Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/323830333a346565303a3a2f33322d3438203d3e20323639393831.roa
File:                     323830333a346565303a3a2f33322d3438203d3e20323639393831.roa (raw, json)
Hash identifier:          5mLwlXDoMGc2kQLRms5M2/jpzwMNigvc58RmzwISH0g=
Subject key identifier:   CB:B3:D0:9A:CA:68:0F:6C:3F:57:67:29:4F:F1:B6:04:96:E7:1C:21
Certificate issuer:       /CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
Certificate serial:       5E65B03DD7028BA4E0B9E258CAB5FAFA5F96B6B1
Authority key identifier: 9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/323830333a346565303a3a2f33322d3438203d3e20323639393831.roa
Signing time:             Tue 05 Mar 2024 18:20:34 +0000
ROA not before:           Tue 05 Mar 2024 18:15:34 +0000
ROA not after:            Tue 04 Mar 2025 18:20:34 +0000
asID:                     269981
IP address blocks:        2803:4ee0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:65:b0:3d:d7:02:8b:a4:e0:b9:e2:58:ca:b5:fa:fa:5f:96:b6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
        Validity
            Not Before: Mar  5 18:15:34 2024 GMT
            Not After : Mar  4 18:20:34 2025 GMT
        Subject: CN=CBB3D09ACA680F6C3F5767294FF1B60496E71C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:bb:c4:d7:fa:d7:13:9e:7a:b9:10:c4:27:
                    eb:ca:bb:8e:cb:de:b7:9b:ad:bc:9c:29:72:80:0f:
                    71:1b:75:69:1f:94:fb:70:89:fe:a0:9c:a5:78:60:
                    8f:ce:59:08:1c:80:e2:b9:a5:f3:22:ec:21:04:fa:
                    21:7b:74:c9:7f:30:39:6c:b6:66:85:ec:1a:7b:18:
                    ce:a5:40:32:fd:03:ec:38:4c:b9:68:75:6e:f6:6b:
                    2c:5a:d7:46:3b:3d:ca:97:e5:cd:c9:23:4a:da:9b:
                    8c:fc:26:d3:fa:54:29:75:5d:f2:aa:96:43:2e:d0:
                    43:6f:be:13:9c:29:5f:bd:e7:76:76:5a:65:76:97:
                    4a:f8:96:22:6a:7e:46:2c:e9:66:38:dd:4e:66:95:
                    39:9a:6d:99:cb:6f:80:a9:c0:d1:7d:04:d3:fa:49:
                    ce:66:80:01:ec:39:84:1b:13:a5:0d:bb:07:e7:b6:
                    c2:d1:e2:2c:04:6f:81:29:ca:6b:68:fd:d2:42:c5:
                    41:61:66:da:59:c6:e1:bd:c3:fb:58:3c:64:19:32:
                    25:2e:69:a9:39:b8:c7:31:2a:cb:a9:8f:89:c4:1e:
                    d6:11:22:f0:5e:ef:2b:d3:eb:80:a1:bd:78:01:b9:
                    af:7d:08:6a:96:28:5a:c0:f3:1c:65:d8:a6:e1:e3:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B3:D0:9A:CA:68:0F:6C:3F:57:67:29:4F:F1:B6:04:96:E7:1C:21
            X509v3 Authority Key Identifier:
                keyid:9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/323830333a346565303a3a2f33322d3438203d3e20323639393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:40:75:e9:de:31:75:5f:cc:f0:3d:80:7d:1a:ef:fb:e3:8a:
         8b:c2:e6:86:5e:1c:13:55:93:a5:e1:34:e3:13:3e:5a:10:31:
         96:5f:cd:54:74:43:9a:6b:eb:87:f6:54:30:57:61:e7:d2:cf:
         6f:16:3c:98:9c:01:e8:67:ca:0e:07:a7:bb:43:7c:78:b4:e2:
         08:b6:b8:54:91:4b:0f:b2:0e:1e:a7:48:e6:0b:2e:0a:ce:be:
         9f:45:f3:79:55:53:bc:81:6b:fd:f5:45:bf:36:c8:6b:7d:9d:
         c3:14:f3:80:50:e3:a5:60:20:e4:ea:57:0a:be:0e:76:e0:08:
         ad:ce:cf:90:9c:36:d3:3a:c0:cf:64:53:fa:50:ce:8b:a3:e1:
         df:6a:22:7a:04:05:e5:1a:61:f3:07:4b:64:f5:d5:0f:42:55:
         58:bf:0c:c3:d7:a0:d7:81:04:6a:e6:a7:8d:ae:e0:52:6b:d9:
         97:45:43:95:17:8b:2d:4f:60:eb:f6:cd:76:8a:11:d0:7f:27:
         5f:7a:ee:ef:64:97:f0:e8:36:60:08:54:38:88:14:67:e9:c2:
         75:64:23:00:00:df:9c:fa:6b:e9:4e:04:2e:af:e7:16:7d:1f:
         05:c5:81:bd:36:8a:3f:4d:2b:34:c9:16:dc:b0:0b:2f:10:a6:
         a1:ca:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 00:19:20 2024 by rpki-client on console-ams.rpki-client.org