Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/323830333a353863303a3a2f33322d3332203d3e20323635363934.roa
File:                     323830333a353863303a3a2f33322d3332203d3e20323635363934.roa (raw, json)
Hash identifier:          48P+y/H8kzTxFHQIXoGOuf1PSiWLBwVmfldo0q8bhVA=
Subject key identifier:   94:FF:2F:14:C0:97:00:14:D4:35:7C:B8:8B:34:1E:AA:2A:3A:BD:42
Certificate issuer:       /CN=004D8C9FCE585D1D2D59E2275E877AC70968F585
Certificate serial:       2F9D1B1989C043B9F8A6A2D7ECA37FBEC60BAA99
Authority key identifier: 00:4D:8C:9F:CE:58:5D:1D:2D:59:E2:27:5E:87:7A:C7:09:68:F5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/323830333a353863303a3a2f33322d3332203d3e20323635363934.roa
Signing time:             Tue 05 Mar 2024 17:48:56 +0000
ROA not before:           Tue 05 Mar 2024 17:43:56 +0000
ROA not after:            Tue 04 Mar 2025 17:48:56 +0000
asID:                     265694
IP address blocks:        2803:58c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9d:1b:19:89:c0:43:b9:f8:a6:a2:d7:ec:a3:7f:be:c6:0b:aa:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004D8C9FCE585D1D2D59E2275E877AC70968F585
        Validity
            Not Before: Mar  5 17:43:56 2024 GMT
            Not After : Mar  4 17:48:56 2025 GMT
        Subject: CN=94FF2F14C0970014D4357CB88B341EAA2A3ABD42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:c4:30:a0:cc:c5:76:b9:a6:a4:ba:0f:bf:
                    ee:74:de:7e:53:90:e9:ba:82:bb:cd:59:de:0a:e1:
                    43:2a:d3:86:0e:f3:df:5f:6f:48:69:86:fc:98:b0:
                    4d:e7:eb:4d:b0:af:17:23:c4:d0:0e:ad:39:7e:df:
                    10:2d:b0:14:1c:03:14:d6:74:cb:d9:32:57:fe:8d:
                    d8:94:cb:53:0a:b1:5b:dc:79:84:40:05:2a:45:6b:
                    b6:46:dc:dd:00:a3:4f:11:0c:8a:e0:6d:36:8d:77:
                    5a:e9:6e:38:db:e0:99:59:27:9c:67:e9:9b:dc:3c:
                    95:f8:42:e3:cc:3e:17:5d:d4:36:37:48:6d:aa:01:
                    03:4d:b7:85:ef:3f:68:17:e5:0a:03:de:ef:73:6f:
                    5b:0c:b2:bf:91:51:53:15:9e:90:30:6b:99:b6:0d:
                    65:c3:49:1a:df:d2:af:b2:71:da:8d:20:45:89:92:
                    67:56:db:ef:30:bc:34:18:30:b9:34:f1:7c:f0:23:
                    ba:d5:77:04:17:b5:3a:6e:8c:90:58:16:a4:d0:aa:
                    5c:80:37:a2:23:3b:2f:85:b7:bc:9b:7e:fc:e7:8f:
                    e1:c1:9d:7c:b3:9d:43:28:42:48:fa:f0:1c:4a:19:
                    c0:d6:98:02:18:c4:34:dd:29:dd:de:49:10:e8:dc:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FF:2F:14:C0:97:00:14:D4:35:7C:B8:8B:34:1E:AA:2A:3A:BD:42
            X509v3 Authority Key Identifier:
                keyid:00:4D:8C:9F:CE:58:5D:1D:2D:59:E2:27:5E:87:7A:C7:09:68:F5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/323830333a353863303a3a2f33322d3332203d3e20323635363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:00:8d:6c:58:d9:6d:00:29:74:b7:1c:cb:94:1c:99:01:
         19:4e:86:9d:8b:08:03:20:a3:05:a9:a9:ce:2f:38:2c:45:89:
         c0:02:7b:b7:11:90:c4:38:53:3a:7c:0b:2b:81:3d:b3:bd:55:
         7a:23:cb:41:0d:ef:60:7a:80:36:16:87:be:70:d7:c8:99:54:
         bb:d1:98:da:7e:47:48:12:67:0b:85:34:88:f2:62:c1:25:bb:
         64:f2:60:40:0e:eb:6d:62:8e:d9:24:10:bd:ad:ae:0c:0e:2a:
         82:52:eb:f2:3e:60:d4:b0:2f:b6:ea:dc:56:d4:c8:fe:c3:ba:
         b6:41:77:66:ad:c9:83:39:1d:bb:9d:71:e6:1a:c0:dd:cb:47:
         78:86:a2:0a:61:6c:14:a8:c2:45:53:e8:3b:15:71:43:7f:12:
         da:10:29:fe:71:3d:d4:17:56:1d:09:57:f4:34:a3:03:05:b3:
         c5:0d:cb:06:1f:14:80:c2:78:bf:ed:9e:30:94:dd:08:fa:d1:
         ce:5d:08:b9:d6:8a:06:8c:6e:41:35:12:50:23:77:f4:7d:20:
         c8:7c:d0:7e:ce:1e:c9:4d:fc:a7:d4:a9:32:f4:3c:76:6b:4d:
         55:c0:9f:78:b2:a3:b8:74:27:36:0d:4d:8f:e5:83:6c:3e:73:
         ed:54:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:15 2024 by rpki-client on console-ams.rpki-client.org