:ad:9d:fe:39:2d:f2:1f:72:
         98:59:f7:a8:91:13:82:f2:61:64:e3:d0:59:0c:36:7c:c6:2c:
         a2:11:d2:a3:0a:08:58:a3:10:52:62:9d:32:b6:1d:ca:b9:b7:
         30:84:9f:d4:24:d4:bc:13:a0:de:64:fd:73:e5:12:e7:32:6c:
         9a:60:37:71:9f:af:a7:2b:e1:af:b1:1b:01:d0:76:05:be:ed:
         2d:23:21:e5:d1:fe:dc:4d:56:c7:62:80:c9:c8:7e:ee:92:7c:
         60:c6:72:b3:e3:7b:53:90:f1:e8:69:54:44:82:82:ac:29:2e:
         58:e4:11:c6:b0:c9:77:86:4a:aa:2a:af:80:1f:04:2c:41:3a:
         a2:05:57:38:36:7a:c0:ab:d9:58:6b:25:40:64:d5:19:0a:27:
         85:cf:83:15:08:71:59:c1:4e:35:13:57:98:b0:eb:5c:4e:e0:
         51:d9:6b:86:0f:52:95:af:05:81:a6:14:e8:84:29:94:5e:0a:
         28:12:ca:58:fc:13:5b:a4:ef:a9:27:b6:44:83:7b:0b:8f:e7:
         84:24:74:c0:2f:a5:9d:d7:65:ca:af:d4:54:78:2f:fb:48:ce:
         48:15:8e:fd:6a:7d:09:41:41:20:5c:d3:20:7a:11:00:fb:c0:
         cf:6b:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:41:15 2024 by rpki-client on console-ams.rpki-client.org