Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/323830333a333435303a3a2f33322d3438203d3e20323732393538.roa
File:                     323830333a333435303a3a2f33322d3438203d3e20323732393538.roa (raw, json)
Hash identifier:          GKNG6E3yAuChHWXeQsBv13BT2yy7xj47IGXW84lXXaY=
Subject key identifier:   9D:29:E4:14:62:74:1E:F5:CB:4A:2E:61:D3:AF:97:84:5E:88:CE:B5
Certificate issuer:       /CN=9832E74678E4CD60717C36E84BA71426178E7DF3
Certificate serial:       41B1C699574FFB11B046DB7633B5B5C79228BF91
Authority key identifier: 98:32:E7:46:78:E4:CD:60:71:7C:36:E8:4B:A7:14:26:17:8E:7D:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9832E74678E4CD60717C36E84BA71426178E7DF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/323830333a333435303a3a2f33322d3438203d3e20323732393538.roa
Signing time:             Tue 05 Mar 2024 18:15:56 +0000
ROA not before:           Tue 05 Mar 2024 18:10:56 +0000
ROA not after:            Tue 04 Mar 2025 18:15:56 +0000
asID:                     272958
IP address blocks:        2803:3450::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9832E74678E4CD60717C36E84BA71426178E7DF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b1:c6:99:57:4f:fb:11:b0:46:db:76:33:b5:b5:c7:92:28:bf:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9832E74678E4CD60717C36E84BA71426178E7DF3
        Validity
            Not Before: Mar  5 18:10:56 2024 GMT
            Not After : Mar  4 18:15:56 2025 GMT
        Subject: CN=9D29E41462741EF5CB4A2E61D3AF97845E88CEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:a1:72:3d:91:ac:f8:5c:50:0e:e0:83:21:
                    25:5a:50:81:23:a0:85:62:19:2e:bd:1d:0a:14:c2:
                    04:1e:3a:8f:f7:6e:99:db:18:1e:04:33:b8:9d:56:
                    67:27:6a:38:26:56:b2:96:0b:4f:ad:3a:07:c2:8d:
                    35:d9:3c:68:d0:7d:e3:5f:b3:71:4a:71:38:57:29:
                    46:d8:14:35:72:b5:df:66:20:3f:ed:39:27:25:3f:
                    85:7e:85:d6:1e:23:68:fa:2a:4d:36:e4:82:45:7e:
                    40:70:15:45:cd:6c:7f:38:8e:cc:1f:61:33:6c:d3:
                    6a:ad:ae:fc:8e:3a:79:50:26:91:c5:2f:d7:70:a4:
                    23:77:d7:bb:90:75:d2:f7:c9:23:8f:75:e8:bc:41:
                    e0:a5:90:32:54:48:91:45:85:a9:00:1e:40:6c:9d:
                    9b:49:d3:34:f0:9f:14:12:7a:eb:7e:97:8e:f7:43:
                    89:a4:7c:70:7c:c4:1f:e6:ce:01:5b:8c:d1:c8:75:
                    0d:bd:95:7a:c3:20:1b:9e:b4:7a:0d:f1:bd:bf:7c:
                    3f:d9:54:83:1d:7e:36:4e:28:17:00:45:31:a5:c0:
                    5c:59:74:5c:37:c0:95:8f:1a:cc:75:dc:c9:85:8e:
                    41:50:98:b9:c4:6a:6f:30:d3:9b:23:74:69:a0:a5:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:29:E4:14:62:74:1E:F5:CB:4A:2E:61:D3:AF:97:84:5E:88:CE:B5
            X509v3 Authority Key Identifier:
                keyid:98:32:E7:46:78:E4:CD:60:71:7C:36:E8:4B:A7:14:26:17:8E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9832E74678E4CD60717C36E84BA71426178E7DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/323830333a333435303a3a2f33322d3438203d3e20323732393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3450::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:76:1c:6e:49:a7:28:31:27:f4:96:de:a0:45:75:cd:3c:
         41:e3:88:f7:4e:97:f6:5b:b4:df:10:62:56:23:f2:d6:7d:2c:
         92:d1:fb:2d:1b:23:22:de:77:cb:8b:1c:8b:0a:2c:23:13:19:
         a2:d8:28:ee:d2:70:68:4d:d5:ba:d8:6a:8b:39:d1:dc:10:14:
         8e:d1:72:83:9d:39:c9:75:0a:30:ad:c8:4c:9d:ae:7d:72:6f:
         57:f5:f3:9f:b8:d0:51:05:0e:22:93:a2:a2:9b:a4:ff:8a:4a:
         12:52:80:b4:68:9f:6f:25:70:92:b7:94:be:ab:69:cd:ab:e9:
         1a:ff:b7:eb:84:ff:1d:19:15:a2:bd:f1:62:08:58:24:ed:9c:
         36:80:a0:35:86:39:0d:68:52:30:c4:10:ec:60:ae:03:22:ee:
         b3:c3:55:4b:45:fa:e4:1c:6b:04:fc:08:10:51:1e:42:da:d7:
         cc:68:6f:20:b8:37:a0:fa:50:3a:c6:30:15:b4:89:d9:90:87:
         d3:6f:5a:ea:21:37:db:2a:0a:fa:f2:31:44:67:10:6f:d2:e2:
         86:13:12:fc:52:c7:cb:7b:57:2e:ad:bf:26:31:45:ec:4b:d4:
         7e:ba:99:9d:ab:51:f2:fa:77:d0:67:1b:59:86:f2:0d:ed:d0:
         03:70:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 10:44:55 2024 by rpki-client on console-ams.rpki-client.org