Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/323830333a663865303a3a2f33322d3332203d3e20323639383834.roa
File:                     323830333a663865303a3a2f33322d3332203d3e20323639383834.roa (raw, json)
Hash identifier:          Fi9XssFIyuuxp8B1R3mulVtdUjl21Df9wF+b6wvSL8c=
Subject key identifier:   35:A0:19:CF:69:35:23:4D:80:79:ED:F8:80:78:09:6A:C8:93:EA:B2
Certificate issuer:       /CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F
Certificate serial:       2B81B0964B61953F395ACFF0C05239131E0B07B4
Authority key identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/323830333a663865303a3a2f33322d3332203d3e20323639383834.roa
Signing time:             Tue 05 Mar 2024 17:42:46 +0000
ROA not before:           Tue 05 Mar 2024 17:37:46 +0000
ROA not after:            Tue 04 Mar 2025 17:42:46 +0000
asID:                     269884
IP address blocks:        2803:f8e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:81:b0:96:4b:61:95:3f:39:5a:cf:f0:c0:52:39:13:1e:0b:07:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F
        Validity
            Not Before: Mar  5 17:37:46 2024 GMT
            Not After : Mar  4 17:42:46 2025 GMT
        Subject: CN=35A019CF6935234D8079EDF88078096AC893EAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:cc:96:25:15:a7:7a:80:0c:40:cf:68:6b:
                    13:e9:6b:a3:92:78:0f:a1:f6:0d:e2:95:71:75:9d:
                    6f:61:cd:4f:46:f7:85:07:2c:b1:3f:7b:8d:24:6d:
                    a8:99:b4:88:e4:29:94:bb:b5:ba:bf:9f:fc:b5:1b:
                    ef:a9:b9:a5:50:8b:20:d7:d9:13:37:8d:32:e9:a3:
                    e1:69:66:94:b6:e2:56:8c:c1:a6:42:78:80:0d:5f:
                    01:13:6a:5f:65:52:a3:17:c4:87:72:15:3b:42:a9:
                    95:9b:a3:5f:4f:2e:41:76:bd:77:75:b7:58:34:d6:
                    a3:fa:a9:6c:d3:c5:38:4b:38:16:57:f3:16:63:3b:
                    14:cd:50:59:d4:60:31:f6:e5:52:fc:52:f2:15:31:
                    50:06:03:b9:f1:f5:a6:c2:63:45:82:ec:8e:87:68:
                    fc:ea:1d:c6:71:30:47:20:bb:1f:0c:e5:2e:2c:07:
                    75:fa:d3:16:b1:40:92:e4:e4:ca:b7:3e:23:7b:b5:
                    17:89:78:6b:6a:94:12:47:1f:f4:cc:44:63:07:cf:
                    af:d3:5d:69:8c:de:6d:88:2c:52:49:bc:5b:9b:93:
                    57:1e:92:b9:87:50:dd:90:8d:68:69:a9:ca:fd:2f:
                    79:4c:fb:14:08:5a:b4:a0:51:a3:d4:94:f6:99:f2:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A0:19:CF:69:35:23:4D:80:79:ED:F8:80:78:09:6A:C8:93:EA:B2
            X509v3 Authority Key Identifier:
                keyid:2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/323830333a663865303a3a2f33322d3332203d3e20323639383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:35:10:f8:75:12:8b:2b:75:ef:9f:be:2f:25:ab:ce:63:
         d7:a6:a6:82:91:68:5e:84:e9:79:c2:db:23:ae:1c:2e:e2:99:
         2f:5b:5c:fa:3d:82:06:36:24:91:16:15:fa:ae:be:8e:be:31:
         bb:53:74:c8:76:9d:59:80:04:e8:14:a3:66:30:90:be:c7:6f:
         f5:ba:a8:9a:48:1c:1f:ef:8e:a7:7d:a6:5d:b7:e4:28:f1:c3:
         82:7b:c2:46:0d:e2:99:ee:71:53:ad:5a:42:79:84:72:ea:d0:
         79:66:53:41:55:90:d8:60:ad:12:2d:8b:f7:91:13:a1:1a:dd:
         70:c3:a3:30:2c:f8:00:54:ab:a5:15:31:1b:7a:b2:be:dc:9b:
         7c:56:1f:cf:c9:b2:64:21:a0:0d:ee:86:d1:79:eb:5b:05:cb:
         d1:bb:2d:e7:99:77:f6:c1:01:41:4d:96:66:e6:b5:dd:10:36:
         ee:9c:cc:a5:07:a1:26:50:d3:0d:d6:bb:c1:e1:18:b7:87:17:
         ff:6a:a1:d3:4d:b5:59:90:b4:21:79:b2:3f:54:3f:d5:a3:34:
         84:dd:53:7e:e0:a9:22:98:23:3e:51:f5:0d:fc:1d:76:4a:4f:
         84:81:19:1d:b2:9f:d7:67:31:b4:6b:b0:5f:ff:d3:d4:8b:d6:
         0e:f4:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:37:42 2024 by rpki-client on console-fra.rpki-client.org