Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/323830333a356530303a3a2f33322d3438203d3e20323637373635.roa
File:                     323830333a356530303a3a2f33322d3438203d3e20323637373635.roa (raw, json)
Hash identifier:          ZmI5GFapzB+7cqM0euKmAuovJBj25TkaTNfSvdulzPU=
Subject key identifier:   34:5B:8A:09:E9:19:3C:D2:2F:F9:44:A5:7B:75:8B:01:3A:B6:EB:5D
Certificate issuer:       /CN=A420AC4C72DA7B64E98421B8B94378106902CB9F
Certificate serial:       6F0600C14AC45034F284A47A062DCAC82B4911DD
Authority key identifier: A4:20:AC:4C:72:DA:7B:64:E9:84:21:B8:B9:43:78:10:69:02:CB:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/323830333a356530303a3a2f33322d3438203d3e20323637373635.roa
Signing time:             Tue 05 Mar 2024 18:02:10 +0000
ROA not before:           Tue 05 Mar 2024 17:57:10 +0000
ROA not after:            Tue 04 Mar 2025 18:02:10 +0000
asID:                     267765
IP address blocks:        2803:5e00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:06:00:c1:4a:c4:50:34:f2:84:a4:7a:06:2d:ca:c8:2b:49:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A420AC4C72DA7B64E98421B8B94378106902CB9F
        Validity
            Not Before: Mar  5 17:57:10 2024 GMT
            Not After : Mar  4 18:02:10 2025 GMT
        Subject: CN=345B8A09E9193CD22FF944A57B758B013AB6EB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:fd:4c:da:0f:f3:52:34:a5:9c:95:50:32:
                    d7:18:ed:7a:0b:47:88:5d:a2:8c:10:91:5c:5f:6b:
                    e9:0e:b4:54:81:85:c6:ee:e6:ea:b8:73:d3:44:51:
                    09:1b:5d:c8:b9:a2:ba:78:9f:1c:fb:fe:ca:ed:ad:
                    aa:93:2a:da:f4:90:55:c4:88:91:3e:85:21:f2:c2:
                    64:00:08:59:5d:77:d8:76:4e:9b:c3:86:ba:3b:8c:
                    7d:e1:23:e8:ab:9c:d3:f2:18:60:1d:dd:20:b6:33:
                    d3:bf:b5:6b:f1:20:b9:ce:94:6a:3c:99:23:16:97:
                    42:6a:17:e5:67:b5:27:3e:05:14:be:3c:22:6a:2f:
                    35:b8:ca:36:9c:64:da:8f:77:a6:33:ec:c6:73:3f:
                    d4:93:c5:e2:d1:a6:18:1a:c0:8c:ca:62:3b:5b:b0:
                    62:17:3f:ab:3c:2c:a2:92:c6:12:00:cc:64:1c:2a:
                    29:9f:81:08:38:26:96:7f:67:92:2f:f0:13:dc:ea:
                    2b:f2:6b:d3:6e:b8:6a:cb:d1:5e:d1:48:a0:d6:0b:
                    3b:f4:09:17:41:53:e4:fa:a6:35:e6:bb:43:e2:5f:
                    e1:32:1d:4d:5f:b8:40:d5:5f:81:00:1a:41:19:4d:
                    45:7b:00:ca:15:58:e9:c6:19:d6:cf:5e:dd:75:d0:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:8A:09:E9:19:3C:D2:2F:F9:44:A5:7B:75:8B:01:3A:B6:EB:5D
            X509v3 Authority Key Identifier:
                keyid:A4:20:AC:4C:72:DA:7B:64:E9:84:21:B8:B9:43:78:10:69:02:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A420AC4C72DA7B64E98421B8B94378106902CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F7D93F31A55DB6BC0A37009DE4C2A9F646532B9B13F57318539716493300469/0/323830333a356530303a3a2f33322d3438203d3e20323637373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:c6:be:94:b5:c5:d2:a0:01:a5:61:b6:74:21:8d:e8:27:7d:
         98:44:a1:53:8a:c3:22:bc:33:cf:b3:37:f7:ad:8d:ac:58:f4:
         d2:0e:10:de:f6:ac:a4:72:4e:c2:d5:2e:22:af:6f:18:c3:0e:
         9d:c6:e3:53:f7:da:73:0b:14:68:c5:41:ca:8d:f3:a4:e6:08:
         1d:aa:54:ba:1b:c2:b0:2a:70:9a:d3:dc:f7:d8:93:9f:2c:7b:
         d4:38:21:a7:48:ba:5a:00:0c:02:02:47:3e:0b:6c:27:9f:e7:
         9e:14:9c:25:3b:32:74:cb:11:1d:7f:d3:44:dd:59:86:5b:21:
         b4:1c:6b:e0:0a:64:2b:98:62:8d:8c:f4:8c:65:f1:ae:c2:de:
         c2:2a:6d:8c:a4:cd:6c:e8:47:6d:81:4e:85:e9:85:b2:77:b9:
         32:a4:91:2d:02:73:00:df:14:64:e7:0d:f5:8d:cc:7a:a7:98:
         2e:54:0c:de:7e:0b:4f:bf:57:73:ae:9a:27:b7:b9:1d:dd:c6:
         b1:c3:82:ae:ac:e3:05:29:86:d7:21:d5:51:c6:ff:bd:f3:38:
         c7:09:a9:56:09:37:76:63:ef:45:31:c3:5d:10:c6:c2:b3:5a:
         df:28:35:b0:dd:2f:29:7b:a9:f0:59:df:0f:76:e0:0c:9e:63:
         70:ba:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:21 2024 by rpki-client on console-fra.rpki-client.org