Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/323830333a336636303a3a2f33322d3438203d3e20323634373434.roa
File:                     323830333a336636303a3a2f33322d3438203d3e20323634373434.roa (raw, json)
Hash identifier:          wrRMFvBnWjwH+piHi9Lh4VPcGXfCiSFYJrLLCYiQfMw=
Subject key identifier:   F1:F8:ED:6A:45:91:88:62:5F:65:1A:5C:82:D4:29:83:4A:54:9E:8A
Certificate issuer:       /CN=32B04C79CB485E8D05BD3A73D9DD3F9F028D7184
Certificate serial:       4D59DAE0088F710B8A6938D248313D0B4DBCA9B7
Authority key identifier: 32:B0:4C:79:CB:48:5E:8D:05:BD:3A:73:D9:DD:3F:9F:02:8D:71:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/323830333a336636303a3a2f33322d3438203d3e20323634373434.roa
Signing time:             Tue 05 Mar 2024 17:59:21 +0000
ROA not before:           Tue 05 Mar 2024 17:54:21 +0000
ROA not after:            Tue 04 Mar 2025 17:59:21 +0000
asID:                     264744
IP address blocks:        2803:3f60::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:59:da:e0:08:8f:71:0b:8a:69:38:d2:48:31:3d:0b:4d:bc:a9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B04C79CB485E8D05BD3A73D9DD3F9F028D7184
        Validity
            Not Before: Mar  5 17:54:21 2024 GMT
            Not After : Mar  4 17:59:21 2025 GMT
        Subject: CN=F1F8ED6A459188625F651A5C82D429834A549E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:57:1f:64:03:f1:0b:ce:fe:e6:7a:1a:32:
                    06:db:13:29:e4:c7:7b:ea:39:4f:44:81:1c:ce:be:
                    2e:65:91:f4:01:4b:da:84:c4:e1:77:51:3b:d2:4f:
                    8f:12:77:c4:1f:c9:82:6d:11:52:d1:5a:f9:bb:3a:
                    62:51:c9:8d:46:4f:46:88:0c:76:32:f1:d3:8d:6c:
                    f2:d9:2f:45:3c:61:28:31:fb:ba:60:53:30:7b:06:
                    d0:b9:25:6b:c3:51:cf:7f:11:54:1a:c2:3c:53:e6:
                    8a:c6:b2:89:b4:bf:37:b9:01:49:f6:7c:2a:12:c9:
                    3a:19:5e:20:5c:ed:62:3b:27:43:f3:2b:19:49:06:
                    a5:11:9b:f8:df:1b:8d:68:e4:8b:dc:51:a1:13:6a:
                    02:74:e5:96:84:9e:c3:ab:6b:d3:60:1c:9b:aa:54:
                    95:d2:b5:41:ec:fb:4a:bd:24:3d:1c:3d:d9:4c:e1:
                    d1:72:82:a0:ac:97:61:23:e4:53:3b:ac:8b:e4:70:
                    0c:bc:92:c4:c9:35:87:32:76:0d:f2:b2:80:c8:28:
                    2d:4d:64:27:66:8d:54:e2:db:7f:f6:db:ad:1a:b0:
                    34:41:32:80:3f:52:6b:c7:a1:90:6a:bc:7f:85:27:
                    d4:23:70:45:69:78:10:2b:a0:a4:36:20:ae:9c:9e:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F8:ED:6A:45:91:88:62:5F:65:1A:5C:82:D4:29:83:4A:54:9E:8A
            X509v3 Authority Key Identifier:
                keyid:32:B0:4C:79:CB:48:5E:8D:05:BD:3A:73:D9:DD:3F:9F:02:8D:71:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/323830333a336636303a3a2f33322d3438203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:b7:be:a3:2d:db:97:d9:96:6f:ea:5f:18:a1:a7:8b:bf:
         f7:06:07:d2:03:12:ad:54:9e:2b:68:84:9b:25:e6:c4:50:51:
         c9:cc:b7:01:46:89:dc:23:22:9a:38:8d:44:0a:9d:81:c8:81:
         c6:f4:8a:85:87:9b:49:51:db:f3:0b:c5:63:06:3e:b6:ac:e6:
         49:38:9e:63:18:35:b3:49:4c:30:74:f4:8d:38:d4:ed:b2:b6:
         90:d5:5c:c9:4b:90:0a:c3:ec:f8:2c:4b:d1:1d:54:e5:59:b2:
         58:ec:c1:64:5e:44:2d:27:af:96:b0:71:b3:5c:fb:f5:96:19:
         29:87:f3:a1:32:55:bb:b3:a2:f2:3d:4a:8f:71:17:4b:19:14:
         74:8b:ac:59:ee:fc:bc:e7:c9:92:01:49:b8:50:f3:4d:38:5a:
         3e:e4:f5:b9:24:90:41:a7:e9:cf:7c:a3:53:f9:f4:bc:b6:ba:
         c1:38:26:b1:54:d2:54:12:69:3c:b0:42:df:63:02:fc:7e:b0:
         f1:67:a3:d0:f8:a0:3e:b9:bf:b0:40:67:e9:b2:be:06:f8:69:
         07:bf:74:96:af:42:43:8e:d3:b5:e5:d8:b1:8b:c8:8b:56:07:
         38:5f:3b:30:f1:82:75:45:92:6f:28:64:db:d3:63:34:51:94:
         ce:13:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:41:07 2024 by rpki-client on console-fra.rpki-client.org