Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa
File:                     323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          rHK2C4jAjd4vk7sEZer3FNFkmWr4DaZg9lbg/FRbsVM=
Subject key identifier:   2C:9A:35:0F:E9:43:87:B4:69:6C:10:34:4F:DD:A5:63:56:F6:39:1E
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       17234F7879AC215FE0584887874E18566B33F8EE
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:02 +0000
ROA not before:           Mon 11 Mar 2024 19:05:02 +0000
ROA not after:            Mon 10 Mar 2025 19:10:02 +0000
asID:                     262182
IP address blocks:        2803:f00:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:23:4f:78:79:ac:21:5f:e0:58:48:87:87:4e:18:56:6b:33:f8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:02 2024 GMT
            Not After : Mar 10 19:10:02 2025 GMT
        Subject: CN=2C9A350FE94387B4696C10344FDDA56356F6391E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:32:57:4f:4a:67:a5:d3:b2:7c:31:d9:70:
                    10:62:b1:24:4e:f6:d2:5f:3a:ef:2e:a7:99:20:9c:
                    c5:b4:ff:fd:dd:7f:18:fa:24:e5:a0:2c:73:b7:93:
                    9a:a3:4f:ad:be:5a:ba:ac:54:cf:82:7f:50:e8:51:
                    bc:2e:79:ac:e9:0d:8e:62:6c:4a:5a:6c:e6:d1:f0:
                    89:0b:dc:34:7e:73:ee:3b:09:b4:42:15:ae:0d:11:
                    84:56:77:44:ec:74:49:a8:fb:cd:99:00:49:ca:af:
                    87:53:35:c5:87:3b:a7:65:64:7a:5d:a1:4f:81:05:
                    a3:af:a6:05:d9:ff:2e:c7:e2:a5:47:16:70:3d:c5:
                    bb:69:9b:af:70:29:51:de:b4:68:f3:08:05:9a:cc:
                    81:0f:bb:7d:69:5a:45:4a:0f:ed:9d:9e:10:db:af:
                    ce:0c:f2:b4:32:35:f1:34:ec:2a:80:d7:43:7a:7c:
                    1a:71:07:b9:7e:db:a0:d3:ca:4d:b3:2a:77:e1:d4:
                    60:a1:a6:e1:2e:26:26:93:38:d4:d3:ab:fe:ec:0a:
                    98:e0:70:f4:ad:2c:76:f9:76:10:95:dc:26:28:26:
                    dd:84:f9:84:f2:0b:14:19:40:76:00:1b:8a:a7:d6:
                    3a:70:3d:f6:14:c4:d1:3b:29:a3:42:10:3f:dd:0b:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9A:35:0F:E9:43:87:B4:69:6C:10:34:4F:DD:A5:63:56:F6:39:1E
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a333a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:cb:32:8f:61:5b:ba:cc:7a:c3:26:96:88:9e:e0:75:98:
         9d:55:71:27:3c:54:c0:9c:30:54:23:36:b2:26:f3:de:00:b6:
         3e:94:74:71:71:de:01:50:1c:71:a7:da:b1:13:c2:71:fb:34:
         75:ee:6d:78:14:0b:60:15:f8:d8:89:2a:3d:d8:31:ff:3d:c5:
         e7:1c:fa:a1:91:46:f6:cd:61:1b:41:75:4a:13:cd:4b:5a:0a:
         cc:60:f0:ce:1e:2a:31:0c:b6:f3:f8:19:cb:06:b4:b6:c6:51:
         90:e7:7a:9c:2a:5f:5f:6b:9f:a8:62:ee:92:b4:81:07:6b:3f:
         80:1d:59:59:57:23:fc:83:03:89:24:83:11:c3:fc:c3:40:b9:
         5d:6b:2d:1a:69:2d:f3:a6:ad:48:58:df:21:76:25:ce:4f:c5:
         4e:4a:4f:10:ba:53:48:52:83:e8:28:92:f7:23:89:a1:18:04:
         6a:a1:4b:82:c6:11:89:d6:dd:a9:34:3b:03:43:93:bc:eb:f8:
         5c:fc:7b:73:d1:cb:2c:6c:61:27:fa:bb:52:a5:dd:cc:c2:f0:
         77:0d:03:ed:c9:b4:45:1b:cc:bf:44:0a:ae:a6:11:5f:36:e0:
         dc:de:1a:b0:8f:d1:ac:c1:03:d1:64:55:88:13:88:b5:45:91:
         2e:8f:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:13 2024 by rpki-client on console-fra.rpki-client.org