Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/323830333a666634303a3a2f33322d3332203d3e20323633373939.roa
File:                     323830333a666634303a3a2f33322d3332203d3e20323633373939.roa (raw, json)
Hash identifier:          iClFDeVGAMi3W9/XuxbsCYir8wtePBnIBsW3fOS15bo=
Subject key identifier:   E1:12:39:0D:CA:17:C2:DC:FD:12:8E:78:8D:66:6B:96:B6:C1:4D:FD
Certificate issuer:       /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial:       4EBF9254A6F77EAD05B80A142826B4FCF4BA612A
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/323830333a666634303a3a2f33322d3332203d3e20323633373939.roa
Signing time:             Tue 05 Mar 2024 17:44:38 +0000
ROA not before:           Tue 05 Mar 2024 17:39:38 +0000
ROA not after:            Tue 04 Mar 2025 17:44:38 +0000
asID:                     263799
IP address blocks:        2803:ff40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bf:92:54:a6:f7:7e:ad:05:b8:0a:14:28:26:b4:fc:f4:ba:61:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
        Validity
            Not Before: Mar  5 17:39:38 2024 GMT
            Not After : Mar  4 17:44:38 2025 GMT
        Subject: CN=E112390DCA17C2DCFD128E788D666B96B6C14DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:b0:67:02:b3:77:4f:7f:e3:00:13:bc:24:
                    4b:f6:21:7f:11:4a:99:d1:70:c9:aa:da:ba:c8:bd:
                    3d:de:17:8b:d4:3a:a3:f6:4a:95:bf:b0:b5:b2:5d:
                    7c:6b:55:75:4e:a5:1e:ee:fd:0e:c3:85:a4:f5:69:
                    dd:d4:5f:51:9f:c5:c3:8b:c0:20:de:b4:08:7a:7f:
                    c4:b8:6a:61:fb:67:b2:d2:94:ed:23:12:06:8f:a3:
                    6c:06:89:d0:a9:71:6d:f4:71:d4:e9:71:f0:98:da:
                    cc:1f:9b:db:a4:c8:38:37:39:84:ba:6b:c8:27:a3:
                    36:44:09:ae:da:f2:44:5e:67:01:30:e2:eb:da:8e:
                    16:14:70:0f:bb:c9:b5:ae:e8:4a:c9:08:38:ea:a2:
                    a1:26:51:2d:75:63:86:cd:d5:ad:40:ed:32:59:78:
                    07:09:3d:14:93:ed:b7:1a:ac:b0:d3:bf:95:47:2a:
                    6d:1b:20:ff:ab:2b:57:99:af:54:97:dd:1b:43:de:
                    f1:0b:35:3b:33:89:c5:a1:32:e1:69:cd:63:b2:d2:
                    b6:3f:0d:fb:23:02:2c:2a:cc:dd:d3:03:fb:33:45:
                    6a:c7:40:d4:e8:67:e9:f7:64:88:9e:69:8d:92:72:
                    78:de:c6:59:04:8b:f0:d3:58:35:9a:79:cf:1c:fd:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:39:0D:CA:17:C2:DC:FD:12:8E:78:8D:66:6B:96:B6:C1:4D:FD
            X509v3 Authority Key Identifier:
                keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/323830333a666634303a3a2f33322d3332203d3e20323633373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:c6:08:d4:ef:e7:fb:df:df:33:6b:c0:7a:b0:2f:ad:bc:ca:
         c7:26:3d:04:17:ad:de:6c:1b:06:a8:ef:fe:5f:43:de:ab:e2:
         96:56:ee:ab:ec:33:04:ab:7b:b7:62:75:9e:8f:c5:5c:2a:e6:
         5d:4a:ef:9a:00:95:a3:20:51:da:2f:ad:7a:51:8c:96:f1:9f:
         28:df:13:b4:f9:e6:32:50:58:69:b3:bc:c7:74:5b:7a:c0:13:
         cc:3f:73:a5:bd:7e:77:e6:59:23:0f:f0:52:a9:b4:d3:22:a9:
         08:4b:28:20:b2:ae:3a:f1:c4:6d:ba:42:b1:df:fa:16:e9:9c:
         95:2d:80:d4:5a:eb:46:92:b6:3c:00:3b:1f:63:cf:1d:55:65:
         d1:c0:f4:87:ce:d4:b0:9c:9f:76:e7:51:31:a8:55:d3:c4:da:
         f2:b2:b0:dd:78:11:a0:80:22:c6:6d:5d:0e:4e:56:99:51:67:
         97:a8:49:02:c6:86:7c:f7:d8:62:0d:ff:36:e9:ea:49:bc:d7:
         d0:6d:13:09:83:59:5e:17:9a:6e:96:e7:0f:39:fd:97:0e:aa:
         fe:7c:c7:55:9d:c9:c6:f5:8c:92:78:5a:b2:d4:38:71:35:75:
         48:e5:65:23:37:57:9a:81:fe:28:c9:34:51:c1:97:0f:78:4f:
         bc:0b:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:03:09 2024 by rpki-client on console-fra.rpki-client.org