Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3438303a3a2f34322d3438203d3e20323632313832.roa
File:                     323830333a6630303a3438303a3a2f34322d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          qKy9+0g8Z//UT+r00Mw9dRxQ87R2Ws1LfxCbdUxArJ8=
Subject key identifier:   8B:DF:C5:B6:D3:39:19:F7:1D:28:1C:A6:9B:31:18:FC:72:0F:D8:EC
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       22237DF5F34D40F2F8820A23135CCB76FC5773DF
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3438303a3a2f34322d3438203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:03 +0000
ROA not before:           Mon 11 Mar 2024 19:05:03 +0000
ROA not after:            Mon 10 Mar 2025 19:10:03 +0000
asID:                     262182
IP address blocks:        2803:f00:480::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:23:7d:f5:f3:4d:40:f2:f8:82:0a:23:13:5c:cb:76:fc:57:73:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:03 2024 GMT
            Not After : Mar 10 19:10:03 2025 GMT
        Subject: CN=8BDFC5B6D33919F71D281CA69B3118FC720FD8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:52:e0:7a:5f:01:df:75:b5:e8:8d:13:88:
                    5f:f3:ba:32:b6:24:63:42:2d:03:ab:97:be:a2:10:
                    54:d4:a5:45:21:2f:03:20:b6:65:f1:25:c0:29:12:
                    16:66:56:bb:34:4d:4d:ec:91:6e:ad:7f:27:30:79:
                    90:cd:4c:a7:ab:f0:61:b2:81:50:e1:06:04:8f:fb:
                    e2:d5:2d:41:84:53:98:67:67:41:70:aa:e0:02:f3:
                    d2:63:23:39:77:fb:e7:0d:f5:5a:5e:dc:79:49:39:
                    43:3c:0c:25:8f:d1:d4:c5:6f:18:e8:6c:7e:e2:96:
                    fe:f4:92:c6:72:e3:49:0f:de:65:3f:0b:1c:0b:85:
                    e1:d8:3d:46:46:61:2f:0b:21:53:81:a8:58:86:17:
                    b3:1c:4c:38:fe:7f:59:06:36:cc:27:94:3a:8e:83:
                    13:52:ec:e3:c8:5a:20:c3:5e:67:0b:96:eb:df:97:
                    3d:ea:ab:c0:34:5c:b1:3a:9d:7f:9c:fb:50:51:1e:
                    17:cd:bd:3c:86:db:80:c9:bd:9d:cb:2f:06:9a:9c:
                    88:58:bf:e6:4c:86:80:3c:c0:2d:18:4c:aa:c8:af:
                    87:27:a3:7f:0a:e2:1b:d5:9d:3f:74:4d:7d:fd:b6:
                    78:dd:98:25:9c:e8:5d:04:a5:d4:a9:16:5f:37:2a:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DF:C5:B6:D3:39:19:F7:1D:28:1C:A6:9B:31:18:FC:72:0F:D8:EC
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/323830333a6630303a3438303a3a2f34322d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f00:480::/42

    Signature Algorithm: sha256WithRSAEncryption
         46:39:fc:48:93:e0:ba:58:84:c3:b0:5e:c6:ab:fa:b0:2e:9f:
         40:8e:bc:65:c6:2e:de:68:54:8e:3c:8c:88:f9:a3:70:67:00:
         20:5f:96:aa:93:44:aa:c5:ca:b4:ea:40:44:8f:0d:52:8d:ee:
         25:66:35:c5:0b:63:72:0c:3a:fd:1c:9d:92:90:29:ec:8c:75:
         ff:06:8a:82:7d:c9:f4:02:aa:e1:42:2a:86:d4:06:5e:5f:57:
         25:d2:af:56:5b:c3:d2:dc:a4:d7:0b:cc:ee:cf:f5:3f:0c:1d:
         e4:69:72:9a:19:9e:ac:44:48:94:9b:b2:80:8d:ec:5d:3b:a0:
         6d:03:ce:fc:2b:1a:eb:31:92:3e:b3:e4:80:f3:99:23:40:0d:
         0a:a2:39:da:c6:3a:a7:89:55:9a:aa:b9:31:53:8e:5a:a6:85:
         d3:76:41:6c:ec:e6:73:e3:ef:b7:3e:4d:52:30:8f:ce:bb:35:
         8f:7a:b0:03:a4:a9:c0:14:5d:0d:6e:3e:05:0f:3a:4c:22:01:
         ea:eb:12:1d:53:4d:4f:99:93:2b:09:14:fe:0d:03:f8:72:36:
         3c:72:d8:b9:f0:ed:7a:7b:ad:e2:ff:3d:30:fb:0e:64:d1:e0:
         27:1e:1b:21:57:07:da:68:6b:c2:19:f4:50:9d:07:1c:0e:8f:
         bc:ec:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:01:59 2024 by rpki-client on console-ams.rpki-client.org