Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/323830333a653034303a3a2f33322d3332203d3e203238313030.roa
File:                     323830333a653034303a3a2f33322d3332203d3e203238313030.roa (raw, json)
Hash identifier:          WXOr//DXTK7VZQ/6b0JvpWA7rlrFspd/uwE4E9ljJMg=
Subject key identifier:   B2:58:85:36:42:86:71:47:8F:3A:95:C0:4B:02:43:B3:66:BD:04:9D
Certificate issuer:       /CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0
Certificate serial:       4B85D315CB3B13BE8FA4D6E73CB9558CCB740F5B
Authority key identifier: CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/323830333a653034303a3a2f33322d3332203d3e203238313030.roa
Signing time:             Tue 05 Mar 2024 18:20:24 +0000
ROA not before:           Tue 05 Mar 2024 18:15:24 +0000
ROA not after:            Tue 04 Mar 2025 18:20:24 +0000
asID:                     28100
IP address blocks:        2803:e040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:85:d3:15:cb:3b:13:be:8f:a4:d6:e7:3c:b9:55:8c:cb:74:0f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0
        Validity
            Not Before: Mar  5 18:15:24 2024 GMT
            Not After : Mar  4 18:20:24 2025 GMT
        Subject: CN=B2588536428671478F3A95C04B0243B366BD049D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:95:1f:c8:04:41:8c:0d:d2:58:4b:4a:83:
                    b2:94:c3:54:49:c6:e0:05:6f:ba:3a:5d:6b:a0:57:
                    7c:36:df:a8:03:fb:75:1c:0f:e4:47:f6:5b:3f:b1:
                    9f:fa:38:c2:fe:d2:3c:2c:77:ee:9c:3b:72:03:8d:
                    e2:f2:a3:34:78:de:60:1a:38:75:7b:08:54:46:ad:
                    e4:19:3b:57:e6:e7:0d:89:2e:e9:cb:46:61:4b:9a:
                    04:a7:10:cf:eb:1a:14:be:cb:c7:54:b1:8d:ee:59:
                    d2:be:91:f9:db:64:d6:fa:42:88:96:1a:af:44:f9:
                    c5:91:2b:83:38:f8:0f:b0:c2:87:9f:20:e5:68:38:
                    83:cd:90:3e:ab:47:41:2c:1e:bc:ff:a8:f6:a4:f7:
                    21:14:6f:92:f9:a5:67:35:95:4a:72:4d:bc:58:f2:
                    2c:12:0f:6e:ab:48:80:d6:ab:25:b3:16:0b:f4:5a:
                    8b:11:84:97:07:f3:07:29:3e:a1:22:c9:1f:4e:ff:
                    7b:a8:40:8e:3f:22:a9:52:db:09:a4:d8:81:41:d2:
                    6b:92:bf:2c:9a:14:79:20:20:a3:30:07:11:7e:1c:
                    48:70:31:78:70:79:9c:5b:0c:0f:19:62:b9:da:34:
                    e3:42:36:1b:42:81:6c:d9:53:6e:5e:e8:5b:5e:74:
                    dd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:58:85:36:42:86:71:47:8F:3A:95:C0:4B:02:43:B3:66:BD:04:9D
            X509v3 Authority Key Identifier:
                keyid:CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/323830333a653034303a3a2f33322d3332203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e040::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:b7:9d:82:cd:5c:af:62:04:12:67:bf:64:15:4d:ea:30:02:
         2f:69:da:7a:11:d4:95:9e:42:9c:1f:29:42:97:88:2c:b8:48:
         21:6b:02:2d:94:40:c2:5c:ae:45:12:d3:9c:ae:b9:d2:09:8b:
         fb:73:ec:59:46:9a:6c:49:9b:5b:d9:e0:8b:37:ab:28:31:7b:
         83:d9:77:88:bd:e3:b7:fa:b1:c5:e5:26:7d:64:62:53:5f:ec:
         96:0a:ec:9d:12:bb:7c:b1:0a:52:51:fb:46:c9:be:30:7f:9c:
         b6:25:f6:dd:8d:fe:e6:36:e4:17:fa:63:10:42:c5:b4:a2:0c:
         34:45:c1:79:e6:f6:5d:56:df:ae:65:ea:e8:e4:47:f8:39:5e:
         0d:4f:12:ef:1c:ed:1f:e7:59:6b:1d:1c:0a:57:50:99:8e:1a:
         ff:f6:18:c8:a9:8a:89:8f:f9:f3:e1:19:27:15:21:05:e0:32:
         8f:70:74:f9:44:08:18:45:77:22:64:bd:60:79:1d:1d:8e:aa:
         ec:ac:12:2e:ce:d3:f6:60:24:5e:77:43:fb:41:58:33:db:18:
         24:1b:99:96:d4:63:93:a8:1d:8d:b6:78:0c:e2:d1:af:d0:92:
         fb:99:f1:7a:59:de:53:ae:a3:e2:54:81:c5:17:8a:d5:a0:cb:
         73:07:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:46 2024 by rpki-client on console-ams.rpki-client.org