Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830333a363239303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          uXTJFgshIPm3ZYfjg6KdjDdc0T67RdOm93TD6/Cz6LE=
Subject key identifier:   44:A9:30:B1:B8:C3:F9:2F:61:35:F2:8F:99:2E:01:F0:ED:58:CD:E2
Certificate issuer:       /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Certificate serial:       28DFA396183924AC756367D684DF2D76852AFA7C
Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:50:43 +0000
ROA not before:           Tue 05 Mar 2024 17:45:43 +0000
ROA not after:            Tue 04 Mar 2025 17:50:43 +0000
asID:                     262589
IP address blocks:        2803:6290::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:df:a3:96:18:39:24:ac:75:63:67:d6:84:df:2d:76:85:2a:fa:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
        Validity
            Not Before: Mar  5 17:45:43 2024 GMT
            Not After : Mar  4 17:50:43 2025 GMT
        Subject: CN=44A930B1B8C3F92F6135F28F992E01F0ED58CDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:9c:f1:a3:0f:ce:70:f4:ba:65:ee:7c:61:
                    3e:08:d1:73:12:11:34:85:19:f2:34:76:17:81:2f:
                    64:09:e7:e4:67:ee:5d:ba:a4:cb:0b:f9:e3:da:b3:
                    d6:af:be:7b:13:cd:e4:a5:04:d3:f3:77:22:37:e8:
                    19:1a:22:08:3a:66:27:ad:d4:12:ed:10:8c:35:6a:
                    6b:c7:a5:dc:ca:67:e0:0b:df:6e:8d:e5:33:28:3e:
                    42:e5:dd:27:01:b6:92:5d:e1:28:e6:33:8e:cc:86:
                    9f:cb:7f:c2:2a:8f:fe:00:d5:93:84:1e:5f:ac:29:
                    64:59:34:38:27:b6:52:e3:1a:9f:97:a5:19:22:63:
                    53:11:40:a0:04:ec:c1:b2:56:83:66:f2:28:e7:6e:
                    ce:bf:a4:41:c8:40:e6:d8:4c:5d:60:5a:16:a0:1a:
                    54:4c:5a:45:6b:fd:03:b4:c1:ef:59:b7:f5:55:7b:
                    2b:72:ec:c1:eb:84:be:50:df:74:6c:58:02:a0:b6:
                    fa:c7:25:e0:bc:09:8c:e5:70:02:03:03:e7:80:8f:
                    93:38:30:4d:33:5a:8d:45:59:19:c4:a9:47:92:3d:
                    56:b5:38:eb:e6:e7:94:97:83:e7:20:d3:59:c1:d1:
                    6e:53:53:fa:57:2e:dc:03:34:10:cf:c8:6b:da:66:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A9:30:B1:B8:C3:F9:2F:61:35:F2:8F:99:2E:01:F0:ED:58:CD:E2
            X509v3 Authority Key Identifier:
                keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:56:58:2b:6e:e5:f2:aa:28:8b:30:54:ff:4d:79:be:d4:2f:
         fa:d6:e0:6e:51:21:52:b9:ea:7c:e1:8b:57:63:a9:b0:19:97:
         b4:ba:cd:36:55:9c:bf:ad:90:20:f7:ce:26:9b:40:04:c2:d5:
         fa:5c:83:83:6a:b8:88:55:f9:90:d4:11:a1:95:f1:93:28:64:
         24:d4:37:dd:88:7b:b0:fa:dc:88:6a:8c:81:6e:6d:e5:5f:8d:
         71:b4:68:a1:a4:c2:f0:68:39:ef:73:fb:d2:78:6c:63:02:24:
         fc:24:ec:4a:bf:6c:42:92:66:e0:45:dc:01:6c:54:7f:8f:0e:
         41:bd:2f:9b:41:3d:60:42:9a:97:80:87:fd:8f:0f:f7:c0:09:
         53:ef:3b:db:30:70:44:2c:fc:09:36:a4:f5:84:ee:fb:2f:03:
         be:4c:66:5d:75:ce:91:92:e8:cb:61:af:43:19:47:42:76:40:
         30:59:c3:23:6b:fa:8b:69:d7:57:46:c6:8a:3f:22:3d:3e:37:
         be:4f:8c:22:fb:ce:59:3d:02:7c:1d:e0:7e:18:83:5b:e2:b8:
         10:d9:04:85:5f:21:b9:d0:6a:5f:fe:68:0b:67:ac:a3:ed:b0:
         d5:66:f3:86:1f:d2:e3:a5:6b:77:34:1b:9b:04:05:ce:03:0b:
         49:b5:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org