Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a3a2f33322d3438203d3e20323634363238.roa
File:                     323830333a633030303a3a2f33322d3438203d3e20323634363238.roa (raw, json)
Hash identifier:          XFtia8QaYBOmngyrqcsWx7lX0XM7FaYULfP0wFdCSew=
Subject key identifier:   8A:6A:F8:7F:CD:57:C4:E3:D3:0B:84:91:76:72:FA:2B:30:E2:EF:E5
Certificate issuer:       /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial:       404636B4A271B7AF0AA70CBC350C9E03D2E4C81E
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a3a2f33322d3438203d3e20323634363238.roa
Signing time:             Tue 05 Mar 2024 17:58:32 +0000
ROA not before:           Tue 05 Mar 2024 17:53:32 +0000
ROA not after:            Tue 04 Mar 2025 17:58:32 +0000
asID:                     264628
IP address blocks:        2803:c000::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:36:b4:a2:71:b7:af:0a:a7:0c:bc:35:0c:9e:03:d2:e4:c8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
        Validity
            Not Before: Mar  5 17:53:32 2024 GMT
            Not After : Mar  4 17:58:32 2025 GMT
        Subject: CN=8A6AF87FCD57C4E3D30B84917672FA2B30E2EFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:13:c2:29:1c:24:f7:bd:7a:94:61:a8:ef:
                    9b:b5:e6:57:0d:b3:66:7c:fa:15:83:1d:f2:2b:74:
                    4d:cb:89:00:82:3f:75:c6:e4:f8:13:75:fb:fe:2c:
                    54:5c:82:ed:1d:85:21:84:e0:c7:2f:d8:d3:55:91:
                    bf:b5:55:a6:1f:47:89:64:37:3a:c6:de:43:93:e7:
                    b2:67:1e:0e:09:78:2d:62:4c:65:3f:81:ec:3f:99:
                    fd:8d:63:45:e9:c8:ea:63:a1:5f:c4:7b:e3:4b:53:
                    42:74:21:74:25:79:85:00:37:bc:af:d7:d2:a0:6b:
                    f0:cb:b0:a3:21:66:dc:0a:9c:64:30:43:ea:99:c2:
                    0e:cf:03:b7:f6:47:b3:61:df:2d:68:46:5e:59:21:
                    48:dc:24:be:b4:2d:a0:51:d0:3e:dd:e1:89:df:7f:
                    c2:0e:96:fc:b2:15:95:3f:ee:31:b9:a7:63:3d:ad:
                    45:f8:18:16:b0:20:6e:e8:bb:e2:dc:9a:2e:09:05:
                    c3:15:5d:bd:a4:e5:83:1e:79:3f:b8:82:e2:70:7e:
                    08:cd:74:3c:28:d1:d2:af:0d:d4:4b:94:c5:ae:61:
                    15:b6:ae:92:01:81:43:68:f7:84:f7:cb:63:f8:2a:
                    32:2b:f3:62:b7:f4:bb:90:1b:da:b8:0a:57:31:43:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:F8:7F:CD:57:C4:E3:D3:0B:84:91:76:72:FA:2B:30:E2:EF:E5
            X509v3 Authority Key Identifier:
                keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/323830333a633030303a3a2f33322d3438203d3e20323634363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c000::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:e2:02:5c:55:60:da:da:83:37:9c:dc:e6:c3:17:74:45:
         27:19:ff:90:9e:a6:28:d9:98:07:fa:a3:a6:cb:fa:95:9d:dc:
         82:aa:e8:db:55:0e:8f:43:1d:11:78:97:b1:60:d8:be:c0:d9:
         ea:d2:37:83:11:45:a4:c0:aa:f6:49:d3:8a:c7:02:a6:a9:3b:
         35:86:75:db:10:05:d1:1e:f2:98:41:a1:a6:6d:22:2b:f6:ac:
         cf:c9:dc:1a:99:7f:00:da:95:41:94:d9:b0:29:83:ac:a7:da:
         ab:c5:6d:33:9c:4d:03:8b:b4:c3:42:35:3e:f2:72:db:2a:53:
         6d:18:1a:5d:65:f8:c1:1d:d5:c8:ee:75:10:97:ac:9e:c3:b0:
         c1:59:8a:a0:1c:74:d2:6e:df:2b:ea:20:09:58:24:4b:8f:f3:
         a2:e2:2e:5d:c5:7c:30:88:72:b6:3f:d7:6f:e5:0d:06:f1:4d:
         80:d8:de:c8:99:d5:24:50:6b:20:b4:43:af:c3:93:52:1b:68:
         0b:3a:80:08:67:15:98:e4:d1:9c:0a:03:15:1a:f0:91:ab:04:
         9f:8f:d9:de:65:a3:9b:4c:d8:89:01:3d:61:f2:6a:ac:cd:6a:
         1c:b9:c1:41:d3:d1:71:8f:93:f0:b1:98:13:5c:41:40:29:2e:
         ce:71:74:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org