Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/323830333a316130303a3a2f33322d3438203d3e20323632313836.roa
File:                     323830333a316130303a3a2f33322d3438203d3e20323632313836.roa (raw, json)
Hash identifier:          YF1R0CvemknEx1IS19HWLbnG/zp5h12U5zcThGH5lk0=
Subject key identifier:   23:AC:6E:EA:C8:07:EA:D2:B7:D6:C9:6B:04:1C:04:7C:79:CF:03:8D
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       3FF121B9415F5DF073727AA1141E26875730163E
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/323830333a316130303a3a2f33322d3438203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:11:07 +0000
ROA not before:           Tue 05 Mar 2024 18:06:07 +0000
ROA not after:            Tue 04 Mar 2025 18:11:07 +0000
asID:                     262186
IP address blocks:        2803:1a00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 23:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f1:21:b9:41:5f:5d:f0:73:72:7a:a1:14:1e:26:87:57:30:16:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Mar  5 18:06:07 2024 GMT
            Not After : Mar  4 18:11:07 2025 GMT
        Subject: CN=23AC6EEAC807EAD2B7D6C96B041C047C79CF038D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:e8:49:2e:c4:da:49:29:7a:d9:91:41:b2:
                    20:88:e7:5c:5d:ae:7d:ba:fc:31:fe:cf:5c:5e:4f:
                    10:f0:c3:c6:b8:ec:5b:29:76:24:af:89:1d:c4:d0:
                    47:20:94:e7:29:2a:94:af:1f:45:0b:4d:15:19:15:
                    85:fe:06:ab:30:9c:30:a2:5b:8b:cc:bf:77:fa:d2:
                    6f:e5:ba:cf:fc:2f:7a:20:c4:06:16:4c:c2:fc:76:
                    64:c1:c0:98:1d:0e:07:78:b0:3c:23:4d:3b:10:3e:
                    1a:48:19:00:51:87:cb:8c:3b:1d:94:6e:10:bf:67:
                    f3:84:77:6b:7c:db:e8:7d:b8:e0:3a:13:54:26:71:
                    34:48:af:70:e1:9b:22:18:fc:04:7b:20:2a:2a:5f:
                    0e:4e:e0:66:f2:8a:4f:de:1a:85:9d:52:5d:c9:54:
                    49:83:f8:23:5a:a3:3a:59:ab:9f:03:57:f1:b1:ed:
                    18:81:5d:48:68:40:5b:89:f5:76:21:b7:d8:67:43:
                    a4:d1:2d:b8:25:7d:ea:93:a6:b0:41:bd:6c:0e:26:
                    ef:13:4b:d5:6f:68:ae:bd:84:d4:06:b9:1c:7b:0e:
                    5b:11:02:41:fa:de:8e:28:84:9b:0b:9e:aa:62:82:
                    6f:a7:fd:4d:cb:35:1b:1b:23:8b:c6:81:e8:ec:08:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AC:6E:EA:C8:07:EA:D2:B7:D6:C9:6B:04:1C:04:7C:79:CF:03:8D
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/323830333a316130303a3a2f33322d3438203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:a0:6c:94:e4:d0:66:ff:71:eb:a5:88:ad:ec:1d:dc:35:b0:
         71:66:08:ae:6c:24:eb:ea:69:bd:6f:0a:a0:47:33:24:e3:e8:
         71:4b:65:23:cc:da:8c:d4:50:63:1f:ea:15:37:12:6f:c9:7a:
         be:75:c2:b3:a5:9b:de:2d:8b:b4:ce:65:96:59:27:ea:44:3d:
         cc:85:c9:9a:4b:be:4a:be:46:76:ad:ac:73:43:4e:b2:db:3d:
         34:b4:1d:13:29:66:05:d3:84:a5:b7:2a:9b:67:77:06:20:c3:
         26:5c:36:95:c0:13:53:2a:c6:d1:7b:57:11:f6:80:eb:8c:66:
         1c:9a:93:72:44:45:b6:c6:b2:50:97:34:af:c3:c4:ef:40:9e:
         4a:74:f2:c7:d0:73:3a:71:46:4d:a8:d7:04:fe:56:bd:0b:3f:
         05:4a:cd:b1:e4:a6:12:58:c5:15:40:8d:5f:8f:f6:23:c3:5c:
         85:ae:20:fe:56:d9:36:9f:d7:b3:13:2e:e0:53:1c:c3:a4:31:
         60:d7:ba:94:8c:ae:12:35:b8:b8:db:57:75:49:26:88:55:35:
         6a:23:4d:3d:87:71:b9:a3:14:17:de:63:b9:a1:9c:d4:0f:7f:
         fa:e7:53:1d:c4:fe:36:78:10:11:fc:3b:ac:7b:c2:c6:9b:06:
         71:33:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:46 2024 by rpki-client on console-fra.rpki-client.org