Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/323830333a313163303a3a2f33322d3438203d3e20323635363835.roa
File:                     323830333a313163303a3a2f33322d3438203d3e20323635363835.roa (raw, json)
Hash identifier:          M3MuPKKdfX9wlBUix67ThDEun6Gi1soxz1Hk1ybtqzw=
Subject key identifier:   23:3E:18:01:70:9D:2E:76:73:AD:B0:7F:3E:E2:F4:97:6D:C2:FF:7C
Certificate issuer:       /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
Certificate serial:       46496BAE7D2C878775FB8595A618934C82ED1AC1
Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/323830333a313163303a3a2f33322d3438203d3e20323635363835.roa
Signing time:             Tue 05 Mar 2024 18:15:43 +0000
ROA not before:           Tue 05 Mar 2024 18:10:43 +0000
ROA not after:            Tue 04 Mar 2025 18:15:43 +0000
asID:                     265685
IP address blocks:        2803:11c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:49:6b:ae:7d:2c:87:87:75:fb:85:95:a6:18:93:4c:82:ed:1a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
        Validity
            Not Before: Mar  5 18:10:43 2024 GMT
            Not After : Mar  4 18:15:43 2025 GMT
        Subject: CN=233E1801709D2E7673ADB07F3EE2F4976DC2FF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:38:6d:31:00:eb:05:45:9f:30:cd:26:31:
                    12:80:6b:5d:29:8b:85:c3:51:21:cd:cd:04:8d:83:
                    9c:ba:37:4a:21:5e:23:5f:34:43:31:99:0d:cf:df:
                    5d:0c:5d:fb:82:a9:70:a9:1b:1f:85:53:68:a2:9d:
                    22:8b:05:bf:e3:5a:4e:39:0f:1f:f1:ed:06:09:8f:
                    88:76:97:52:04:5a:2a:4e:e9:75:8a:8f:a5:02:a5:
                    eb:cb:4b:85:29:c5:20:b2:4d:90:b4:e3:a9:7b:ec:
                    42:59:d0:d1:b1:27:37:31:35:96:b0:0e:29:8f:38:
                    b4:e2:9e:44:95:8a:78:91:b6:4c:f4:50:1d:3b:60:
                    f2:9e:a0:21:84:1c:28:5c:35:a5:47:51:a8:4e:cd:
                    63:89:3d:a7:79:be:82:94:44:1d:26:95:77:ad:d5:
                    33:5b:8d:93:f5:fc:65:78:00:1d:15:f9:a5:3d:99:
                    9f:c2:b8:f9:79:63:f4:fb:2e:bb:18:ee:4d:b8:a1:
                    f5:78:11:10:51:11:a9:6d:0a:e3:db:0d:3f:eb:21:
                    91:f1:31:6e:26:0f:aa:16:2b:20:40:b8:cd:12:5c:
                    d7:82:37:fd:7d:e1:0f:42:57:4d:cd:2b:16:f2:bb:
                    da:e3:b1:b3:24:e8:83:c8:d8:b2:a0:d5:02:6d:62:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3E:18:01:70:9D:2E:76:73:AD:B0:7F:3E:E2:F4:97:6D:C2:FF:7C
            X509v3 Authority Key Identifier:
                keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/323830333a313163303a3a2f33322d3438203d3e20323635363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:11c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:76:53:eb:4c:c8:2b:51:18:79:7f:5e:c3:15:2f:63:d7:51:
         f6:82:c8:d8:c2:80:05:65:72:a1:f0:8d:ad:de:f6:4c:67:9f:
         24:92:92:a7:ae:f3:62:13:9e:ba:bc:6a:27:a2:7e:db:77:5d:
         f8:9e:29:21:2b:27:ce:58:0d:c2:06:3d:f9:3d:fa:c3:39:84:
         72:7b:c7:65:ba:09:4a:5f:38:bc:89:7d:e3:5b:a7:21:3d:ec:
         c8:4b:fa:c6:ba:a8:c0:fa:48:25:e7:56:60:c1:09:44:c3:59:
         bc:0b:7e:e7:9d:d2:ee:0c:87:6b:25:5d:b6:70:55:9f:04:91:
         44:06:fc:6f:a7:a5:85:2c:89:1e:58:39:9b:af:ff:55:4b:50:
         49:d2:75:59:bc:71:07:c1:b1:3b:96:df:df:e4:4e:41:fb:16:
         28:79:c7:bc:40:11:59:ad:93:58:3c:21:8e:bc:13:c6:84:2b:
         7d:93:a0:bf:05:d2:df:d0:f6:80:6f:62:6d:2e:4c:b1:08:7a:
         8d:86:2d:16:2a:ad:78:4e:32:7e:27:7c:93:dc:33:7e:56:2a:
         86:d5:d3:85:5f:4a:0b:0f:7a:52:04:6a:d1:7f:fd:db:41:8e:
         7c:48:d8:c1:be:0f:9a:32:6b:e6:fe:b8:29:c4:1f:5d:b1:5e:
         bc:7b:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org