Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/323830333a383063303a3a2f33322d3438203d3e20323634373537.roa
File:                     323830333a383063303a3a2f33322d3438203d3e20323634373537.roa (raw, json)
Hash identifier:          CXyOhMTLTnS2kKje2k9Vu8YlYsF8ktM1MFPiT525bbs=
Subject key identifier:   3D:2C:D4:1D:D4:76:0F:F1:7D:79:B5:C8:7C:97:1C:C7:72:D6:C7:58
Certificate issuer:       /CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
Certificate serial:       4E50C0D8477335D8749942EB921B8A0EF094DC35
Authority key identifier: F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/323830333a383063303a3a2f33322d3438203d3e20323634373537.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     264757
IP address blocks:        2803:80c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:50:c0:d8:47:73:35:d8:74:99:42:eb:92:1b:8a:0e:f0:94:dc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=3D2CD41DD4760FF17D79B5C87C971CC772D6C758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:cd:da:f0:45:08:5d:54:0d:db:b2:6c:f0:
                    8b:e3:14:34:e6:d0:67:7b:f0:9c:99:49:02:89:b2:
                    b5:d4:c0:50:dc:14:cf:1a:d6:7d:06:21:1d:18:48:
                    ec:bd:c0:d6:dd:d3:26:f4:af:b4:85:5b:0a:54:40:
                    55:29:54:9b:d9:b6:08:e0:4e:0c:c0:7a:a5:4c:60:
                    c6:7b:48:65:7a:c7:b1:32:13:1f:3b:22:1a:8f:7a:
                    1c:0c:18:77:05:70:d6:de:19:e3:7f:23:c0:b8:2f:
                    eb:fb:a4:05:00:3b:a7:4d:5e:83:dd:7d:05:fd:57:
                    76:d6:d7:df:5e:90:4c:bf:04:55:fa:45:98:19:97:
                    65:69:06:51:e9:1f:19:2b:30:ee:36:af:f6:4c:57:
                    d9:63:76:71:90:29:54:9d:d3:06:42:a9:b4:8b:b7:
                    d6:a3:80:ee:f8:e3:a6:fb:48:fe:23:88:fd:6c:a8:
                    ae:7b:e1:ed:ff:58:a0:d5:cb:d3:00:a9:46:d4:50:
                    41:c3:2e:e4:e2:3a:55:b0:6a:5e:af:f4:fd:23:06:
                    ec:b8:42:38:f1:93:92:35:21:3f:af:6c:d5:02:1d:
                    0c:79:e3:e9:c6:99:c0:b6:df:79:3b:8a:1c:08:7b:
                    36:c0:f2:27:58:11:ee:ff:52:81:ac:ce:48:be:d5:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2C:D4:1D:D4:76:0F:F1:7D:79:B5:C8:7C:97:1C:C7:72:D6:C7:58
            X509v3 Authority Key Identifier:
                keyid:F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/323830333a383063303a3a2f33322d3438203d3e20323634373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:80c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:44:b2:52:64:17:ec:a8:98:c4:39:7d:7b:61:7f:bd:c7:fc:
         0b:e0:82:c7:e6:51:82:e7:ff:f4:53:f6:f8:ae:fa:bd:84:d8:
         38:1b:66:c3:4f:86:56:45:2b:d2:df:1e:2c:55:f7:57:94:3b:
         c0:6f:00:34:4f:83:6e:5f:97:c5:39:75:ca:bd:a3:83:9c:36:
         57:9a:58:67:f2:b4:aa:e7:e3:8c:58:25:0d:60:69:f0:2c:79:
         be:a4:1d:b6:0e:b4:b7:bb:e0:44:75:3d:f4:c8:71:45:f1:c6:
         7c:f4:2e:c7:2a:76:f2:00:c7:ed:92:ae:d7:b6:58:1c:b0:37:
         db:e8:a8:d9:ec:69:0c:ef:f2:61:07:9a:7e:81:38:e9:28:4c:
         ce:a5:54:c0:1e:d7:76:13:75:eb:98:87:fd:44:5c:c9:7c:bd:
         c8:10:7f:4e:36:b8:6b:c5:28:4c:7f:dd:a6:d1:3d:39:1e:41:
         7e:53:7b:7e:74:0f:28:60:b3:b2:4d:20:42:9c:98:bc:30:42:
         c7:1f:a1:6c:8c:45:33:7c:b5:27:e4:04:76:55:dd:1b:d6:85:
         9c:35:da:cb:ea:5d:7c:4d:be:89:be:b8:4a:db:92:3a:10:a8:
         16:71:bc:40:c3:70:50:aa:5e:2f:29:ac:b5:04:34:b0:f3:3a:
         44:c4:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:52 2024 by rpki-client on console-ams.rpki-client.org