Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/323830333a313830303a3a2f33322d3438203d3e203237383331.roa
File:                     323830333a313830303a3a2f33322d3438203d3e203237383331.roa (raw, json)
Hash identifier:          wUe5kjH7axvYnNkr98WLa3CRmCl3dEGG0d2idck/m30=
Subject key identifier:   90:44:08:FC:C6:10:A3:B2:94:57:3E:02:59:9D:75:3D:21:1D:A0:6B
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       43E385B13BAC566B817CE53F3012FA01AAC28B4B
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/323830333a313830303a3a2f33322d3438203d3e203237383331.roa
Signing time:             Tue 05 Mar 2024 18:15:42 +0000
ROA not before:           Tue 05 Mar 2024 18:10:42 +0000
ROA not after:            Tue 04 Mar 2025 18:15:42 +0000
asID:                     27831
IP address blocks:        2803:1800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 19:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e3:85:b1:3b:ac:56:6b:81:7c:e5:3f:30:12:fa:01:aa:c2:8b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar  5 18:10:42 2024 GMT
            Not After : Mar  4 18:15:42 2025 GMT
        Subject: CN=904408FCC610A3B294573E02599D753D211DA06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:d7:c7:cf:ed:0f:e8:70:32:fc:ed:cc:62:
                    a4:5c:08:25:f1:17:1e:58:35:55:4f:2a:fe:75:b3:
                    fb:65:32:de:58:b2:10:2e:fa:25:aa:62:7f:a0:33:
                    05:f7:19:85:ff:8a:0a:42:df:c4:2c:3f:45:5e:47:
                    a2:81:4b:62:38:30:2a:48:a3:75:e1:17:a1:e3:2a:
                    80:2e:66:ce:85:04:01:bf:7a:bb:d9:02:11:e3:7d:
                    9e:f1:c7:9a:8c:1e:22:3e:8b:da:bf:17:66:fb:37:
                    5e:3e:b5:53:bf:93:05:0e:68:dd:e5:17:0e:56:4b:
                    1d:d7:d6:ab:6a:73:fd:50:77:95:3a:d1:a6:14:79:
                    ef:60:e9:ac:10:80:09:a2:77:01:32:28:a1:45:8a:
                    8a:82:e3:58:ce:d6:69:05:eb:d9:52:14:2b:a6:cb:
                    96:29:66:45:90:43:d0:c5:e6:8b:19:6d:b8:08:d0:
                    9f:de:da:32:64:5b:0f:78:17:a0:7f:fc:24:27:ba:
                    0b:f1:f0:13:d2:4e:bc:cc:c5:43:e2:56:95:42:0e:
                    f8:70:5a:c5:54:ea:77:a6:90:f6:fc:01:9a:0f:71:
                    c9:2c:47:b3:3e:c6:6e:58:00:d0:b1:8a:77:2a:29:
                    49:84:33:67:8d:7a:c4:de:d5:a1:82:8a:ac:31:3e:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:44:08:FC:C6:10:A3:B2:94:57:3E:02:59:9D:75:3D:21:1D:A0:6B
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/323830333a313830303a3a2f33322d3438203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1800::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:52:c3:25:c4:65:c4:fc:d1:ee:3b:ed:7f:fa:48:36:36:75:
         06:cb:56:b9:55:18:79:fd:eb:4e:9b:56:91:a5:28:1a:e5:93:
         0c:16:c3:9e:69:28:46:e9:c9:2c:a6:ae:22:a6:61:cc:bc:94:
         48:cb:82:b6:b5:0a:a7:c6:d6:d3:79:1e:96:f1:26:ea:ba:72:
         b8:b5:b8:37:e1:1d:b5:a0:3c:c7:3b:78:0f:22:23:e9:a6:7c:
         36:af:56:05:96:d5:30:c0:0f:5e:80:68:1c:8f:94:32:ed:95:
         4a:5b:b4:7c:cc:ad:6c:31:b0:e4:be:c8:1c:cc:78:1a:fa:94:
         dc:64:5c:ec:9f:59:1c:c5:4e:99:43:75:10:83:84:39:60:9e:
         cd:f1:bb:f7:37:cd:48:12:87:42:53:ec:9b:9a:2e:3d:11:b5:
         cf:e1:95:8d:a7:e6:3e:96:16:60:d1:a5:7a:fc:d3:a4:de:70:
         54:69:e6:c1:bb:49:4b:89:87:b5:62:a4:f0:a1:7b:c6:7b:fe:
         58:6a:82:0a:32:01:0f:5d:06:50:8f:ba:b4:62:08:7e:f2:99:
         c1:8d:7e:0b:f9:78:bd:72:48:7b:93:02:9f:c8:10:88:38:1e:
         77:8b:da:c6:02:eb:e6:6f:a3:d9:33:d0:2c:74:bb:ee:71:e8:
         5d:b0:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:04:57 2024 by rpki-client on console-ams.rpki-client.org