Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/323830333a343434303a3a2f33322d3438203d3e203238303039.roa
File:                     323830333a343434303a3a2f33322d3438203d3e203238303039.roa (raw, json)
Hash identifier:          ujWdTOKJ+edn3jfZh0LpdKUWfTa4vpN01HYMSQgobGs=
Subject key identifier:   0F:95:F6:AD:27:E8:D1:DF:0F:CE:9D:09:A6:A2:36:89:C4:91:5B:80
Certificate issuer:       /CN=B2866080BB7E2072C6871B23409ACE82D8A3551A
Certificate serial:       40808C638E112B36A7ED56108026C909F92AEB12
Authority key identifier: B2:86:60:80:BB:7E:20:72:C6:87:1B:23:40:9A:CE:82:D8:A3:55:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/323830333a343434303a3a2f33322d3438203d3e203238303039.roa
Signing time:             Tue 05 Mar 2024 17:53:59 +0000
ROA not before:           Tue 05 Mar 2024 17:48:59 +0000
ROA not after:            Tue 04 Mar 2025 17:53:59 +0000
asID:                     28009
IP address blocks:        2803:4440::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 13:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:80:8c:63:8e:11:2b:36:a7:ed:56:10:80:26:c9:09:f9:2a:eb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2866080BB7E2072C6871B23409ACE82D8A3551A
        Validity
            Not Before: Mar  5 17:48:59 2024 GMT
            Not After : Mar  4 17:53:59 2025 GMT
        Subject: CN=0F95F6AD27E8D1DF0FCE9D09A6A23689C4915B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:93:fe:66:a7:d7:56:ed:8e:d3:e9:42:50:
                    10:2f:53:f7:31:05:55:3c:bd:5e:a6:d5:b8:0c:7a:
                    d3:4c:9c:94:58:50:1f:55:24:d9:34:c0:b3:ff:65:
                    b9:52:14:38:bd:a8:d7:75:0e:11:78:e2:b0:9b:3b:
                    60:06:5c:8f:05:30:98:11:5a:b5:6a:bb:7b:84:4d:
                    5f:8c:1c:1e:97:89:77:02:e8:8e:40:11:31:53:9a:
                    3e:e3:d9:d2:9b:ec:b2:b2:55:64:60:cf:fe:13:f8:
                    8e:d9:76:42:46:e4:70:6a:76:2f:90:25:4f:e3:f0:
                    e9:4f:32:a6:a8:02:88:ce:b3:f5:4f:83:85:6f:31:
                    1e:5e:71:fa:3f:4a:2f:1b:3a:8d:42:06:a8:71:93:
                    ac:31:d9:dd:ab:46:ad:d9:e8:d7:28:bf:19:dd:a1:
                    bf:2a:bd:6a:e6:cb:11:68:7f:2a:dc:5a:13:7d:13:
                    ca:0f:1b:64:73:95:b6:01:d9:ef:9d:9b:c0:8c:c7:
                    76:14:76:05:f8:ff:90:9e:3a:cf:0e:5f:52:8e:19:
                    c1:93:37:80:ff:49:07:5f:c9:b4:bd:ca:1e:ad:ec:
                    cd:b7:38:8a:11:76:bf:ee:2f:3c:1b:2a:b2:f0:05:
                    c5:70:f0:d2:49:d5:8b:6e:5d:86:35:c0:de:da:32:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:95:F6:AD:27:E8:D1:DF:0F:CE:9D:09:A6:A2:36:89:C4:91:5B:80
            X509v3 Authority Key Identifier:
                keyid:B2:86:60:80:BB:7E:20:72:C6:87:1B:23:40:9A:CE:82:D8:A3:55:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/323830333a343434303a3a2f33322d3438203d3e203238303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4440::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:8f:38:dd:d7:56:67:a2:79:8c:a0:c2:22:e9:b8:39:b4:
         b7:6f:4f:cc:65:7a:54:db:f2:8f:cc:31:7a:b9:cd:7f:2b:47:
         71:7e:6a:6f:8b:8a:4c:27:a6:49:2f:91:3e:af:07:fc:78:42:
         c2:a9:66:88:17:c6:be:8d:d2:85:3c:7e:49:ff:e6:d8:04:68:
         c5:b5:d0:ab:32:b2:55:0e:0c:b5:87:8f:be:f4:9f:e1:cf:17:
         20:a1:94:7f:b4:53:ce:6f:5b:18:c3:dc:bb:53:cc:98:ca:66:
         e7:51:6b:d0:fd:c2:79:f1:6f:7f:75:93:e4:dc:83:24:cb:4c:
         26:d1:68:b5:0a:bf:01:13:b1:28:7e:75:46:62:c7:c5:c5:d6:
         03:0b:57:1d:05:ad:55:e2:31:db:37:a5:f3:f9:0a:52:16:62:
         ef:1e:2b:89:71:40:e1:82:40:7c:8d:ce:0e:b9:f9:99:cd:bd:
         8a:8b:89:c1:ca:53:fb:62:2f:3e:8e:45:d0:98:89:6b:fd:61:
         9a:62:ad:f2:d9:7c:57:c6:a5:e0:f4:4b:cb:13:e0:11:17:26:
         21:ed:92:00:01:10:23:61:f1:f2:bf:8b:86:d0:3b:c7:61:c3:
         8f:21:f6:7b:fd:5a:47:65:1c:ac:30:2c:19:6a:3a:f0:a4:f6:
         4d:92:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:40:30 2024 by rpki-client on console-ams.rpki-client.org