Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa
File:                     323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa (raw, json)
Hash identifier:          kxBkBsO5L6ZXUKcN6okVH9crxl6CQ+eRJPQHcIS58Y0=
Subject key identifier:   46:B5:9E:1E:0F:1C:65:8C:34:84:8D:36:7E:75:51:EA:32:CE:45:8F
Certificate issuer:       /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial:       15F5D2CD78F56F5C2AD08EDE627F1F7136716042
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa
Signing time:             Tue 05 Mar 2024 18:05:46 +0000
ROA not before:           Tue 05 Mar 2024 18:00:46 +0000
ROA not after:            Tue 04 Mar 2025 18:05:46 +0000
asID:                     265693
IP address blocks:        2803:7640:40::/43 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f5:d2:cd:78:f5:6f:5c:2a:d0:8e:de:62:7f:1f:71:36:71:60:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
        Validity
            Not Before: Mar  5 18:00:46 2024 GMT
            Not After : Mar  4 18:05:46 2025 GMT
        Subject: CN=46B59E1E0F1C658C34848D367E7551EA32CE458F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:d4:0b:8b:6c:f3:f2:50:7f:fa:f3:34:d6:
                    66:3b:cb:b6:e5:99:6b:83:74:6c:f2:1b:98:bf:0c:
                    17:55:74:68:03:28:8a:1a:3d:51:bd:53:3e:71:24:
                    e0:90:70:87:59:ee:10:63:64:d2:f9:3e:ad:fb:1b:
                    8c:9b:36:89:9b:3c:28:b9:f7:68:8c:37:75:3c:ce:
                    b4:d8:6a:24:ef:b9:52:ca:27:2e:75:26:da:26:4a:
                    2b:62:90:ca:78:38:23:82:09:d8:1b:7b:17:40:cc:
                    e3:67:04:95:00:a1:ea:8e:c8:57:f0:37:3c:3e:df:
                    7f:4f:c7:94:c6:48:23:81:91:61:4d:4b:bf:20:f5:
                    80:63:73:e9:63:f5:cf:e6:43:bf:d0:e2:c6:76:8e:
                    7f:3b:21:c4:ec:17:2e:50:33:fb:de:0b:da:55:d7:
                    0e:e0:3d:0f:15:b9:45:96:05:24:8d:36:af:2d:fd:
                    84:fc:47:b8:80:58:af:ca:ca:9f:dd:4f:f6:34:86:
                    ff:ec:05:13:12:84:02:aa:39:0b:55:85:1e:c7:60:
                    4c:5e:4d:e4:36:b4:54:eb:d8:89:2f:76:4f:d0:f3:
                    b2:ee:0e:8e:1f:73:53:48:09:4c:2c:96:db:44:2d:
                    85:f2:78:7b:4d:74:88:24:3a:62:35:29:db:3c:0d:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B5:9E:1E:0F:1C:65:8C:34:84:8D:36:7E:75:51:EA:32:CE:45:8F
            X509v3 Authority Key Identifier:
                keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a34303a3a2f34332d3434203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7640:40::/43

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:70:eb:e9:ca:37:02:37:02:56:5d:af:85:44:01:eb:9e:
         4c:19:71:09:fd:31:41:87:f2:20:e7:97:93:ce:6b:30:7d:4d:
         bd:05:b5:09:a1:18:c2:09:d5:42:64:42:c7:31:ab:d0:5d:d7:
         4f:9e:6a:4b:13:20:a0:66:11:f8:f1:10:84:38:de:bd:b5:87:
         9a:c8:a0:dd:13:28:5c:26:71:48:6e:7e:05:bf:cc:6b:74:31:
         92:2d:59:07:ec:3e:19:cd:de:f9:91:07:a4:6d:9e:d7:b1:96:
         c7:27:e4:6a:e2:c4:f1:b7:36:f9:2b:6b:88:0c:67:ec:01:43:
         48:b2:81:a7:87:8e:5c:b7:8b:42:77:6c:44:f9:8f:bf:7e:02:
         0e:7b:df:81:02:5f:0b:aa:c0:48:54:b3:fc:e7:48:a5:df:cb:
         d8:9b:a5:06:58:9a:a7:36:1f:78:5f:43:1b:7b:3c:51:64:d4:
         c2:57:d3:8d:2d:ac:38:51:4f:c0:fb:57:8f:e1:0b:26:c1:eb:
         e0:c2:7b:20:f6:bd:65:07:4e:53:8b:ac:6b:f2:7b:da:ef:d7:
         14:ca:08:d9:43:e7:d6:d6:cc:39:6f:a5:8f:44:d4:b6:be:d9:
         4f:58:24:5e:11:60:9e:34:a8:96:60:bf:49:b6:6a:d6:57:00:
         41:31:67:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:30:41 2024 by rpki-client on console-ams.rpki-client.org