Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a3a2f33322d3438203d3e20323732383132.roa
File:                     323830333a663839303a3a2f33322d3438203d3e20323732383132.roa (raw, json)
Hash identifier:          PKWGOxaeNCIghHj4exeVJ7ZiceEJ4e5LsK1KlcwL6oY=
Subject key identifier:   26:4B:55:76:0B:78:A5:BA:A5:17:0B:E4:9E:F0:74:4B:0F:A0:66:47
Certificate issuer:       /CN=4F17FCC8C3EABBDF83117BBA41369D63983E96C4
Certificate serial:       70861DEE69A109BF025EC29DB494861C178EF657
Authority key identifier: 4F:17:FC:C8:C3:EA:BB:DF:83:11:7B:BA:41:36:9D:63:98:3E:96:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a3a2f33322d3438203d3e20323732383132.roa
Signing time:             Sun 31 Mar 2024 16:15:00 +0000
ROA not before:           Sun 31 Mar 2024 16:10:00 +0000
ROA not after:            Sun 30 Mar 2025 16:15:00 +0000
asID:                     272812
IP address blocks:        2803:f890::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:86:1d:ee:69:a1:09:bf:02:5e:c2:9d:b4:94:86:1c:17:8e:f6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F17FCC8C3EABBDF83117BBA41369D63983E96C4
        Validity
            Not Before: Mar 31 16:10:00 2024 GMT
            Not After : Mar 30 16:15:00 2025 GMT
        Subject: CN=264B55760B78A5BAA5170BE49EF0744B0FA06647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:39:45:3d:a9:d9:c4:c6:35:2f:14:1a:db:
                    c3:7d:8f:49:06:33:92:1f:54:40:bd:a8:ef:9c:ed:
                    4a:db:f7:34:92:a4:74:b5:be:cb:d5:de:9d:b9:70:
                    35:45:5d:c4:be:48:72:ec:94:d1:06:04:89:c4:d3:
                    db:c7:a0:69:ba:9d:ad:d4:51:b6:b2:4d:09:07:1e:
                    20:ce:c4:6a:b5:96:55:71:5e:16:8c:1b:7c:2d:71:
                    9c:8f:38:37:5d:0e:31:d0:66:18:14:79:bf:3a:4f:
                    a0:3a:08:9f:e0:5d:1b:8c:ac:68:fb:84:1a:ba:c9:
                    89:8a:85:b3:54:5f:e1:95:d4:58:72:ee:0d:1b:3f:
                    59:c9:c2:4a:f1:38:3f:72:89:92:8f:48:a5:cd:b5:
                    f4:11:95:34:65:df:ef:38:43:b9:22:5d:a2:44:b5:
                    38:30:aa:a3:2a:22:2c:aa:65:d2:64:d9:d0:4e:d8:
                    2e:3b:cc:55:33:d1:d7:9f:40:92:18:26:12:fe:7e:
                    8d:e9:7e:16:18:df:a1:b3:6d:99:40:3e:0a:d1:bd:
                    c0:af:0f:34:52:5e:1f:29:bf:a6:fd:6a:b5:2b:d8:
                    57:81:64:bb:bb:a2:16:88:5e:0b:62:52:5e:68:70:
                    6e:ca:3c:46:a2:88:6c:88:f4:9a:18:75:c5:b7:4b:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:55:76:0B:78:A5:BA:A5:17:0B:E4:9E:F0:74:4B:0F:A0:66:47
            X509v3 Authority Key Identifier:
                keyid:4F:17:FC:C8:C3:EA:BB:DF:83:11:7B:BA:41:36:9D:63:98:3E:96:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F17FCC8C3EABBDF83117BBA41369D63983E96C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3593267DCAB983F94876CE4CC924D6C481940F0E67412D4EA45314E81632B4E5/0/323830333a663839303a3a2f33322d3438203d3e20323732383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:2f:3e:e4:2e:97:4c:80:1f:ec:93:c4:26:88:eb:88:c9:33:
         60:d5:d9:17:74:9f:ce:c2:b0:41:a8:27:96:a3:48:88:11:72:
         e1:32:0f:27:54:09:14:65:e2:8a:15:64:b7:a5:cb:e5:ba:33:
         74:7c:07:e3:13:b1:1d:c1:c9:06:82:88:0a:af:8b:46:11:d1:
         75:fe:09:42:ad:de:db:4f:ee:57:0e:e9:75:e7:4c:69:4b:0b:
         1e:49:80:6c:bc:f4:b2:4c:99:e8:e2:48:5a:e3:35:0b:f0:be:
         87:b3:1c:bb:27:90:1d:32:ff:a9:27:da:15:82:4c:60:22:8b:
         dd:b6:94:de:10:22:08:7a:71:cf:7c:ca:d3:cd:9b:0c:6f:ed:
         23:66:28:02:ce:fd:87:6a:3a:96:d3:f4:b4:01:95:f6:21:07:
         72:7c:66:ba:20:b7:ac:20:b7:4a:f6:cc:86:a4:12:9a:8d:ec:
         5b:2a:7c:39:56:bd:fd:2b:fc:36:a7:e2:d0:ac:55:69:d9:44:
         b9:2d:1d:55:f2:4f:4a:4d:52:d4:69:3f:34:38:90:90:6e:b5:
         4d:d0:1e:af:d3:db:b7:aa:47:7c:3e:0d:7d:dc:95:d4:a3:64:
         0b:84:97:09:ba:1a:3a:d5:85:df:f6:d4:8e:64:60:02:28:4d:
         b5:f0:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:47 2024 by rpki-client on console-ams.rpki-client.org